It’s only halfway through 2025, and the crypto world has already lost over $656 million to scams, hacks, and exploits, according to blockchain security firm CertiK. That’s a 24% jump compared to the same period last year.
Most of the damage came from flash loan attacks ($275M), private key leaks ($180M), and rug pulls ($80M). Ethereum is still the most targeted blockchain, while BNB Chain and Arbitrum are also seeing increased attacks.
What’s worse? The chances of getting stolen funds back are shrinking fast. In 2024, about 20% of hacked funds were recovered. This year? Just 6%.
Scammers are getting smarter. Many are now using fake websites, smart contract impersonations, and even social engineering tricks to steal from users—especially those using DeFi protocols or investing in NFTs.
Some of the biggest hits so far in 2025 include the XKing Finance rug pull ($54M), a $72M flash loan exploit on EthBridge, and the Wallet Drainer Tool scam, which drained $40M across various chains.
If the current trend continues, experts say crypto scam losses could pass $1.3 billion by the end of the year.