$2.1 billion lost to ‘crypto' exploits in 2025: CertiK
Homepage > News > Business > $2.1 billion lost to 'crypto' exploits in 2025: CertiK
Getting your Trinity Audio player ready...
In the first five months of 2025, over $2.1 billion worth of digital assets have been lost to cyber criminals, says blockchain security audit firm CertiK.
The New York-based firm revealed the figure two weeks ago, and in a recent podcast appearance, founder Ronghui Gu added that the majority of the funds had been lost to wallet compromises, private key mismanagement, and operational failures.
#CertiKInsight 🚨
Thus far in 2025, on-chain incidents have led to ~$2.1B in losses.
The majority of losses have come from wallet compromises and phishing, with an increase in data leaks its important to remain vigilant. pic.twitter.com/Cjm6QFHWqX — CertiK Alert (@CertiKAlert) May 23, 2025
'This is a shift in attack patterns. It also shows the evolution of the current infrastructure because attackers always target the weakest points. Previously, the weakest points were smart contracts and the blockchain code itself. Now, attackers feel like the weakest points come from human behavior, rather than the infrastructure,' Gu stated.
The Bybit hack earlier this year remains the largest. Attackers supposedly accessed the exchange's cold wallet and made off with $1.5 billion worth of ETH, in what security researchers from Elliptic described as 'almost certainly the single largest known theft of any kind in all time.'
Coinbase (NASDAQ: COIN), America's largest exchange, also faced an attack in which criminals accessed the personal data of some of its users. The exchange told the Securities and Exchange Commission (SEC) that the attack could cost it up to $400 million.
At $2.1 billion in five months, this year's stolen assets are on course to dwarf last year's total of $2.2 billion. Chainalysis said the figure would have been much higher, but North Korean-linked hacking groups slowed down activity after July. These groups reportedly accounted for $1.3 billion in stolen 'crypto' last year, more than half the total figure.
The record was set in 2022 when cybercriminals stole $3.7 billion worth of digital assets in 231 attacks. However, the record number of attacks was 303 in 2024.
According to Gu, attackers are increasingly relying on social engineering, a tactic in which they manipulate victims to reveal confidential wallet information or grant them access to their accounts. This is mainly done through phishing, where they send fraudulent links that, once clicked, redirect the victims to illicit websites controlled by the attackers.
This is what happened to a recent victim who lost a staggering $330 million to cybercriminals in an attack that now ranks as the largest on an individual and the fifth-largest overall.
Blockchain sleuths revealed a month ago that the victim was an elderly American citizen who was tricked into giving the attackers access to her 3,520 BTC, which the victim had held since 2017.
The funds were quickly laundered through multiple accounts on nearly two dozen centralized exchanges, including Binance. A large portion was first converted to Monero, a privacy-focused digital asset that makes it nearly impossible to trace the stash.
Cisco: 96% of businesses not prepared for cybersecurity threats
While 'crypto' attacks are on course for their biggest year, a report from Cisco says that only 4% of global firms have achieved the maturity required to withstand today's cyberattacks.
The tech giant's Cybersecurity Readiness Index revealed that maturity had increased slightly from last year's 3% but still remains worryingly low as artificial intelligence (AI) and hyperconnectivity increase the complexities for security professionals.
AI, in particular, has exacerbated the threat that enterprises face. Last year, 86% of global organizations faced AI-related security incidents, but only 49% were confident in their employees' ability to handle these threats.
'As AI transforms the enterprise, we are dealing with an entirely new class of risks at unprecedented scale – putting even more pressure on our infrastructure and those who defend it,' commented Jeetu Patel, Cisco's Chief Product Officer.
'This year's report continues to reveal alarming gaps in security readiness and a lack of urgency to address them. Organizations must rethink their strategies now or risk becoming irrelevant in the AI era.'
But while AI is amplifying the threat, it has also become a critical tool for security professionals. Cisco found that 89% of organizations use AI to detect and understand the threats they face, while 7 in 10 use it for response and recovery.
The talent shortage has also become a massive challenge. According to the report, 86% identified the lack of skilled professionals as a major challenge; more than half the respondents have over 10 positions in cybersecurity to fill.
Watch | Certihash Sentinel Node: Improving cybersecurity with blockchain
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Daily Mail
24 minutes ago
- Daily Mail
Heir to billion-dollar beauty empire dies aged 92
Leonard Lauder, who for 17 years ran beauty behemoth Estée Lauder after his mother's death, has died aged 92. The American businessman was the eldest son of Estée Lauder, after whom the cosmetics brand she founded is named, and her husband Joseph. Lauder, along with his much-younger brother Ronald, 81, inherited control of the company from their parents. He was most recently estimated to be worth $32.3 billion, as of September 2021, making him at the time the 44th richest person in the world. Lauder died on Saturday, the company said without specifying a cause of death. More to come.
Telegraph
38 minutes ago
- Telegraph
The Iran-Israel conflict calls for cool heads
The last time world leaders gathered for an economic summit in Canada it collapsed in acrimony. In a famous photograph, Angela Merkel, then German chancellor, could be seen berating a seated and petulant-looking Donald Trump in an image that symbolised the breakdown in global harmony. Suddenly, allies were pitched against one another on matters they once approached with a common purpose, whether it be trade or security. Apart from Emmanuel Macron, the French president, every other leader in the photograph has gone. Mr Trump, of course, is back and the same divisions are apparent. One of the disagreements at that G7 meeting was over his decision to scrap a deal brokered by Barack Obama and the UN security council to divert Iran from its efforts to develop a nuclear weapon capability. Mr Trump took the view that Iran could not be trusted, something seemingly confirmed by Tehran's continued enrichment programme. Those who argue this would have been halted had the original deal, known as the Joint Comprehensive Plan of Action (JCPOA), been carried through need to explain why they would have any confidence in the Iranian regime to abide by its terms. Most critical of all were the Israelis, who feared the JCPOA was just a cover for Iran to continue work on a nuclear weapon with impunity. They were never going to let that happen whatever deal was reached by countries who did not face the same existential threat from the mullahs in Tehran. The G7 in Canada, therefore, which had been expected to focus on Ukraine, Russia and tariffs, is now reaping the whirlwind of the failure to deal with Iran until it was almost too late. The regime has fomented conflict throughout the region, sponsoring groups such as Hezbollah and Hamas intent on seeing Israel destroyed. Most of the problems in the Middle East can be laid at Iran's door, not that the idiots waving Iranian flags in London at the weekend understand that or care since their hatred of Israel – the only democracy in the region – is all-consuming. The impact of a prolonged war hitting energy supplies just as the world economy is dealing with tariffs and falling output will be considerable, especially if Iran closes the Strait of Hormuz. The G7 leaders of democratic states need to have a clear eye on who the enemy is and to give Israel their full support in dealing with this evil menace.
Reuters
40 minutes ago
- Reuters
Washington Post investigating cyberattack on journalists, WSJ reports
June 15 (Reuters) - A cyberattack on the Washington Post compromised the email accounts of several journalists and was most likely the work of a foreign government, the Wall Street Journal reported on Sunday. Matt Murray, the Washington Post's executive editor, said in an internal memo that the breach was discovered on Thursday and an investigation had been initiated, the WSJ reported. Staffers at the Washington Post were told the intrusions compromised journalists' Microsoft (MSFT.O), opens new tab accounts and could have granted the intruder access to work emails, the WSJ reported, citing people familiar with the situation. The reporters whose emails were targeted included members of the national security and economic policy teams, including some who write about China, the report added. The Washington Post did not immediately respond to Reuters' request for comment. In 2022, News Corp (NWSA.O), opens new tab, which publishes the WSJ, was breached, opens new tab by digital intruders. The email accounts and data of an unspecified number of journalists were compromised in that incident.
