Crypto Hacking Losses Plunge 90% in May to $68M, CertiK Reports

Losses from cryptocurrency hacks and exploits fell sharply in May, totaling approximately $68.3 million, according to a new report from Web3 security firm CertiK. The figure represents a roughly 90% decline from the $650 million lost in April, marking a significant reprieve for the crypto ecosystem after one of the costliest months on record.

Sharp Drop in Exploit Activity

The dramatic reduction in losses suggests a temporary lull in high-impact attacks rather than a permanent improvement in security. April’s total was inflated by several large-scale incidents, including the $305 million DMM Bitcoin hack and a $100 million exploit on the blockchain gaming platform Gala Games. In contrast, May saw no single event exceeding $20 million, with most losses spread across smaller DeFi protocol vulnerabilities and phishing campaigns.

Phishing and Recoveries

CertiK’s data shows that phishing attacks accounted for approximately $2.6 million of May’s total, a relatively modest sum compared to previous months. Around $9.4 million was recovered or returned to victims, often through negotiations with attackers or white-hat interventions. This recovery rate, while positive, remains a fraction of total losses, underscoring the irreversible nature of most on-chain thefts.

What This Means for the Industry

The decline in May losses provides a temporary sense of relief for investors and project teams, but security experts caution against complacency. The crypto sector remains a high-value target for sophisticated threat actors, and the underlying vulnerabilities in smart contracts, cross-chain bridges, and user authentication persist. The monthly volatility in loss figures highlights the need for continuous security audits, bug bounty programs, and improved user education to prevent phishing.

Conclusion

While May’s $68.3 million in losses is a welcome drop from April’s record high, the broader trend of crypto hacking remains a critical concern for the industry. The data from CertiK serves as a reminder that security improvements must keep pace with the rapid growth of decentralized finance and digital asset adoption. Stakeholders should view this month’s decline as an opportunity to reinforce defenses rather than a signal that the threat has passed.

FAQs

Q1: What caused the 90% drop in crypto hacking losses from April to May?
The drop is primarily due to the absence of major high-value exploits in May. April’s losses were inflated by two large incidents—the DMM Bitcoin hack ($305M) and the Gala Games exploit ($100M)—which did not recur in May. Smaller-scale attacks on DeFi protocols and phishing accounted for the bulk of May’s $68.3 million total.

Q2: How much of the stolen funds were recovered in May?
Approximately $9.4 million, or about 13.8% of the total losses, was recovered or returned. Recoveries often result from negotiations with hackers, white-hat security interventions, or frozen funds on centralized exchanges. The majority of stolen crypto remains unrecovered due to the pseudonymous and irreversible nature of blockchain transactions.

Q3: Is the crypto industry becoming more secure?
The monthly data shows significant volatility, making it difficult to declare a long-term trend. While May’s figures are encouraging, the overall value lost to hacks in 2024 remains substantial. The industry continues to face challenges from smart contract bugs, cross-chain bridge vulnerabilities, and social engineering attacks. Ongoing investment in security infrastructure and user awareness is essential to reduce future losses.