CertiK: Web3 security losses reached $118 million in December 2025, with phishing attacks accounting for nearly 80%.

PANews reported on December 31st that, according to CertiK's December 2025 statistics report, on-chain security incidents resulted in approximately $118 million in losses. Phishing attacks dominated, causing $93.46 million in losses, accounting for nearly 79% of the total. "Address poisoning" attacks accounted for $51.85 million of these. This was followed by wallet theft ($29.44 million) and insider attacks ($11.38 million). The largest single incident this month was the Trust Wallet vulnerability, resulting in $8.5 million in losses. Only about $159,000 was recovered, a very low recovery rate, highlighting the importance of on-chain user security.