Crypto Hacks in 2025 Exceed $3.4 Billion Across 313 Incidents

2025 witnessed significant cybersecurity challenges in the digital assets sector, with over $3.4 billion stolen across more than 300 major incidents.

  • Total Losses: Estimated between $3.3 billion and $3.4 billion due to differing methodologies.
  • Notable Heists:
    • Bybit: $1.5 billion stolen by North Korea's Lazarus Group through control of a cold wallet.
    • Cetus DEX: $220 million lost due to a rounding bug in a third-party math library.
    • Balancer: $116 million exploited via a rounding bug in stable pool logic.
    • Phemex: $73 million hacked, connected with Bybit incident.
    • Upbit: Over $30 million hack, led to a shift to cold storage.
  • Attack Vectors: Major attacks included compromised wallets and social engineering tactics.
  • Platform Focus: Infrastructure-level vulnerabilities, such as those at Bybit, resulted in significant losses, while DeFi platforms saw numerous smaller-scale incidents.
  • Trend Shift: A noticeable shift towards human-factor compromises like executive impersonation and key theft was observed, indicating a move away from purely technical exploits.

The year highlighted the need for enhanced security measures against both technical and social vulnerabilities in the crypto space.