$ 3.1 billion in crypto lost in the painful first half of 2025: hacking

In the mid -2025, the crypto industry has already suffered more than $ 3.1 billion in losses due to hacks, scams and exploitation.

According to the latest report from Hacken, this year has emerged as one of the most harmful in recent memory.

Access-Control Exploits Dominate Losing Losing

The last figure surpasses the $ 2.85 billion from last year by more than 6%, because security in the sector expires. In a statement, co-founder and CBDO Yevheniia Broshevan said”

“2025 has been a wake-up call. In just two quarters, $ 3.1 billion was lost for access control, defi-vulnerabilities and social engineering. While blockchain and business scale and regulations are reaching progress, cyber security becomes a nuclear business function. Projects that invest in resilience and security confidence.”

The biggest incident was the Q1 Bybit -Hack, where attackers emptied almost $ 1.5 billion. The incident alone accounted for 83% of the total losses of Q1 and emphasized the catastrophic risks that are linked to compromised access control systems.

In total, access control exploits dominated the landscape and were responsible for around 59% of all lost funds, around $ 1.83 billion, on Defi and Cefi platforms.

Defi suffers the worst quarter since 2023

Defi suffered his worst quarter since the beginning of 2023, with only $ 300 million in Q2. Smart contract errors played a crucial role, because this cohort was good for 8% of the total crypto losses and led to $ 263 million stolen, including $ 223 million in the large CETUS exploitation this year.

Phishing and social engineering scammers also rose to new records. A single incident in April saw a victim losing $ 330 million in Bitcoin after being cheated, while telephone-based scams that imitate Coinbase support after a contact data leak of more than $ 100 million.

While the Q1 was marred by errors on large -scale access control, Q2 was relatively quieter. The period that was witnessed less than $ 200 million lost to comparable exploits, but various high -profile incidents showed how a single overwhelming role or leaked key can enable attackers to dispose of systems within a few minutes.