Q3 2025 Crypto Hack Report: Wallet Attacks Surge Despite Overall Loss Decline

The post Q3 2025 Crypto Hack Report: Wallet Attacks Surge Despite Overall Loss Decline appeared first on Coinpedia Fintech News

Crypto security is sending mixed signals. 

Overall losses fell sharply in Q3 2025, dropping nearly 37% to $509 million from $803 million in Q2. Compared to Q1’s nearly $1.7 billion stolen, this is a huge decline.

But September told a different story: the month saw a record number of million-dollar incidents, showing that while total losses are down, hackers are still finding big openings.

Hackers Shift Focus to Wallets

The pattern is clear. Attackers are moving away from smart contract exploits and going after wallet vulnerabilities and operational flaws. Code-related losses fell from $272 million in Q2 to just $78 million in Q3, signaling better protections. 

Still, September’s 16 hacks over $1 million – the highest ever in a single month – show that mid-sized attacks are rising.

Hacken added that centralized exchanges remain the easiest entry points, often targeted through phishing and social engineering to hit multisig and hot wallets.

Exchanges, DeFi, and RWA Projects in Trouble

Centralized exchanges lost the most in Q3 – $182 million – followed by DeFi projects at $86 million. One notable hack was the GMX v1 DEX, which lost $40 million. The hacker returned the funds after a $5 million bounty, but the incident underscores ongoing risks in DeFi.

Emerging chains like Hyperliquid also faced trouble, with incidents including the HyperVault exploit and HyperDrive rug pull. RWA (real-world asset) projects aren’t immune either: $14.6 million was lost in the first half of 2025 alone. 

Bridging on-chain and off-chain assets creates more points for hackers, even as these projects promise transparency and security.

Security Isn’t Optional

Hacken CEO Yevheniia Broshevan pointed out that North Korea-linked hackers were behind about half of Q3’s stolen funds. 

Practical steps are clear:

• Multi-Factor Authentication (MFA): Strengthen access controls.
• Regular Security Audits: Identify and fix vulnerabilities.
• User Education: Train users on phishing and safe crypto practices.
• Cold Storage Solutions: Keep large holdings offline to prevent theft.

Also Read: BNB Chain’s Official X Account Hacked, CZ Confirms Breach! Users Warned to Stay Alert

Looking Ahead

Q3’s decline in overall losses is encouraging, but the rise in million-dollar hacks and wallet-focused attacks shows threats are evolving.

Cryptojacking and operational compromises are on the rise. Exchanges, DeFi platforms, and RWA projects must stay proactive, investing in multi-layered security, continuous audits, and user awareness to protect assets and maintain trust.

The battle for crypto security is far from over and staying vigilant is the only way to stay ahead.