Crypto Hacks Hit $2.1B in H1 2025 as Infrastructure Breaches Rise
2025/06/27 08:15
- Infrastructure breaches accounted for over 80% of crypto losses, totaling $2.1B in H1 2025.
- North Korea-linked hackers stole $1.6B, making up 70% of all H1 2025 crypto thefts.
- Crypto hacks in H1 2025 matched the total number of exploits seen throughout 2024.
TRM Labs, a blockchain intelligence firm, reported that crypto hackers stole approximately $2.1 billion in the first half of 2025. More than 80% of these losses were attributed to infrastructure breaches, which include private key thefts, seed-phrase exploits, and the compromise of front-end platforms. These incidents averaged ten times the loss associated with typical protocol exploits, underscoring their severity.
TRM Labs said most of these attacks were made possible through social engineering or insider access. The firm defined infrastructure breaches as targeting the backbone of crypto operations, wallets, interfaces, and authentication systems, rather than exploiting on-chain logic. The scale of these incidents pushed the average hack size in 2025 to $30 million, up from $15 million in the same period last year.
Source:
TRM Labs
An additional 12% of the loss was attributed to protocol-based vulnerabilities, including flash loans and re-entrancy attacks on smart contracts. These bugs expose the logical vulnerabilities of decentralized applications and continue to pose a significant concern in the decentralized finance (DeFi) industry.
North Korea-Linked Hackers Behind Most Crypto Thefts in 2025
TRM Labs attributed $1.6 billion, nearly 70% of all stolen funds, to state-backed groups linked to North Korea. The largest single incident in February was the compromise of Bybit, resulting in a loss of $1.5 billion, with the Lazarus Group identified as the primary suspect. This hack alone distorted the average size of hacks and almost reached the total theft in 2024.
The report also mentioned an attack in June, where an Israeli-aligned hacking group, Gonjeshke Darande, infiltrated Iran’s Nobitex exchange. That attack resulted in a $90 million loss, with funds sent to wallets marked as “unspendable.” TRM highlighted this breach as an example of cryptocurrency theft being used as a geopolitical tool.
Related: Crypto Trading Hours Limited After Nobitex $100M Hack: Report
Crypto thefts in January, April, May, and June all exceeded $100 million. The frequency and magnitude of theft indicate growing coordination among cybercriminal groups and the continued vulnerability of crypto platforms to organized attacks.
TRM Urges Coordinated Industry Response and Stronger Safeguards
To mitigate the growing threat, TRM Labs encouraged the sector to implement enhanced security measures. These include improving cold storage, implementing advanced multi-layered verification, and detecting insider threats. Moreover, the company emphasized that systems should be audited frequently by on-chain protocols and increase front-end security to minimize the attack surface.
The report also called for improved collaboration between exchanges, developers, and law enforcement agencies. TRM noted that cross-border investigations and real-time information sharing are critical to disrupting state-sponsored cyber activity.
Hackers have increasingly used stablecoins like the USDT on TRON to launder stolen assets. Mixers, cross-chain bridges, and chain-hopping are still usually used as obfuscation strategies. These tools enable attackers to transfer funds across several networks, making recovery difficult.
TRM Labs concluded that the crypto industry needs a unified and strategic approach to address rising threats. Without industry-wide cooperation and enforcement, the scale of future attacks could increase even further. According to the firm, the first half of 2025 has already set a concerning precedent.
The post Crypto Hacks Hit $2.1B in H1 2025 as Infrastructure Breaches Rise appeared first on Cryptotale.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Micron plunges 22% in a week, is it a buying opportunity for memory chips? Bank of America bets on supercycle extending to 2028
The bullish forecasts by top Wall Street investment institutions such as Bank of America are underpinned by an AI training paradigm dominated by RSI, the expansion of AI agent applications focused on efficient AI inference processes, and the rising demand for HBM, server memory, and enterprise SSDs. Meanwhile, advanced manufacturing processes, capacity conversion, and yield ramp-up are restricting supply release, and long-term supply agreements are further improving sales visibility.
Australian Dollar breaks 0.69 as hot US CPI raises 50-bp Fed hike risk
Philadelphia Fed President Paulson supports gradual rate hikes but warns inflation is still “stuck” above target
Core inflation is "stuck" in the 2.5%-3% range, with triple pressures from tariffs, energy, and AI data center demand. Paulson insists on gradual rate hikes while setting clear trigger conditions—if inflation expectations shift upwards or wage pressures build, he will move more quickly. Meanwhile, Governor Waller stated that if October's core CPI rises 0.3% month-on-month, a 50 basis point rate hike in December should be considered. Dallas Fed's Logan said at least two more rate hikes are needed.
During Anthropic IPO roadshow, OpenAI also discloses financial data: Q3 revenue falls short, losses far exceed expectations
OpenAI's revenue in Q3 reached $10 billion, marking a nearly 50% quarter-on-quarter increase. Its annualized run rate is approximately $50 billion, but operating losses have expanded from $10.1 billion to $10.9 billion. Competitor Anthropic has begun its IPO roadshow, with Q3 revenue of $17 billion and losses of only $567 million, leading in both scale and profitability.
Crypto prices
More
