Key Takeaways
- Hackers stole over $2.1 billion in Bitcoin up to now in 2025.
- CertiK says phishing and pockets compromise at the moment are the principle assault vectors.
- The Bybit hack in February alone accounted for $1.4 billion in losses.
Greater than $2.1 billion price of Bitcoin has been stolen in 2025, with hackers more and more focusing on customers as a substitute of code vulnerabilities, in response to cybersecurity agency CertiK.
Causes of Bitcoin losses
Ronghui Gu, co-founder of CertiK, stated throughout a June 2 interview on Cointelegraph’s Chain Response present that…
… nearly all of this $2.1 billion was brought on by pockets compromises, key mismanagement, and operational points.
Phishing scams as a significant risk
CertiK information reveals that phishing scams—social engineering assaults utilizing pretend hyperlinks to steal personal pockets keys—have overtaken sensible contract exploits as the highest risk.
In 2024, such phishing assaults accounted for over $1 billion in losses throughout 296 incidents.
Excessive-profile incidents
A high-profile instance occurred in April 2025 when $330.7 million in Bitcoin was stolen from the pockets of an aged U.S. particular person by way of a social engineering scheme.
Shift in assault methods
Gu emphasised that attackers at all times goal the weakest level, which has shifted from sensible contracts to human error.
He stated:
Now the attackers really feel just like the weakest factors might come from human habits relatively than the code.
The Bybit change hack
Essentially the most damaging occasion this yr stays the $1.4 billion hack of Bybit change in February, attributed to North Korea’s Lazarus Group.
That single incident accounted for over 60% of the full worth stolen in 2025.
Suggestions for future safety
CertiK advises elevated funding in pockets safety, real-time transaction monitoring, and higher entry management to fight future threats.