According to ChainCatcher, as reported by CoinTelegraph, data from blockchain security company CertiK shows that cryptocurrency hackers stole $3.3 billion in 2025, with supply chain vulnerabilities becoming the most destructive threat, resulting in losses of $1.45 billion from just two incidents, including the $1.4 billion hack suffered by Bybit in February. The average loss per hack was $5.3 million, a 66% increase from the previous year.
However, the data also shows that the number of security incidents has sharply decreased, down by 162 compared to the previous year, indicating that protocol-level security is improving, forcing attackers away from simple code vulnerabilities and towards phishing and infrastructure-level attacks. Reports indicate that phishing scams have become the second largest threat, with cryptocurrency investors cumulatively losing $722 million across 248 incidents.