Crypto exploits are on a steep decline, with only $76 million stolen by December 2025

December’s losses were spread across 26 incidents, with fewer large-scale breaches than a total absence of attacks.

Blockchain security company Peckshield has shared that December 2025 ended with a surprising decline in crypto exploitation losses.

Data from the chain shows that figures have fallen by 60% compared to November.

$76 million lost in 26 incidents

According to the Peckshield report revealed via This figure represents a 60% decline from November’s $194.2 million.

The biggest hack during this period was a $50 million address poisoning scam, where attackers spoofed wallet addresses to trick a user into misdirecting funds. Another notable incident involved a $27.3 million multisig breach on a wallet identified as 0xde5f…e965, which was compromised by a private key leak.

Other attacks that made it into the top 5 include the babur.sol exploit, which resulted in $22 million in losses. The Trust Wallet hack, which took place around Christmas, involved a trojanized Chrome extension uploaded via a compromised Web Store API key and GitHub secrets, leading to the theft of $8.5 million in user funds.

Unleash Protocol also suffered a $3.9 million loss in December after a hacker gained control of its multisig management and performed an unauthorized contract upgrade. Meanwhile, the Flow blockchain suffered a $3.9 million breach caused by a vulnerability in the execution layer that allowed the attacker to mine and transfer assets between services before the network was shut down.

Crypto Industry to Lose More Than $2.2 Billion to Hacks by 2025

Despite the dip in December, on-chain data shows that 2025 was another challenging year for the digital asset sector, with more than $2.2 billion lost in the top 10 hacks. February’s $1.4 billion hack of Bybit, in which attackers extracted approximately 401,000 ETH from the exchange’s wallet, remains the most devastating hack of the year.

You might also like:

Other major incidents included Cetus, a DEX with concentrated liquidity on Sui, which lost $223 million in May after attackers exploited a protocol flaw to manipulate prices and drain liquidity.

Balancer V2 also suffered a $128 million exploit in November tied to a rounding error in its composable stable pools, while Bitget reported approximately $100 million in losses in April due to manipulation of its VOXEL market-making infrastructure.

Centralized exchanges have also been targeted, with Phemex suffering an $85 million hot wallet breach in January and Iran-based Nobitex falling victim to $80-90 million stolen from hot wallets in June. In both cases, the platforms froze withdrawals, protected remaining assets and worked to resume services, while the amount recovered from losses varied.