Crypto hacks 2025 already top $2.1B, as hackers ditch code exploits for human-focused attacks

Crypto hacks 2025 have already wiped out more than $2.1 billion in user funds—and this time, the threat isn’t in the code, but in the people.

According to Web3 cybersecurity firm CertiK, hackers are no longer just attacking blockchain protocols—they’re exploiting human behavior.

In a stark shift, the majority of crypto hacks 2025 are now tied to wallet compromises, phishing scams, and social engineering, not smart contract bugs.

The landscape of crypto crime is evolving, and industry leaders are urging users to take new security threats seriously.

CertiK: Hackers now target humans, not just code

“Attackers always target the weakest point,” said Ronghui Gu, co-founder of CertiK, during a live interview on Cointelegraph’s Chain Reaction X Spaces on June 2. “Smart contracts were the weak point in the past, but now it’s clear that human behavior has become the new frontier.”

The revelation comes as phishing scams dominate crypto hacks 2025, surpassing on-chain exploits and technical vulnerabilities for the first time.

According to CertiK, over $1 billion has already been lost to phishing in nearly 300 incidents this year alone.

The surge in crypto hacks 2025 has sent shockwaves across the industry, forcing security firms and investors alike to reevaluate their defenses.

With crypto hacks 2025 increasingly targeting user behavior instead of smart contracts, even experienced traders are falling victim to sophisticated schemes.

From phishing emails to fake support agents, the tactics behind crypto hacks 2025 are evolving faster than many platforms can adapt.

Analysts warn that without immediate education and tech upgrades, the scale of crypto hacks 2025 could easily surpass the historic $2.3 billion stolen in 2024, making it the most dangerous year for digital assets yet.

The Lazarus Heist: $1.4B in a single blow

The largest attack of crypto hacks 2025 came on February 21, when North Korea’s Lazarus Group breached centralized exchange Bybit, draining an eye-watering $1.4 billion. That single event now accounts for more than 60% of all stolen crypto this year.

“This is the biggest exploit in crypto history—and it didn’t even need smart contract flaws to work,” said Mert Mumtaz, CEO of Helius Labs. “It’s a clear warning that our mental firewalls must be as strong as our code.”

The CertiK Hack3d report outlines five emerging patterns in crypto hacks 2025:

Social engineering is the new zero-day. Tech-savvy attackers are ditching traditional malware for address poisoning, wallet impersonation, and fraudulent support chats. Victims are tricked into giving access or sending funds voluntarily.

Phishing attacks dominate losses. Of the $2.1 billion stolen so far in crypto hacks 2025, over $1 billion stems from phishing alone—surpassing losses from smart contract exploits by nearly 3x.

Wallets are the weak spot. Private key mismanagement, compromised browser extensions, and poor access controls are leading to rampant wallet thefts, with no need for protocol-level hacking.

Attackers mimic trusted brands. Scams often involve cloned versions of major platforms like MetaMask, Ledger, and Binance, often ranking high on Google Ads or social media.

Institutional targets are now prime game. Major exchanges, DAOs, and even governments are now on hacker radars. With more institutions entering Web3, the stakes are higher than ever.

What does it mean for the crypto industry?

While the rise of social engineering is alarming, some experts argue it shows that DeFi infrastructure is maturing. “Hackers are being forced to adapt because smart contract security has improved,” said Gu. “Now, we need to turn the same attention to user-facing tools.”

CertiK recommends stronger wallet authentication protocols, real-time transaction monitoring, and simulation environments for retail users to verify destination addresses before signing.

As crypto hacks 2025 shift their focus from code to human error, the industry faces a new kind of battle. One where education, awareness, and user experience play just as big a role as cryptographic security.

“Security isn’t just about writing perfect code anymore,” added Gu. “It’s about designing systems that understand—and anticipate—how real people behave.”