Beosin: 2025 Web3 Blockchain Security Landscape Report
The Beosin 2025 Web3 Blockchain Security Report, co-published with Footprint Analytics, reveals that total losses from hacks, phishing scams, and rug pulls reached $3.375 billion. A total of 313 major security incidents were recorded, including 191 hacking attacks causing approximately $3.187 billion in losses. While phishing and rug pull losses decreased significantly compared to 2024, hacking losses surged by 77.85%.
Centralized exchanges (CEXs) were the most targeted by value, with 9 attacks resulting in $1.765 billion in losses (52.3% of the total), largely due to the $1.44 billion Bybit supply chain attack. DeFi remained the most frequently attacked sector, with 91 incidents leading to $621 million in losses. Ethereum was the chain with the highest losses ($2.254 billion across 170 incidents).
The most common attack method was contract vulnerability exploitation (62 incidents), primarily logic flaws. Two major DeFi exploits were detailed: Cetus Protocol lost $224 million due to a shift operation error in its math library, and Balancer lost $116 million from a precision error in its StableSwap invariant calculation.
The report also highlights anti-money laundering case studies, including a drug cartel using crypto to launder funds and the laundering path of funds from the $40 million GMX hack.
Key trends include a shift from private key leaks to more complex attacks like supply chain compromises and sophisticated logic exploits. AI-driven social engineering and phishing are growing threats. The industry must focus on securing infrastructure and building a multi-layered defense system.
marsbit12/29 08:54
