News View Non-AMP

Crypto Hacks in H1 2025 Exceed $2.2B

Published by
Elena R and Zafar Naik

The crypto industry lost over $2.2 billion in the first half of 2025 due to hacks, scams, and security breaches, surpassing the total losses of 2024, according to CertiK’s H1 2025 “Hack3d” Web3 Security Report.

CertiK recorded 344 on-chain incidents between January and June. Wallet breaches accounted for $1.7 billion in just 34 cases, while phishing scams caused $410 million across 132 incidents.

The largest exploit occurred in February when Bybit lost $1.5 billion in a wallet breach involving staked ETH. In May, Cetus Protocol was exploited for $225 million via a smart contract bug, although $162 million was later recovered by Sui validators.

Ethereum Targeted Most; Code Bugs Surge

Ethereum was the most attacked blockchain, with 175 incidents leading to $1.6 billion in losses. Smart contract vulnerabilities alone caused $229 million in May, up sharply from just $5 million in April.

CertiK also flagged an increase in physical attacks, with 32 cases involving violence, kidnappings, and ransom attempts. France saw the most incidents, including an attempted kidnapping involving the family of Paymium’s CEO.

Funds Recovered, But Risks Mount

Approximately $187 million was recovered through whitehat efforts, law enforcement, and exchange cooperation. However, with attacks becoming more complex and violent, stronger security practices are urgently needed.

A key vulnerability remains poor private key management. Keys are often stored insecurely, unencrypted, or controlled by one person, making them easy targets for hackers. This single point of failure has contributed to billions in losses and remains one of the crypto industry’s biggest risks.

FAQs

What are the biggest crypto hacks of 2025 so far?

Major 2025 hacks include $400M from Coinbase, $220M from Cetus, and millions more from BSC, Phemex, and UPCX exploits.

How can I protect my crypto wallet from phishing attacks?

Avoid unverified contracts, never share keys, and regularly review approvals to secure your wallet from phishing.

How can I identify and avoid common crypto phishing scams and fraudulent websites?

Beware of unsolicited emails, messages, or social media offers promising unrealistic returns or free crypto. Always double-check URLs for misspellings, verify sender domains, and never click suspicious links. Legitimate platforms will never ask for your private keys or seed phrases.

Elena R and Zafar Naik

Elena is an expert in technical analysis and risk management in cryptocurrency market. She has 10+year experience in writing - accordingly she is avid journalists with a passion towards researching new insights coming into crypto erena.

Recent Posts

Next Shiba Inu Search Finds 100x Potential as Pepeto, SHIB, and ETH Align Before the Glamsterdam Upgrade

One investment at the right moment has the power to change everything, and the wallets…

April 3, 2026

Ethereum Foundation Stakes Additional $46.64M

The Ethereum Foundation has increased its staked ETH by about $46.64 million, bringing its total…

April 3, 2026

Next Pepe Coin Search Heats Up After $285M Hack Shakes Solana While Pepeto, PEPE, and BTC Draw Capital

The biggest crypto exploit of 2026 just drained $285 million from a Solana trading protocol,…

April 3, 2026

Riot Platforms Sells 3,778 BTC in Q1 2026

Riot Platforms, one of Nasdaq’s largest publicly traded Bitcoin mining companies, sold 3,778 BTC in…

April 3, 2026

Calculated Ambition: ChangeNOW Defies Market Uncertainty with New Dubai Headquarters

ChangeNOW, a reputable crypto exchange platform that has spent nearly a decade championing user-controlled crypto…

April 3, 2026

Bitcoin Price Prediction: Top 3 Scenarios as Iran War Exposes Market Fragility

Bitcoin is trading at $66,804, up 0.58% over the past 24 hours, nursing a 47%…

April 3, 2026