A recent report from Chainalysis indicates that 2025 may become the worst year on record for cryptocurrency theft, with the potential for stolen funds to exceed $4.3 billion. In the first half of the year, hackers have stolen over $2.17 billion from cryptocurrency services, surpassing the total stolen in all of 2024 and marking a 17% increase from the same period in 2022, the previous worst year for crypto thefts with $3.8 billion worth of crypto stolen.
The report highlights the dominant concern of stolen fund activity in 2025, posing both immediate and long-term challenges to the security infrastructure of the industry. The Lazarus Group, a state-sponsored hacking organization linked to North Korea, is largely responsible for the surge in cryptocurrency thefts, including the record-setting $1.5 billion hack of crypto exchange Bybit. The group has continued to use social engineering tactics to gain access to targets.
Another concerning trend is the rise of 'wrench attacks,' where attackers physically harm or intimidate crypto holders to access their personal wallet holdings. These attacks have led to a spike in personal wallet compromises, accounting for 23.35% of crypto thefts this year.
The report attributes the uptick in personal wallet thefts to improved security practices at major services, the increased value of crypto held in personal wallets, and the development of more sophisticated targeting techniques. Chainalysis urges crypto investors to enhance their operational security, including keeping their crypto holdings private, to reduce the likelihood of being targeted by attackers.