The mass adoption of digital assets by traditional financial institutions highlights a persistent paradox: as the sector gains legitimacy, it is becoming a prime target for increasingly industrialized cybercrime. Since the beginning of 2025, more than $3.6 billion has been stolen from the crypto ecosystem. This threat is now driven by sophisticated organizations, including state-sponsored groups highly skilled at covering their tracks while exploiting the technical specificities of the targeted infrastructure.
Attack vectors vary depending on the nature of the platforms. While centralized exchanges (CEX) primarily suffer from private key compromises, decentralized finance (DEX) protocols are weakened by complex flaws within their smart contracts. However, infrastructure and supply chain breaches remain the most destructive, accounting for nearly $1.8 billion in losses alone. The scale of the phenomenon is illustrated by an extreme concentration of risk: the ten most significant hacks account for over 70% of the total volume of stolen funds.
The reliability of security audits is at the heart of the debate. Data reveals a concerning trend, as 60% of entities that had their systems audited still suffered an intrusion. Even more striking, audited protocols account for nearly 88.4% of total financial losses, suggesting that current security assessments often fail to cover the most innovative attack vectors or focus on scopes ill-suited to the ingenuity of hackers.
Faced with this reality, protective mechanisms are struggling to keep pace. The decentralized insurance market is in clear retreat, with a 20% drop in available coverage and a notable withdrawal of key industry players. By contrast, centralized platforms are attempting to reassure their users by consolidating emergency reserve funds, as demonstrated by the Binance user protection fund. These initiatives, while necessary, highlight the limitations of an ecosystem still struggling to stabilize its foundations against ever-more dynamic cyber risks.