The world of digital finance just took a heavy hit. So far in 2025, more money has been stolen from crypto users than in all of 2024. This isn’t just about small-time thieves. A new report points to skilled attacks, often backed by nations, causing these massive losses.
Blockchain intelligence firm TRM Labs recently shared some grim figures. Over $2.1 billion in crypto has vanished in the first half of 2025 alone. This makes it a record year for digital asset theft, already surpassing the previous high set in 2022 by ten percent. What’s truly alarming is the change in who is doing the stealing. These are not just individual criminals anymore. Many of these sophisticated hacks appear to come from state-sponsored groups. Their reasons often tie into larger global political goals.
Hacking Infrastructure: The New Battleground
TRM Labs found a clear pattern in these thefts. A huge 80% of the stolen crypto between January and June 2025 came from attacks on fundamental system parts. This includes stealing private “seed phrases,” which are like master keys to digital wallets. It also covers messing with user interfaces, the screens people see when they use crypto services.
These “infrastructure exploits” let hackers seize control right at the heart of a system. Attackers often combine these technical tricks with social engineering. That means they trick people into giving up information or access. TRM Labs warned that these attacks hit basic weaknesses in crypto systems. They also pointed out that users often trust vulnerable online tools too much. On average, these specific kinds of attacks lead to ten times more losses than other methods.
Old Tricks Still Work, Too
While infrastructure attacks dominate, some older hacking methods are still effective. Exploits that target specific software rules, called “protocol exploits,” made up 12% of losses this year. These include “flash loan” attacks and “re-entry” attacks. They find weak spots in smart contracts, which are like self-executing digital agreements. This allows hackers to drain funds or change how the system works.
The report noted that these weaknesses can be used even without directly accessing private keys. This makes them attractive targets for highly skilled hackers. They continue to pose a threat, even if their share of the total losses is smaller now.
Record Figures and State Involvement
The sheer size of the recent attacks is shocking. The average incident in 2025 has seen about $30 million disappear. That’s double the average from last year. One major event stands out. In February, a platform called Bybit, based in Dubai, was hit. Groups linked to North Korea were behind this attack. It resulted in a staggering $1.5 billion loss, accounting for 70% of all theft this year.
Another significant incident happened on June 18. A pro-Israel cyber group, known as Gonjeshke Darande, attacked Nobitex. This is an Iranian platform. That single hack led to $100 million in lost funds. These events paint a clear picture of rising risks in the digital asset space.
An Urgent Call for Global Cooperation
TRM Labs believes the rise in these sophisticated, state-driven attacks is a turning point for the crypto world. They are calling for a complete overhaul of how security is handled. Relying on individual solutions simply won’t cut it anymore.
The firm suggested several key steps. More people should use multi-factor authentication, which means proving your identity in several ways. Storing crypto offline, known as “cold storage,” is also vital. Regular security checks and watching out for insider threats or advanced social manipulation are important too.
The report also pushed for strong teamwork. This means financial intelligence groups, international police forces, and specialized blockchain analysis firms must work together. TRM Labs concluded that the record losses in the first half of 2025 are a clear wake-up call. They demand a smart, ongoing, and unified defense. This defense must be able to fight not just criminals, but also secret operations run by governments.
Source: TRM Labs
Source: Cointelegraph