www.chainalysis.com Crypto Theft Surge: $2.87 Billion Stolen in 2025 Amid Evolving Threat Landscape
Article Content
- •Over $2 billion stolen in cryptocurrency thefts in the first half of 2025, with a projected total of over $4.3 billion by year-end.
- •The ByBit hack, attributed to North Korean actors, is the largest crypto theft in history at $1.5 billion.
- •Despite rising theft volumes, the percentage of illicit crypto activity relative to total transactions has declined.
In 2025, cryptocurrency thefts have surged significantly, with over $2 billion stolen in just the first half of the year, marking a 17.27% increase compared to 2022. The ByBit hack, attributed to North Korean state actors, accounted for $1.5 billion, representing 69% of all stolen funds. This incident highlights the growing sophistication of state-sponsored cyber threats in the cryptocurrency sector. Despite the overall illicit crypto activity rising to an estimated $158 billion, the percentage of illicit transactions relative to total crypto activity has decreased. The closure of Garantex and potential sanctions against Huione Group have altered the operational landscape for cybercriminals. Enhanced detection methods by firms like Chainalysis are improving visibility into theft activities, but the rapid increase in thefts poses ongoing challenges for security infrastructure. The current trend suggests that 2025 could end with over $4.3 billion stolen from services alone.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Bybit in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…