Crypto Industry Hit by US$3.4 Billion in 2025 Theft Incidents

The global cryptocurrency industry faced a significant security crisis in 2025,marked by high-profile thefts and a concentration of losses in a few significant incidents. Between January and early December, stolen funds exceeded US$3.4 billion, according to Chainalysis’ latest Crypto Crime Report.

A single breach in February at the Bybit exchange accounted for US$1.5 billion in losses—nearly half of the total for the year—highlighting a trend in which individual high-value attacks disproportionately impact industry-wide crime statistics.

The report indicates a structural shift in attack patterns, with the Democratic People’s Republic of Korea (DPRK) continuing as the primary threat actor in the ecosystem. North Korea-linked thefts totaled around US$2 billion in 2025, the highest annual figure on record, bringing cumulative DPRK-attributed losses to approximately US$6.75 billion. The three largest attacks of the year alone accounted for 69% of all service-related losses.

The report also noted a sustained rise in thefts targeting personal wallets—mobile apps, hardware devices, or browser extensions used by individuals to manage digital assets. Personal wallet compromises accounted for just 7.3% of total stolen value in 2022 but jumped to 44% in 2024. In 2025, excluding the disproportionate impact of the Bybit hack, personal wallet thefts represented roughly 37%, reflecting a shift toward targeting less-protected individual users.

Key Trends in 2025
Chainalysis highlighted four defining developments in cryptocurrency theft over the year:

• DPRK Persistence: Continued dominance of North Korea as a high-value threat actor.

• Increased Severity: Larger-scale attacks on centralized services.

• Individual Targeting: Growth in personal wallet compromises.

• DeFi Divergence: Shifts in vulnerabilities within decentralized finance compared to previous years.

Despite the rise in total stolen value, illicit activity still represents less than 1% of overall cryptocurrency transactions. Nevertheless, the increasing sophistication of cybercrime underscores the need for real-time monitoring and proactive security measures for both organizations and individual holders.