Crypto Losses From Hacks Reach $972M in First Half of 2025, Immunefi Reports

Cryptocurrency projects lost a combined $972 million to hacking incidents during the first half of 2025, according to a new report from Web3 security firm Immunefi. While the total value of stolen funds dropped by roughly 50% compared to the same period last year, the number of separate attacks reached an all-time high of 207.

Record Number of Incidents but Lower Total Losses

The Immunefi report highlights a significant shift in the crypto threat landscape. Although attackers executed more individual exploits than in any previous six-month period, the average financial damage per incident declined substantially. This suggests that security measures across the ecosystem may be improving, or that attackers are targeting smaller, less protected projects rather than major exchanges or protocols.

Industry analysts note that the reduction in total losses, despite the surge in attack frequency, could indicate that bug bounty programs and proactive security audits are becoming more effective. Immunefi itself operates one of the largest bug bounty platforms in Web3, offering rewards to ethical hackers who identify vulnerabilities before malicious actors can exploit them.

DeFi and Cross-Chain Bridges Remain Primary Targets

The report identifies decentralized finance (DeFi) protocols and cross-chain bridge infrastructure as the most frequently targeted categories. These platforms often manage large pools of user funds and can contain complex smart contract code, creating opportunities for attackers to find and exploit weaknesses.

Several high-profile incidents in early 2025 involved exploits of newly launched protocols, underscoring the importance of thorough code review and real-time monitoring. The data from Immunefi reinforces the need for projects to invest in security from the earliest stages of development.

Implications for Crypto Investors and Project Teams

For individual investors, the trend of more frequent but smaller attacks does not eliminate risk. Users are advised to research the security track record of any platform before depositing funds, including whether the project has undergone independent audits and participates in a bug bounty program.

For project developers, the report serves as a reminder that security is a continuous process. Regular smart contract audits, threat monitoring, and rapid incident response plans are becoming baseline expectations in the industry.

Conclusion

The $972 million in crypto losses during the first half of 2025, while substantial, represents a notable decrease from the prior year. The record number of incidents, however, signals that the threat landscape is evolving. As the Web3 ecosystem matures, the emphasis on proactive security measures and community-driven vulnerability disclosure will likely play an increasingly critical role in protecting user assets.

FAQs

Q1: What is the main finding of the Immunefi report on crypto hacks in H1 2025?
A: The report found that total losses from crypto hacks reached $972 million in the first half of 2025, a 50% drop from the same period in 2024, despite a record 207 separate incidents.

Q2: Why did the number of hacks increase while total losses decreased?
A: Analysts suggest that improved security practices, bug bounty programs, and smaller-scale attacks on less protected projects may have contributed to lower average losses per incident.

Q3: Which types of crypto projects were most affected by hacks in H1 2025?
A: Decentralized finance (DeFi) protocols and cross-chain bridges were the most frequently targeted categories, according to the Immunefi data.