$2.1B crypto stolen in 2025 as hackers shift focus from code to users: CertiK

1 day ago

Hackers are moving from astute declaration vulnerabilities to exploiting quality behavioural weaknesses, according to the co-founder of Web3 cybersecurity steadfast CertiK.

Cryptocurrency hackers are moving distant from exploiting astute declaration vulnerabilities and alternatively targeting users done societal engineering schemes, according to Web3 cybersecurity steadfast CertiK.

More than $2.1 cardinal has been stolen successful cryptocurrency-related attacks truthful acold successful 2025, with the bulk of losses coming from wallet compromises and phishing attacks, according to CertiK.

Crypto phishing attacks are societal engineering schemes wherever attackers stock fraudulent links to bargain victims’ delicate information, specified arsenic the backstage keys to crypto wallets.

The increasing fig of societal engineering attacks suggests hackers are shifting onslaught vectors, according to Ronghui Gu, the co-founder of CertiK.

CertiK observed a displacement successful onslaught patterns from astute contracts and blockchain infrastructure vulnerabilities to exploiting loopholes successful quality behavior, Gu told Cointelegraph during the Chain Reaction regular X spaces show connected June 2, adding:

“The bulk of this $2.1 cardinal was caused by wallet compromises, cardinal mismanagement, and operational issues.”

Phishing scams cost the crypto manufacture implicit $1 cardinal crossed 296 incidents successful 2024, making them the astir costly onslaught vector for the industry, according to CertiK.

The cybersecurity expert’s comments travel conscionable a period aft a social engineering scheme saw $330.7 cardinal worthy of Bitcoin (BTC) stolen from the wallet of an aged US individual, Cointelegraph reported connected April 30.

Social engineering schemes similar address poisoning don’t necessitate immoderate hacking. Instead, attackers instrumentality victims into sending assets to fraudulent wallet addresses.

Hackers ever people the weakest link

While the emergence of societal engineering schemes is simply a concerning sign, it whitethorn beryllium a awesome of much robust decentralized concern (DeFi) protocols.

“Attackers ever people the weakest point,” explained CertiK’s Gu, adding:

“Smart contracts oregon blockchain codification itself was the weakest point, but present the attackers consciousness similar the weakest points whitethorn travel from quality behaviour alternatively than the code.”

Gu said the manufacture indispensable present put successful amended wallet information and entree control, arsenic good arsenic real-time transaction monitoring and simulation tools to trim aboriginal incidents.

The lion’s stock of the stolen worth successful 2025 stemmed from the $1.4 cardinal Bybit speech hack connected Feb. 21, erstwhile the infamous North Korean Lazarus Group staged the largest exploit in crypto history.

That azygous incidental accounted for much than 60% of the worth mislaid successful each crypto hacks successful 2024, erstwhile the manufacture saw $2.3 cardinal stolen crossed 760 onchain information incidents, according to CertiK’s yearly Hack3d report.