CertiK's annual report reveals that Web3 security incidents have caused $3.35 billion in losses this year. Half of these losses stem from supply chain attacks, including the notable Bybit hack. The report highlights a shift in hacker strategy towards attacking shared infrastructure, posing systemic risks to the crypto ecosystem.