In 2025, cryptocurrency hacks resulted in losses totaling $3.3 billion, with a significant portion stemming from supply-chain breaches, as reported by blockchain security firm CertiK. The data indicated a shift in the threat landscape, highlighting that while the total losses remained high, the number of incidents fell sharply by 162 cases year-over-year, suggesting improvements in blockchain security measures.
Among the losses, $1.45 billion was attributed to supply-chain attacks, with the notable $1.4 billion hack of Bybit in February marking a major incident. Additionally, phishing scams emerged as a serious concern, costing investors $722 million across 248 incidents. The average loss per hack increased to $5.3 million, a significant rise of 66% compared to the previous year, while the median theft size decreased to $103,966, a drop of 35.75%.
CertiK's report emphasizes the growing sophistication of attackers, suggesting a trend towards targeting infrastructure providers, which could lead to more complex supply-chain exploits in the future.