$3.1 Billion in Crypto Lost in 2025’s Painful First Half: Hacken

Midway by way of 2025, the crypto business has already suffered over $3.1 billion in losses from hacks, scams, and exploitations.

Based on Hacken’s newest report, this yr has emerged as one of the crucial damaging in current reminiscence.

Entry-Management Exploits Dominate Losses

The most recent determine surpasses final yr’s $2.85 billion by over 6%, as safety lapses throughout the sector proceed. In a press release, Hacken Co-Founder and CBDO Yevheniia Broshevan said,

“2025 has been a wake-up name. In simply two quarters, $3.1 billion was misplaced to entry management failures, DeFi vulnerabilities, and social engineering. As blockchain reaches enterprise scale and rules advance, cybersecurity turns into a core enterprise perform. Tasks that put money into resilience and safety construct belief, meet compliance, and shield digital innovation.”

The one largest incident was the Q1 Bybit hack, the place attackers drained practically $1.5 billion. The incident alone accounted for 83% of Q1’s complete losses and highlighted the catastrophic dangers tied to compromised entry management methods.

In complete, access-control exploits dominated the panorama and have been accountable for about 59% of all funds misplaced, roughly $1.83 billion, throughout DeFi and CeFi platforms.

DeFi Suffers Worst Quarter Since 2023

DeFi suffered its worst quarter since early 2023, with $300 million drained in Q2 alone. Good contract flaws performed an important function, as this cohort accounted for 8% of complete crypto losses and led to $263 million stolen, together with $223 million within the main Cetus exploit this yr.

Phishing and social-engineering scams additionally surged to new information. In reality, a single incident in April noticed a sufferer lose $330 million in Bitcoin after being tricked, whereas phone-based scams mimicking Coinbase assist drained over $100 million following a contact knowledge leak.

Whereas Q1 was marred by large-scale entry management failures, Q2 was comparatively quieter. The interval witnessed beneath $200 million misplaced to comparable exploits, but a number of high-profile incidents confirmed how a single overpowered function or leaked key can allow attackers to empty methods inside minutes.