Crypto Hacks Average $25M as Risks Concentrate, Immunefi Says

• Average crypto hacks now cost $24.5M, with rare breaches causing massive losses.
• Most tokens drop 61% six months post-hack, showing long-term market impact.
• Exchanges must act now with audits and monitoring to prevent billion-dollar breaches.

Crypto hacks are becoming more costly, with average losses now reaching $24.5 million. Immunefi’s 2026 State of Onchain Security report shows that a few large breaches are causing most of the damage, raising concerns over security risks and long-term impact on crypto projects.

Crypto Hacks Average $25M as Mega Breaches Dominate Losses

According to the Immunefi 2026 State of Onchain Security report, crypto hacks between 2024 and 2025 resulted in $4.67 billion in losses across 191 attacks. While smaller hacks are more common, the report shows that a few large breaches are driving the majority of losses.

The average hack now stands at $24.5 million, while typical losses have dropped to around $2.2 million, highlighting how risk is becoming more concentrated.

Notably, the top five hacks alone accounted for 62% of total stolen funds, showing that a small number of attacks are responsible for most of the damage.

Further report notes that the large-scale breaches continue to dominate the market impact. A single $1.5 billion Bybit hack in 2025 made up 44% of that year’s total losses, highlighting the scale of risk in major platforms.

Even though centralized exchanges recorded only 20 attacks, they accounted for over $2.55 billion in losses, more than half of the total, pointing to deeper vulnerabilities in high-value systems.

Crypto Tokens Drop Sharply After Hacks

Report shows that the token prices take a major hit after security breaches. For example, Pepe token prices typically fall by around 10% within two days and continue to decline over time.

After six months, affected tokens lose an average of 61% of their value, while 84% remain below pre-hack levels, showing that recovery is rare.

The impact can also spread across platforms, especially in connected systems, causing wider disruption and loss of value.

Security Risks Push Exchanges and Regulators to Act

Immunefi CEO Mitchell Amador, major hacks can leave projects permanently weakened, with nearly 80% of affected projects failing to fully recover.

At the same time, regulators in regions like South Korea, the EU, Japan, and Singapore are pushing for stricter rules to improve security standards.

Immunefi also highlighted that exchanges must strengthen audits, adopt bug bounty programs, and use real-time monitoring to prevent future attacks.

As attacks grow larger and more targeted, the real risk for the crypto market is no longer frequency, but the scale of damage, making stronger security essential.