Hackers Steal $2.1 Billion Worth of Crypto in 2025

Key highlights

• Crypto crime surge in 2025, hackers stealing $2.1 billion

• State-sponsored crimes will affect the crypto market in 2024

Hackers Steal $2.1 Billion in Crypto

The first half of 2025 has exposed deep cracks in crypto’s security mechanism. In six months, over $2.1 billion was stolen in at least 75 separate hacks and exploits. 

A chart illustrating a significant rise in cryptocurrency theft in early 2025, with the total reaching nearly USD 3 billion by March and leveling off by mid-year.

This is the worst start to any year in the industry’s history. According to TRM Labs, hackers stole $2.1 billion in crypto in the first half of 2025. This is a signal that digital assets are now squarely in the crosshairs of state actors, cyberwarfare, and increasingly sophisticated attackers.

At the center of this troubling trend is the $1.5 billion Bybit breach, which occurred in February. 

Read also: Galaxy raises $175 million fund

 The sheer scale of this single event, accounting for nearly 70% of total losses, distorted the average hack size to nearly $30 million. 

But even without Bybit, the picture remains bleak. Every month except March has seen losses exceeding $100 million in crypto crime.

Ask time: Hackers steal $2.1 billion in crypto

The Rise of State-Sponsored Crypto Crime

While crypto has long attracted its share of cybercriminals, H1 2025 made it clear that nation-states are increasingly treating crypto as both a tool and a target.

 North Korea alone is responsible for an estimated $1.6 billion in stolen funds, most of it from the Bybit hack. This is not isolated; it’s part of a long-term pattern where DPRK-linked groups have weaponized crypto theft to evade sanctions.

In June, a group allegedly linked to Israel Gonjeshke Darande hacked Iranian crypto exchange Nobitex, stealing over $90 million. 

However, instead of cashing out, they sent the funds to addresses that are effectively unspendable. By sacrificing access to the funds, they demonstrated how crypto hacks are now being used as symbolic weapons in global power struggles.

How the Hacks Are Happening

The vast majority of losses, over 80%  came from infrastructure-level attacks. These are not your typical bugs or smart contract flaws. 

These attacks go after seed phrases, private keys, and front-end vulnerabilities, often exploiting insider access or manipulating users through social engineering.

 And they’re deadly efficient: on average, infrastructure attacks were 10 times larger than other exploits.

Meanwhile, protocol-level attacks like re-entrancy bugs and flash loan exploits still persist, accounting for around 12% of stolen funds.

Despite years of development, DeFi smart contracts remain vulnerable, especially when protocols skip proper audits or launch in haste.

Looking Ahead

H1 2025 has shown that crypto security is no longer a niche concern. With over $2 billion lost and attacks becoming tools of international strategy, the entire ecosystem is under pressure to adapt fast.

 This isn’t just about protecting wallets; it’s about safeguarding an industry that’s now woven into the global economy and international relations.