Cybercriminals stole over $2.7 billion in cryptocurrency in 2025, a new record for crypto-stealing hacks, according to blockchain-monitoring firms. The massive heist involved dozens of crypto heists targeting several cryptocurrency exchanges and other web3 and decentralized finance (DeFi) projects. The biggest hack by far was the breach at Dubai-based crypto exchange Bybit, where hackers stole around $1.4 billion in crypto. Blockchain analysis firms, as well as the FBI, accused North Korean government hackers, the most prolific group targeting crypto in the last few years, of being behind this massive heist.
Chainalysis and TRM Labs, two leading cryptocurrency-monitoring firms, estimated a total of $2.7 billion stolen in crypto in 2025, per data shared with TechCrunch. The firms also tracked another $700,000 stolen from individual crypto wallets. DeFi, the web3 security firm running the REKT database, noted that the Bybit hack was the largest known loot of crypto of all time, and one of the largest financial heists in the history of humanity.
The Bybit hack surpassed previous large-scale crypto thefts, including the 2022 breaches against the Ronin Network and the Poly Network, which netted hackers $624 million and $611 million, respectively. The scale of the Bybit hack has left the crypto community reeling, with many experts warning of the potential consequences for the industry.
"We've seen a significant increase in the sophistication and scale of these attacks," said a spokesperson for Chainalysis. "The fact that North Korean government hackers are behind this heist is particularly concerning, as it suggests a level of state-sponsored involvement that we've not seen before."
The Bybit hack has also raised questions about the security measures in place at cryptocurrency exchanges and DeFi projects. "The industry needs to take a hard look at its security protocols and ensure that they are robust enough to prevent these types of attacks," said a spokesperson for TRM Labs.
The crypto community is still grappling with the aftermath of the Bybit hack, and it remains to be seen how the industry will respond to this new level of sophistication from cybercriminals. As the industry continues to evolve, it is likely that we will see more advanced security measures and increased collaboration between exchanges, DeFi projects, and law enforcement agencies to prevent these types of attacks.
In the meantime, investors and users are advised to remain vigilant and take steps to protect their assets. "This is a wake-up call for the industry, and we need to take immediate action to prevent these types of attacks from happening in the future," said a spokesperson for DeFi.
Discussion
Join the conversation
Be the first to comment