$2.1B crypto stolen in 2025 as hackers shift focus from code to users: CertiK

Hackers are moving from smart contract vulnerabilities to exploiting human behavioural weaknesses, according to the co-founder of Web3 cybersecurity firm CertiK.

Cryptocurrency hackers are moving away from exploiting smart contract vulnerabilities and targeting users through social engineering schemes, Web3 cybersecurity company CertiK said.

More than $2.1 billion has been stolen in cryptocurrency-related attacks so far in 2025, with the bulk of losses coming from wallet compromises and phishing attacks, according to CertiK.

Crypto phishing attacks are social engineering schemes where attackers share fraudulent links to steal victims’ sensitive information, such as the private keys to crypto wallets.

Read more