.jpeg)
The crypto industry saw a significant recovery of $181 million from hackers in Q2 2025, yet still faced substantial adjusted losses totaling $620.4 million. While the number of security incidents decreased, major breaches like the Bybit hack skewed overall loss figures, highlighting persistent vulnerabilities despite recovery efforts.
Crypto Security Landscape in Q2 2025
In the second quarter of 2025, the crypto and Web3 sectors experienced over $801.3 million in losses across 144 security incidents. This represents a notable 52.1% decrease in the value lost compared to the previous quarter, with 59 fewer incidents reported. Despite these improvements, the adjusted losses, after accounting for recovered funds, remained high at $620.4 million.
Key Attack Vectors and Impact
Phishing emerged as the most damaging attack vector, responsible for $395 million in losses across 52 incidents. Code vulnerabilities followed, leading to $235.8 million in losses from 47 incidents. Ethereum was the most targeted network, enduring 70 hacks, scams, and exploits, resulting in $65.4 million in losses during the quarter.
Recovery Efforts and Adjusted Losses
During Q2 2025, a total of $181 million in stolen funds was successfully recovered. This recovery brought the adjusted total losses for the quarter down to $620.4 million. The average loss per incident was approximately $4.3 million, with a median loss of around $104,000.
First Half of 2025 Overview
Looking at the first half of 2025, total losses reached $2.47 billion across 344 incidents. Wallet compromises were the most costly, accounting for $1.71 billion in losses from 34 incidents. Phishing attacks, while less costly individually, were the most frequent, with $410.7 million stolen across 132 incidents.
For the first half of the year, Ethereum recorded 175 incidents, leading to $1.63 billion in losses. With $187.3 million recovered, the adjusted total losses for H1 stood at $2.29 billion. The average loss per incident for this period was $7.13 million, with a median loss of $89,026.
The Impact of Major Hacks
While the overall figures suggest a challenging security environment, two significant incidents heavily influenced the total losses for 2025:
-
Bybit Hack (February 2025): This incident involved the exploitation of Bybit's cold wallet infrastructure, leading to the theft of over $1.5 billion in Ether. The Lazarus Group, a North Korean state-sponsored hacking entity, was identified as responsible.
-
Cetus Protocol Breach (May 2025): The Sui-based Cetus suffered an exploit due to an overflow check vulnerability in its liquidity calculation function, resulting in $225 million in losses.
Without these two major incidents, the total losses for 2025 would be significantly lower, at approximately $690 million. This indicates that while the headline figures appear severe, the broader security trend might not be as dire as the raw numbers suggest, with a few large-scale attacks disproportionately impacting the overall statistics.
Key Takeaways
-
Q2 2025 saw a decrease in the number of crypto security incidents and the total value lost compared to the previous quarter.
-
Phishing and code vulnerabilities were the primary attack methods, with Ethereum being the most targeted network.
-
Significant recovery efforts led to $181 million being recouped in Q2, reducing adjusted losses.
-
Two major hacks, Bybit and Cetus Protocol, heavily skewed the overall loss figures for the first half of 2025.
-
Despite high overall losses, the underlying trend, excluding these outlier events, suggests a less severe security landscape.
Sources
This article was created with support from AI-driven technology, drawing on multiple reputable sources. The final content has been thoroughly reviewed and edited by BlockzHub's editorial team to ensure accuracy, clarity, and coherence. Original reporting sources are credited whenever appropriate and as required. The opinions expressed in this article do not necessarily represent the official views or positions of BlockzHub. This article is intended for informational purposes only and should not be considered financial or professional advice. Investing involves risk, and you should consult a qualified financial advisor before making any investment decisions.