Bybit and North Korean hackers headline $2.1 billion crypto hacks in H1

The first half of 2025 revealed deep vulnerability in the cryptometer, with hackers stolen over $ 2.1 billion per 75 separate incidents.

This means a 10% increase compared to the previous H1 record of $ 2 billion in 2022 and almost corresponds to the whole year of 2024, which according to A closed to $ 2.2 billion, according to A message From the blockchain Intelligence Trm labs.

This increase in losses was primarily driven by a single event. AND Massive exploitation of $ 1.5 billion targeting Bybit In February, almost 70% of all crypto thefts were in H1 2025.

However, even outside this violation, for several months, namely January, April, May and June, each recorded over $ 100 million to compensate for damages from individual attacks.

Meanwhile, if there was no swivel hack, the total losses from these incidents could land closer to $ 600 million, the lowest half of the year from 2023.

Trm Labs further remarked The size of the hack grew significantly During the reported period. According to the company, the average theft in H1 2025 reached almost $ 30 million, doubled the average of $ 15 million recorded in the same period last year.

Dominated by attacks on infrastructure

Most of the crypto hacks 2025 stems from structural weaknesses in how digital assets are built and accessible.

TrM Labs said that attacks involving stolen private keys, endangered seed phrases, and manipulated front-end interfaces were responsible for more than 80% of stolen means.

These infrastructure -based violations often use gaps in trust and internal vulnerability, allowing poor actors to entertain platform control or redirect resources without starting standard alerts.

Meanwhile, intelligent contracts have not been spared. About 12% of the recorded incidents included attacks on the level of protocol levels such as re -planting and handling flash loans.

These often focus on logical shortcomings in decentralized applications, which shows that even a well -issued code remains susceptible in complex financial operations.

Hackers supported by the state

According to the report, geopolitical motivation also played a visible role in the developing slopes of developing industries.

Blockchain security firm noted this Groups associated with North Korea Continue to control the scene and the H1 2025 were about $ 1.6 billion of the total stolen asset, including a Byit hack.

This number emphasizes that the Asian country is constantly relied on the theft of crypto to support the state initiatives. TrM Labs has pointed out that these offensive campaigns are associated with financing programs that include military and nuclear development and wider efforts to avoid global sanctions.

Meanwhile, other state actors also appear. Hack was attributed in June Gonjeshke Darande, allegedly associated with IsraelTarient in the highest Iranian cryptocurrency, nobitEx, siphling over $ 90 million.

The attackers allegedly claimed that the operation aimed to disrupt Iranian efforts to embrace financial restrictions. In particular, stolen assets were sent to unusual blockchain addresses, suggesting that the attack was designed as a political statement rather than profit.

This development suggests that the theft of digital assets is becoming an increasingly tactical tool in international disputes.

Stated in this article