In 2025, the crypto industry has gone through the largest number of cyberattacks ever recorded, with the cumulative losses on high-profile attacks totaling over $2.2 billion dollars. The intensity, frequency and variety of attack modalities have become a major concern on the security standards in the digital asset ecosystem.
The biggest attacks of the year include trading platforms, DeFi protocols, and infrastructure providers, which proves that no one is safe in the market.
Bybit Hack Emerges as the Largest Crypto Breach
First on the list is the Bybit hack that took place on February 21, 2025, and it cost an incredible amount of money, $1.4 billion. The attackers used a phishing attack on a Safe multisignature wallet and were able to avoid internal verification and drain assets in bulk, according to the report. This single attack contributes over fifty percent of overall losses experienced in the list of the biggest hacks of the year.
The Bybit hack caused ripples through the industry with multisig wallet security and internal access management practice in major exchanges being subjected to increased scrutiny.
DeFi Protocols Targeted by Complex Exploits
In 2025, decentralized finance platforms were also severely hit, with multiple high-profile attacks taking advantage of the smart contract design and liquidity mechanisms. On May 22, Cetus fell victim to a hack, and its assets worth $223 million were stolen according to a spoof token exploit that was used to compromise asset validation. A subsequent attack occurred on November 3 the following year, with Balancer losing $128 million related to a composable stable pools exploit.
Such breaches showed some longstanding weaknesses in DeFi designs, especially when composability and automated market components present unanticipated attack surfaces.
Centralized Exchanges Face Structural Weaknesses
Other centralized exchanges have also had significant breaches during the year, in addition to Bybit. On April 20, Bitget lost $100 million due to a liquidity operation in the market-maker exploit. On January 23, Phemex was hacked and an $85 million loss was incurred as a result of exposure of the private keys whereas on June 18, Nobitex incurred a loss of $82 million after being compromised in a hot wallet attack.
They highlighted continuous threats related to the key management, wallet segregation, and internal operational security in central platforms.
Private Key Compromises Remain a Critical Threat
One of the most widespread and harmful attack methods of 2025 was the compromise of the private keys. Stream Finance spent $93 million on November 4, Phemex spent $85 million earlier in the year, and BtcTurk announced a breach of personal keys to the tune of 48 million on August 14.
The recurrent character of the incidents implies that after years of warnings, major storage and access policies are still a vulnerable point throughout the industry, especially in combination with human error or insufficient supervising.
Security Oversight and the Road Ahead
Others with noteworthy breaches were UPCX, who incurred a loss of $70 million on April 1, as a result of access control loss, and Infini, who lost a total of $49.5 million on February 24, as a result of developer privilege misuse. These examples demonstrate that technical weaknesses and failures in governance systems may result in disastrous consequences.
With further growth of crypto adoption, the magnitude of loss in 2025 has led to increased calls in regard to more stringent security audits, better internal controls and more transparent risk disclosures. Regulators and even industry leaders are currently feeling the pressure to deal with the systemic weaknesses before more erosion of user confidence comes about.
After losing billions within a year, 2025 could become a year to remember as the crypto industry will have to focus on security as much as on innovation.
