New CertiK data reveals $509M lost across Q3 2025, down from $803M in Q2. Before celebrating: the threat landscape is fundamentally shifting in ways that complicate prevention and recovery.
Operational Compromises Are Overtaking Code Vulnerabilities
Losses from smart contract exploits fell 71% ($272M to $78M), while sophisticated phishing and wallet-focused attacks maintained pressure despite fewer total incidents. For investigators, tracing funds from operational breaches requires different methodologies than protocol exploit forensics.
September Set a Disturbing Record
16 incidents exceeding $1M in a single month, the highest ever recorded. Attackers are optimizing for consistent mid-tier targets rather than headline mega-hacks.
Centralized Exchanges Under Pressure
Centralized exchanges absorbed $182M in Q3 losses, with North Korean state-linked operations accounting for approximately half of all stolen funds. These groups deploy multi-layered social engineering that bypasses technical controls entirely.
The Forensic Challenge
Hardening code isn’t enough when attackers are succeeding at the human and operational layers. For legal teams managing recovery cases, compliance officers validating security claims, and insurers assessing breach liability, understanding these evolving attack vectors directly impacts case outcomes and claim validation. The forensic challenge is understanding the operational, human-centric breaches that enabled the thefts.
The 37% decline in total losses reflects important progress in protocol security. But as Hacken Blockchain Security & Compliance CEO Yevheniia Broshevan notes in the report: this is a wake-up call for platforms and users to “double down on operational security and due diligence, or they will continue to be the easiest entry points for attackers.”
Read the full Cointelegraph coverage: https://cointelegraph.com/news/q3-2025-crypto-hacks-losses-drop-37-percent
