$127 Million Lost in September as Crypto Hacks Target RWAs and DeFi Projects
Losses from crypto attacks fell in September, but more incidents show cryptojacking risks remain strong—especially for vulnerable RWA projects.
September recorded total damages of $127.06 million from 20 crypto-related attacks, according to PeckShield.
While this marks a 22% decrease compared to August’s $163 million, the number of incidents actually rose. This shows that cryptojacking in September highlights risks that continue to lurk across the crypto ecosystem.
Cryptojacking in September – Cooling Down, But Risks Remain
According to PeckShield, September 2025 saw around 20 large-scale attacks in the crypto industry, causing estimated losses of $127.06 million. Key incidents in cryptojacking in September included UXLINK ($44.14 million), SwissBorg ($41.5 million), Venus ($13.5 million, later recovered), Yala ($7.64 million), and GriffAI ($3 million).
Although the total value of damages decreased, the number of hacks is on the rise, as attackers continue to evolve their methods, leaving no link in the ecosystem fully secure.
Looking back at August, it was a turbulent month with 16 major security incidents wiping out more than $163 million, up 15% from July. Q3 2025 saw over $432 million lost from 53 hacks, confirming that cryptojacking in September is part of an ongoing threat.
Number of cryptojacking in Q3 2025. Source: BeInCrypto
Growing Pressure on RWA Projects
As BeInCrypto reported, a growing trend of attacks targeting RWA projects has been recorded, resulting in around $14.6 million in damages in just the first half of 2025. Since these projects must bridge on-chain infrastructure with off-chain assets, they open up new vulnerabilities for hackers.
RWA segment picture. Source:
RWA segment picture.
The RWA segment has been booming, with on-chain value reaching $32.32 billion, an 11.76% increase over the past 30 days.
While RWA projects promote “security and transparency” to attract traditional investors, the complexity of integrating blockchain and real-world assets has, in fact, created more entry points for attackers.
If this trend continues, confidence in the RWA segment—considered one of the main growth drivers of the crypto market—could be shaken. Therefore, reinforcing independent security audits, multi-layer protections such as multisig and timelocks, and continuous on-chain monitoring will safeguard institutional investor trust against future cryptojacking September-style incidents.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
After the US stock market plummeted, "Wood Sister" Cathie Wood said: The more the market worries, the more optimistic I become, the bull market is not over
As the Nasdaq falls into a correction zone, Cathie Wood ("Sister Wood") stated that the prevailing market anxiety actually makes her more confident in the continuation of the bull market. She attributes this correction to pressures in the bond market and controversies over AI capital expenditures, but emphasizes that the technological revolution is still ongoing. She also revealed that ARK has used the opportunity to increase its holdings in high-conviction positions such as SpaceX, and expects the stock market to perform well through 2027.

After the "Black Week" for tech stocks, Wall Street calls for "bottom fishing"
Morgan Stanley has made it clear that "the next two to three weeks are the time to increase positions." Ed Yardeni characterizes the current downturn as a "correction" rather than the bursting of a bubble. Major Wall Street institutions have an average year-end target for the S&P 500 of 7,973 points. However, most strategists believe that the direction of AI policy remains the largest variable.

CoreWeave writes to Texas governor-elect seeking "data center consultation"
In this open letter, Michael Intrator stated that CoreWeave "strongly supports" Hinojosa's principled position that the growth of data centers must benefit the people of Texas. "We welcome the opportunity to work with your transition team to responsibly advance approved projects and to establish clear and lasting standards for future developments," he said.


