Cryptocurrency hacks in September totaled over $120 million, with centralized exchanges BingX and Indodax accounting for more than half.