SlowMist: 48 X hijacks signal shift to phishing attacks now.

200 Crypto Security Incidents in 2025 Cost Nearly $3 Billion; Bybit Accounted for $1.5 Billion

  • SlowMist reported about 200 major security incidents in 2025, causing roughly $2.94 billion in losses.
  • Decentralized finance (DeFi) saw the most incidents, but centralized exchanges suffered the largest financial hits, led by a $1.5 billion breach at Bybit.
  • Attackers shifted toward phishing and social engineering, including 48 cases involving hijacked X accounts.
  • Only about 13% of stolen funds were recovered or frozen, raising security and compliance concerns for 2026.

According to the SlowMist report, the blockchain sector recorded roughly 200 major security incidents in 2025 that resulted in about $2.94 billion in estimated losses. The firm said attacks became fewer but more damaging, driven by phishing, social engineering, and Ponzi schemes.

- Advertisement -

SlowMist’s Hacked archive shows incidents fell from 410 in 2024 to 200 in 2025, while losses rose about 46% year over year from roughly $2.01 billion. The figures use token prices at the time of each incident and exclude undisclosed cases and many retail losses.

DeFi experienced the most incidents—126, about 63% of cases—with losses near $649 million. Centralized trading platforms reported 12 incidents but suffered the largest combined loss, about $1.81 billion, much of which came from a breach at Bybit, described by CNBC as “the largest crypto heist on record.”

A suspected attack affected Cetus Protocol, a Sui ecosystem liquidity provider, reducing liquidity across pools and lowering several token trading-pair prices. Sui (SUI) traded at $1.44, down 0.9% over the past day, with retail sentiment on Stocktwits remaining in “bearish” territory.

Data showed attackers increasingly used social manipulation rather than smart-contract exploits, with 48 incidents involving hijacked X accounts. Phishing: a tactic to trick users into revealing credentials or approving transactions. Account takeover: unauthorized access to a user’s account enabling fraud or theft.

- Advertisement -

SlowMist reported that only about 13% of stolen funds were recovered or frozen in 2025. With attacks growing more organized and regulators tightening oversight, the firm said security and compliance are becoming minimum operating standards for crypto firms heading into 2026.

✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.

Previous Articles:

- Advertisement -

Latest News

Kraken Gets Fed Master Account, Banks Cry Foul

Kraken secured a Federal Reserve master account on Wednesday, becoming the first crypto bank...

Palihapitiya: Bitcoin’s Public Ledger A “Structural Failing”

Billionaire investor Chamath Palihapitiya argues Bitcoin has a "structural failing" in fungibility and privacy,...

Justin Sun’s Rednote Account Banned Amid Stock Drop

Tron founder Justin Sun has been banned from Rednote (Xiaohongshu), losing his last major...

BTC Death Cross Looms: Bullish Catalyst Needed to Save Rally

Bitcoin's price rally this week is confronting a stern technical warning that the broader...

New RFP Guide for AI Governance & Usage Control

Security leaders have new budgets for AI security but often lack clear requirements for...

Must Read

Are Cryptocurrency Securities?

TL;DR - Cryptocurrencies are not typically considered securities, as they are decentralized digital assets that operate independently of any central authority or government. However,...
🔥 #AD Get 20% OFF any new 12 month hosting plan from Hostinger. Click here!