Over $1.5 billion of crypto was lost to scams or theft in just three months of 2025

Skip to main content
Tech Radar Pro
Tech Radar Gaming
Tech Radar Pro
TechRadar the business technology experts
Search TechRadar
View Profile
België (Nederlands)
Deutschland
North America
US (English)
Australasia
New Zealand
Expert Insights
Website builders
Web hosting
Best web hosting
Best website builder
Best office chairs
Expert Insights
Over $1.5 billion of crypto was lost to scams or theft in just three months of 2025
Sead Fadilpašić
2 April 2025
Most of the crypto was lost in a single incident
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
More than $1.5bn of crypto was lost to scams and theft in Q1 2025, report says
Most of the funds were lost in the ByBit hack
Wallet compromise is the most common way people lose their crypto
When it comes to scams and theft, crypto hasn’t had a great year so far. Just in the first quarter of the year, hackers stole more than $1.67 billion across 197 security incidents. This is according to a new report published by blockchain cybersecurity pros CertiK.
The Q1 2025 Hack3d Report says the figure represents a 303.38% increase in value compared to the previous quarter. Across the industry, the average loss per incident was $9,549,339, CertiK further said, while the median loss per incident was $66,303.
The total value of funds returned was $6,390,698, leading to adjusted total losses of $1,662,600,186 for the quarter. Sadly enough, just 0.4% of stolen funds were returned to customers, but that’s basically how blockchain works, since most transactions are irreversible.
Monitor your credit score with TransUnion starting at $29.95/month
TransUnion is a credit monitoring service that helps you stay on top of your financial health. With real-time alerts, credit score tracking, and identity theft protection, it ensures you never miss important changes. You'll benefit from a customizable online interface with clear insights into your credit profile. Businesses also benefit from TransUnion’s advanced risk assessment tools.
Preferred partner (What does this mean?)
Wake-up call
Without a wider context, these figures could be a bit misleading, though. Almost all of the money stolen fell on just one incident - the ByBit hack in late February 2025.
ByBit, a major cryptocurrency exchange, lost $1.5 billion in Ethereum, in an attack that was attributed to North Korea's state-sponsored Lazarus Group. The hackers infiltrated Safe{Wallet}'s infrastructure, injecting malicious JavaScript that deceived ByBit's security team into approving unauthorized transactions.
Lazarus is one of the world’s most infamous threat actors, deploying enormous state resources to steal cryptocurrencies, which are then used to fund the government’s state apparatus and its weapons program.
“Hackers are using increasingly sophisticated techniques, and it is now more important than ever for blockchain businesses and projects to proactively invest in robust security measures,” said CertiK Co-Founder Ronghui Gu. The Bybit breach is a wake-up call for the entire industry. Security is not simply a competitive edge - it is a shared responsibility.”
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
The most costly attack vector is wallet compromise, followed by private key compromise, code vulnerability, and phishing.
You might also like
One of the biggest data leaks ever has just been revealed - here's what to do if you've been hit
We've rounded up the best password managers
Take a look at our guide to the best authenticator app
Sead Fadilpašić
Social Links Navigation
Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.
You must confirm your public display name before commenting
Please logout and then login again, you will then be prompted to enter your display name.
Latest in Security
When it comes to security, public Wi-Fi could be a risky choice for commuters worldwide
Google warns North Korean spies are gaining positions in Western firms
Great news everyone! Google is going to let you transfer your passkeys to a new phone
Over $1.5 billion of crypto was lost to scams or theft in just three months of 2025
Thousands of PostgreSQL servers are being hijacked to mine crypto
The European Commission wants a backdoor for end-to-end encryptions for law enforcement
Latest in News
Without a fresh UI and customization features, the Switch 2 is Nintendo's most boring looking console ever
The Nintendo Switch 2 Pro Controller has been revealed offering a bunch of improvements over its predecessor
11 things we learned from the Nintendo Switch 2 Direct, including the new Mario Kart, pricing for the console, and some fancy new features
Kirby Air Riders announced at the Switch 2 Direct as Nintendo throws in another racing game to the mix
Apple TV+ has discovered the Fountain of Youth and you can jump in this May when the movie starts streaming
Hyrule Warriors: Age of Imprisonment sees Zelda take the lead, plus upgraded Switch 2 Editions bring Hyrule GPS and new memories to the best Switch Zelda games
More about security
When it comes to security, public Wi-Fi could be a risky choice for commuters worldwide
Google warns North Korean spies are gaining positions in Western firms
Without a fresh UI and customization features, the Switch 2 is Nintendo's most boring looking console ever
See more latest
Most Popular
Without a fresh UI and customization features, the Switch 2 is Nintendo's most boring looking console ever
Free Microsoft Windows rival gets first major update in four years but is it already too little, too late?
Nintendo Switch 2 mouse mode revealed: Joy Con 2 mouse function, how it works, and which games are confirmed to use it
Deltarune gets surprise Chapter 3 and 4 release date at Nintendo Switch 2 Direct –
and they're launching very soon
The Nintendo Switch 2 Pro Controller has been revealed offering a bunch of improvements over its predecessor
Apple TV+ has discovered the Fountain of Youth and you can jump in this May when the movie starts streaming
Bad news, foldable fans – the rumored Samsung Galaxy tri-fold phone could be harder to get hold of than we first thought
11 things we learned from the Nintendo Switch 2 Direct, including the new Mario Kart, pricing for the console, and some fancy new features
Hyrule Warriors: Age of Imprisonment sees Zelda take the lead, plus upgraded Switch 2 Editions bring Hyrule GPS and new memories to the best Switch Zelda games
Sony launches two new budget soundbars – one with Dolby Atmos and DTS:X, and one with big surround-sound for cheap
LATEST ARTICLES
Without a fresh UI and customization features, the Switch 2 is Nintendo's most boring looking console ever
5 of my most-anticipated movies and shows on Max in April 2025
Free Microsoft Windows rival gets first major update in four years but is it already too little, too late?
Nintendo Switch 2 mouse mode revealed: Joy Con 2 mouse function, how it works, and which games are confirmed to use it
Deltarune gets surprise Chapter 3 and 4 release date at Nintendo Switch 2 Direct –
and they're launching very soon
TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.
Contact Future's experts
Terms and conditions
Privacy policy
Cookies policy
Advertise with us
Web notifications
Accessibility Statement
Future US, Inc. Full 7th Floor, 130 West 42nd Street,
Please login or signup to comment
Please wait...