Crypto's most hacked half-year: 212 exploits, $1.1B stolen

Infrastructure compromises, which include social engineering attacks, drove about 76% of the total value lost, Blockaid said. They represented a smaller share of total incidents. Smart contract vulnerabilities were the most common attack vector by far. TRM Labs attributed roughly 125 of its 207 incidents to smart contract exploits.

Ethereum and Solana bore the heaviest losses by chain, with $332 million and $326 million stolen respectively. The two chains together accounted for roughly $658 million in losses, about 60% of the total.

Blockaid counted 212 incidents; TRM Labs counted 207. Divide $1.1 billion by 212 exploits and the average loss is about $5.2 million per incident. In H1 2025, the average was nearly double that, inflated by the Bybit breach. The industry is now averaging more than one breach per day.

The DPRK dimension adds a layer of regulatory pressure. Groups linked to North Korea funnelling $643 million from crypto protocols gives governments more ammunition for stricter oversight, according to analysts cited by TRM Labs. The 125 smart contract exploits recorded by TRM Labs represent vulnerabilities that better engineering practices could meaningfully reduce, the firm said. Infrastructure breaches linked to North Korean social engineering, by contrast, target a smaller number of high-value victims.