Crypto Losses Near $3.4B as Hackers Went ‘Big Game Hunting’

Why It Matters

Concentrated, high‑value hacks erode confidence in centralized platforms and amplify regulatory scrutiny, while state‑sponsored thefts raise systemic risk for the broader crypto ecosystem.

Key Takeaways

• $3.4B lost in 2025, highest since 2022.
• Three hacks caused 69% of total losses.
• Bybit breach alone cost $1.4B.
• DeFi hacks stayed low despite $119B TVL.
• North Korea stole $2.02B, showing advanced tactics.

Pulse Analysis

The 2025 crypto landscape was defined by a handful of massive breaches that eclipsed the year’s overall loss figure. Chainalysis reports $3.4 billion vanished, with three incidents—most notably Bybit’s $1.4 billion hack—accounting for nearly 70 % of the damage. Such "big‑game hunting" underscores the vulnerability of centralized exchanges that aggregate user funds, prompting investors and regulators to demand stronger custodial safeguards and insurance mechanisms.

Meanwhile, decentralized finance (DeFi) showed resilience despite a surge in total locked value to roughly $119 billion, more than double the 2023 trough. Improved audit practices, formal verification, and bug‑bounty programs have curbed exploit frequency, shifting attacker focus toward personal wallets and centralized services. Although the number of wallet compromises rose, the aggregate stolen amount fell to $713 million, reflecting the smaller balances typical of individual accounts and the growing awareness of hardware‑wallet security among retail users.

State‑backed actors remain a potent threat, with North Korean groups extracting $2.02 billion in 2025—an increase of $681 million over the prior year. Their evolving playbook, which includes embedding operatives within Web3 projects and exploiting third‑party vendors, signals a maturation of cyber‑espionage tactics that blur the line between criminal theft and geopolitical warfare. The industry’s response will hinge on cross‑border intelligence sharing, tighter KYC/AML standards, and continuous investment in adaptive security architectures to mitigate the financial and reputational fallout of such sophisticated campaigns.