2025 is already on track to be the worst year ever for cryptocurrency security . According to blockchain analytics and fraud tracking companies, cybercriminals managed to steal a total of $2.7 billion in crypto, setting a new all-time record.
This amount results from dozens of attacks targeting cryptocurrency exchanges, decentralized finance (DeFi) platforms, and web3 projects, demonstrating that the ecosystem's defense mechanisms remain inadequate against increasingly organized and technically skilled attackers.
The mammoth attack on Bybit that changed the world
See also: React2Shell exploit distributes crypto miners
The biggest breach of 2025 was undoubtedly the one that hit Dubai-based cryptocurrency exchange Bybit. That attack alone led to the theft of approximately $1.4 billion in crypto, accounting for more than half of the year’s total losses.
Blockchain analysis companies and the FBI attributed the attack to state-backed North Korean hackers, who in recent years have been considered the most effective and dangerous "players" in the crypto attack space.
The details of blockchain companies
According to data shared with TechCrunch, both Chainalysis and TRM Labs estimate the total amount stolen in 2025 to be $2.7 billion. Chainalysis even recorded an additional $700,000 removed from individual wallets, outside of major platforms.
See also: The US shut down crypto exchange service E-Note
A similar assessment was presented by De.Fi, a web3 security company that maintains the REKT database, which systematically monitors incidents of hacks and exploits in the cryptocurrency ecosystem.
North Korea at the center of investigations
As in previous years, hackers linked to the North Korean regime dominated in 2025. According to Chainalysis and Elliptic, groups associated with Pyongyang stole at least $2 billion this year alone.
Since 2017, the same sources estimate that North Korean groups have siphoned off a total of about $6 billion in cryptocurrencies. These funds are allegedly being used to finance the country's nuclear and ballistic missile programs , bypassing international sanctions.
Other major attacks that marked 2025
In addition to Bybit, several other attacks have caused serious market shocks. Decentralized exchange Cetus suffered a breach that netted hackers $223 million, while Ethereum-based protocol Balancer lost $128 million due to an exploit in its code
Additionally, the Phemex announced losses of over $73 million, adding yet another episode to the long list of victims.
See also: Amazon: Cryptomining campaign uses compromised AWS accounts
A worrying upward trend
The data clearly shows that attacks are not only not decreasing, but are increasing year after year. In 2024, total losses from hacks reached $2.2 billion, while in 2023 they had reached $2 billion.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
This continued rise suggests that cybercriminals are moving faster than security controls, exploiting weak smart contracts, poor key management, and human error.
What does this mean for the future of crypto?
The new record thefts raise serious questions about the sustainability and maturity of the cryptocurrency ecosystem. Without substantial investments in security, stricter controls, and better education of users and developers, losses are likely to continue to increase.
2025 acts as a wake-up call: blockchain may be decentralized, but the responsibility for protecting digital assets remains more critical than ever.
