Crypto hacks surge to $3.4B! OKX CEO flags THIS as a key threat

ambcryptoPublished on 2025-12-28Last updated on 2025-12-28

Abstract

Crypto hacks surged to $3.4 billion in 2025, with North Korean hackers responsible for over $2 billion of the losses. Recent victims include DeBot, which lost $255,000, and Trust Wallet, which lost $7 million. OKX CEO Star Xu identified DEX bots and custodial wallets as major new risk factors, noting that many require users to store private keys in the cloud. He emphasized that security and usability can coexist through institutional-grade controls and local authentication like passkeys. The report highlights a significant rise in personal wallet compromises and social engineering attacks, urging users to exercise increased vigilance and adopt stronger security practices.

Crypto hacks increased in late 2025, following a broader cooling off in trading activity and ‘bear market’ vibes. The latest victim, DeBot, an AI-based DeFi trading and insights tool, has lost $255,000 in a hack.

The platform said that their security breach was traced to an exploited server in Japan and promised to make the affected users whole.

“As of now, the confirmed losses stem from some users transferring funds back to old wallet addresses that have been deemed unsafe.”

Surprisingly, during the same Christmas week, Binance-backed Trust Wallet also reported a $7 million loss to a security breach linked to a Chrome extension.

OKX CEO’s solution to crypto hacks

Reacting to the rising number of crypto hacks, OKX CEO and founder Star Xu flagged DEX bots and custodial wallets as new risk factors and targets.

He noted that most current bots need users to upload private keys to cloud storage, which heightens security risks for wallets and associated funds. He pushed for new design solutions that can mitigate these risks.

“Security and usability are not mutually exclusive: Institutional-grade security and risk controls and user-controlled local authentication, such as passkeys.”

Crypto hacks hit $3.4B

Apart from Trust Wallet and DeBot, the Flow blockchain lost $3.9 million in assets this December. Overall, the total funds lost to breaches have hit $3.4 billion, according to the latest Chainalysis report.

The Bybit hack in early 2025 accounted for half of this year’s lost funds. Interestingly, personal wallet compromises, such as Trust Wallet breaches, have increased significantly over the past three years, per the report.

North Korean players accounted for the most stolen funds, over $2 billion out of the $3.4 billion in losses in 2025.

“In 2025, North Korean hackers stole at least $2.02 billion in cryptocurrency ($681 million more than 2024), representing a 51% increase year-over-year.”

The report added,

“This marks the most severe year on record for DPRK crypto theft in terms of value stolen, with DPRK attacks also accounting for a record 76% of all service compromises.”

One of the methods these threat actors deploy is to compromise an employee of the targeted platform, also known as social engineering.

Overall, the rising number of cases calls for increased vigilance, especially when handling personal crypto wallets or granting bots access to your personal data.

Double-check the wallet’s web link to avoid phishing attacks and opt for passkeys if possible.


Final Thoughts

  • Per the OKX CEO, the surge in crypto hacks was due to poor security design features in current DEX bots and wallet providers.
  • $3.4 billion was lost to crypto breaches in 2025, and the ‘bear market’ is exacerbating the issue.

Related Questions

QWhat is the total amount lost to crypto hacks in 2025 according to the article?

A$3.4 billion.

QWho does the OKX CEO identify as a new key threat and target for crypto hacks?

ADEX bots and custodial wallets.

QWhich entity was responsible for the majority of the stolen funds in 2025, and how much did they steal?

ANorth Korean hackers, who stole at least $2.02 billion.

QWhat was the specific security risk that the OKX CEO highlighted regarding current DEX bots?

AMost current bots require users to upload private keys to cloud storage, which heightens security risks.

QWhat was one of the methods used by threat actors, as mentioned in the Chainalysis report?

ACompromising an employee of the targeted platform through social engineering.

Related Reads

TechFlow Intelligence Bureau: Chip Stocks Lose Trillions in a Single Day, Bitcoin Falls Below $60,000, US-Iran Conflict Escalates

**Daily Tech & Markets Roundup: AI Advances, Market Turmoil, and Geopolitical Tensions** **AI / LLMs**: Anthropic's internal report on AI self-improvement sparked serious discussions about Recursive Self-Improvement (RSI). Meanwhile, debate continues on AI coding tools after Claude was accused of introducing bugs into the rsync codebase. In positive news, DeepSeek V4 Flash impressed in local deployment tests, and GitHub Copilot now supports custom endpoints for local models. A surprising research turn suggests removing chain-of-thought prompting can sometimes improve LLM performance. **Crypto / Web3**: Bitcoin plunged below $60,000, with its RSI hitting levels last seen during the COVID-19 crash, driven by strong U.S. jobs data reviving interest rate hike fears. Discussions highlight Ethereum DeFi's continued lack of a smooth consumer payment layer. **Chips / Hardware**: Chip stocks suffered a massive sell-off, with the Philadelphia Semiconductor Index posting its worst single-day drop in six years, erasing over a trillion dollars in value. Marvell, Micron, AMD, and Intel were among the biggest losers. **Tech Companies**: A leaked Microsoft document revealing goals to make Copilot "addictive" drew criticism. LinkedIn founder Reid Hoffman left Microsoft's board to focus full-time on his AI agent startup, Manus. Google was revealed to be paying SpaceX $920 million monthly for AI training compute. **Markets & Macro**: A blowout U.S. jobs report (172k vs. 80k expected) crushed hopes for near-term rate cuts, sending Treasury yields soaring and triggering a broad market sell-off. CEOs from Kraft, McDonald's, and Whirlpool simultaneously warned U.S. consumers are exhausting their savings. **Geopolitics**: U.S.-Iran tensions escalated with missile/drone interceptions and U.S. strikes on Iranian radar sites, keeping the critical Strait of Hormuz largely closed since late February and posing ongoing oil supply risks. **The Bottom Line**: The strong jobs data acted as a single trigger for correlated sell-offs across equities, crypto, and chips. Underlying the volatility is a stark contradiction between robust employment data and warnings of consumer weakness, alongside geopolitical risks that could reignite inflation, leaving markets to price in a fraught macro outlook with no clear "soft landing" path.

marsbit3h ago

TechFlow Intelligence Bureau: Chip Stocks Lose Trillions in a Single Day, Bitcoin Falls Below $60,000, US-Iran Conflict Escalates

marsbit3h ago

It Took Me a Year to See the Bitter Truth About Agent Payments

After a year building infrastructure for the Agent economy, engaging with major players like Stripe, Visa, and Coinbase, the author shares a sobering analysis of the current state of Agent payments. The core finding is a stark lack of genuine, immediate demand across most envisioned use cases. The article breaks down four key market segments: 1. **Agent-to-Merchant (Consumer Shopping):** For most product categories (e.g., clothing, electronics), conversational AI shopping is a step backwards from visual e-commerce interfaces. While agents excel at understanding needs, they can't replace side-by-side product comparison. Real merchant interest is defensive "Agent Engine Optimization," not driven by current customer demand. Potential exists for high-frequency, low-decision purchases (like food delivery) or navigating complex store UIs, but these require massive B2C distribution channels dominated by giants like Amazon. 2. **Agent-to-API (Developer Services):** Developers already have subscriptions and billing relationships for APIs (compute, data). Prepaid balances solve micro-payment issues for low transaction volumes. A deeper structural problem is that major SaaS vendors' business models rely on enterprise contracts, resisting granular pay-per-call pricing. While protocols like MPP and x402 serve the long tail of niche services, this market is small and developers are historically low-willingness-to-pay. 3. **Agent-to-Agent:** This remains largely theoretical with minimal transaction volume. While it represents a long-term bet on a fundamentally new transaction infrastructure (sub-second, micro-penny to million-dollar, multi-party settlements), it does not constitute a present market. 4. **Agent-to-Finance:** This is the only category with existing, paying demand. Integrating AI into financial workflows (trading, portfolio management) is a natural evolution and enables new capabilities like autonomous rebalancing. However, competition favors established, regulated institutions. The "real problem" is not moving money between agents, but the broader challenge of **coordination**—orchestrating work between agents and humans, verifying outcomes, and settling results. Payment is just one component of settlement, which is itself part of coordination. Companies that solve the coordination layer will subsume payment, not the other way around. While well-funded incumbents build defensively for a long-term future, startups must find where the market is today—which, for the author's team, lies outside these four categories in an area of real, growing, and underserved activity.

marsbit4h ago

It Took Me a Year to See the Bitter Truth About Agent Payments

marsbit4h ago

It Took Me a Year to See the Hard Truth About Agent Payments

**Title: It Took Me a Year to See the Hard Truth About Agent Payments** Over the past year, I've worked on infrastructure for the Agent economy, engaging with major players like Stripe, Visa, Coinbase, and numerous startups. The findings reveal a stark reality: genuine, widespread demand for Agent-based payments does not yet exist. **Key Observations:** * **Agent-to-Merchant (Shopping):** The user experience for AI shopping often falls short, especially for visual product discovery. While AI excels at understanding needs, conversational interfaces can't yet replace browsing and comparing multiple products visually. Current merchant interest is largely defensive ("Agent Engine Optimization") for a future that hasn't arrived. High-frequency, low-friction purchases (like food delivery) are potential fits, but lack open APIs and face high AI inference costs. Simpler, more affordable, or cross-language interactions for complex UIs are a niche opportunity but require massive consumer distribution to scale. * **Agent-to-API (Developer Tools):** Developer payment needs for APIs (computing, data, models) are already met through subscriptions and prepaid credits. The core challenge is not payment friction but supplier economics: most large SaaS providers prefer enterprise contracts over micropayments for API calls. Protocols like MPP and x402 suit the long-tail of smaller services but cater to a developer market historically reluctant to pay for these tools. Major infrastructure needs at the top of the stack are already being addressed. * **Agent-to-Agent (Machine Commerce):** This is a long-term vision with almost no current transaction volume. While a future with high-speed, high-frequency, multi-party machine-to-machine transactions would require novel infrastructure, it remains theoretical. The market is not here yet. * **Agent-to-Finance:** This is the only category with clear, present demand. Financial professionals and DeFi users already pay for tools, and AI augmentation is a natural evolution. Autonomous AI agents can enable entirely new financial strategies. However, competition is fierce from established, regulated incumbents who can more easily layer AI onto their existing products. **The Core Insight:** Companies, especially giants with long time horizons, are building defensively for a potential future of mass machine commerce. For them, early investment is a low-cost hedge. For startups, the current market reality is different. The primary challenge isn't just moving money between agents (payments). The larger, unsolved problem is **orchestration** – coordinating work between agents and humans, verifying outcomes, and then settling. Payment is just a part of settlement, which is just a part of orchestration. Companies that solve the orchestration problem will subsume payments, not the other way around. After a year of building, we see the real, growing, and underserved market opportunity lies in this broader domain of orchestration.

链捕手4h ago

It Took Me a Year to See the Hard Truth About Agent Payments

链捕手4h ago

Trading

Spot
Futures

Hot Articles

How to Buy SFP

Welcome to HTX.com! We've made purchasing SafePal (SFP) simple and convenient. Follow our step-by-step guide to embark on your crypto journey.Step 1: Create Your HTX AccountUse your email or phone number to sign up for a free account on HTX. Experience a hassle-free registration journey and unlock all features.Get My AccountStep 2: Go to Buy Crypto and Choose Your Payment MethodCredit/Debit Card: Use your Visa or Mastercard to buy SafePal (SFP) instantly.Balance: Use funds from your HTX account balance to trade seamlessly.Third Parties: We've added popular payment methods such as Google Pay and Apple Pay to enhance convenience.P2P: Trade directly with other users on HTX.Over-the-Counter (OTC): We offer tailor-made services and competitive exchange rates for traders.Step 3: Store Your SafePal (SFP)After purchasing your SafePal (SFP), store it in your HTX account. Alternatively, you can send it elsewhere via blockchain transfer or use it to trade other cryptocurrencies.Step 4: Trade SafePal (SFP)Easily trade SafePal (SFP) on HTX's spot market. Simply access your account, select your trading pair, execute your trades, and monitor in real-time. We offer a user-friendly experience for both beginners and seasoned traders.

669 Total ViewsPublished 2026.05.22Updated 2026.06.02

How to Buy SFP

How to Buy CTR

Welcome to HTX.com! We've made purchasing Citrea (CTR) simple and convenient. Follow our step-by-step guide to embark on your crypto journey.Step 1: Create Your HTX AccountUse your email or phone number to sign up for a free account on HTX. Experience a hassle-free registration journey and unlock all features.Get My AccountStep 2: Go to Buy Crypto and Choose Your Payment MethodCredit/Debit Card: Use your Visa or Mastercard to buy Citrea (CTR) instantly.Balance: Use funds from your HTX account balance to trade seamlessly.Third Parties: We've added popular payment methods such as Google Pay and Apple Pay to enhance convenience.P2P: Trade directly with other users on HTX.Over-the-Counter (OTC): We offer tailor-made services and competitive exchange rates for traders.Step 3: Store Your Citrea (CTR)After purchasing your Citrea (CTR), store it in your HTX account. Alternatively, you can send it elsewhere via blockchain transfer or use it to trade other cryptocurrencies.Step 4: Trade Citrea (CTR)Easily trade Citrea (CTR) on HTX's spot market. Simply access your account, select your trading pair, execute your trades, and monitor in real-time. We offer a user-friendly experience for both beginners and seasoned traders.

539 Total ViewsPublished 2026.05.25Updated 2026.06.02

How to Buy CTR

What is USOIL

USOILUSDT Perpetual Contract is the trading symbol for West Texas Intermediate (WTI) Crude Oil priced in US dollars, representing 1 barrel of crude oil.

540 Total ViewsPublished 2026.05.25Updated 2026.05.25

What is USOIL

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of A (A) are presented below.

活动图片