The cryptocurrency sector recorded $2.5 billion in losses during the first half of 2025, according to new data from blockchain security firm CertiK. While this figure underscores the continuing threats facing digital assets, there are signs that the nature of these attacks is evolving — with fewer hacks in the second quarter, but continued heavy losses from wallet breaches and phishing scams.

Hacks Down in Q2, But Wallet Thefts Dominate Losses

CertiK’s mid-year report highlights a key shift: the number of successful hacks fell during Q2 2025 compared to earlier periods. This suggests that improved cybersecurity measures, stronger code audits, and better risk management at major platforms may be starting to show results. However, despite this progress, the financial impact of attacks remains severe.

The biggest contributor to losses was wallet breaches, which accounted for $1.7 billion of the total stolen funds. These incidents often involved the compromise of private keys or vulnerabilities in wallet infrastructure, emphasizing that wallets remain the most lucrative target for attackers.

Phishing Leads in Frequency, Not Damage

While wallet hacks caused the most financial harm, phishing scams were the most common type of incident. So far in 2025, 132 phishing attacks have been recorded. These schemes typically rely on social engineering — tricking users into revealing sensitive information or signing malicious transactions.

Phishing’s prevalence underscores a persistent weak point in crypto security: the human element. Even as technical defenses improve, attackers continue to exploit user trust and errors.

What the Numbers Mean for the Industry

The contrasting trends — fewer hacks but massive wallet losses and rampant phishing — highlight that while the sector may be improving in defending infrastructure, end-user security remains a major challenge. The data may reflect:

• Better protocol-level security through audits, bounties, and improved development practices.

• Attackers shifting focus toward social engineering and direct targeting of wallets where the payoff is higher.

• Growing need for secure wallet solutions, such as hardware wallets, multi-signature setups, and decentralized key recovery.

Outlook for the Rest of 2025

If the decline in successful hacks continues, the second half of the year could see adversaries focusing more on high-value wallet targets, insider threats, or increasingly sophisticated phishing campaigns. The report signals the importance of balancing technical defenses with user education and stronger wallet technologies to mitigate risk.

The crypto industry, still maturing in its security posture, faces an ongoing battle: as it fortifies its infrastructure, attackers pivot to more creative and high-stakes strategies.