> At a Glance
> – December 2025 crypto hacks totaled $76.2 million, down 60% from November’s $194.2 million
> – 26 incidents recorded, with the largest being a $50 million address-poisoning scam
> – Bybit’s $1.4 billion breach in February led to $2.2 billion lost in the year’s top 10 hacks
> – Why it matters: Despite the monthly dip, 2025 was one of the costliest years for crypto security breaches
Crypto hackers stole $76.2 million across 26 incidents in December 2025, marking a 60% drop from November’s $194.2 million, according to blockchain security firm Peckshield. While the monthly decline offers a brief respite, the year still closed with over $2.2 billion lost in major exploits.
December’s Biggest Hits
The largest single incident was a $50 million address-poisoning scam, where attackers mimicked wallet addresses to trick users into sending funds to the wrong destination.
Other major breaches include:
- $27.3 million lost in a multisig wallet compromise due to a private key leak
- $22 million stolen from babur.sol
- $8.5 million taken via a trojanized Trust Wallet Chrome extension
- $3.9 million each lost by Unleash Protocol and Flow blockchain
2025’s Most Devastating Breaches
Despite December’s slowdown, 2025 was a brutal year for crypto security. The top 10 hacks alone accounted for $2.2 billion in losses.
| Platform | Month | Loss |
|---|---|---|
| Bybit | Feb | $1.4 billion |
| Cetus | May | $223 million |
| Balancer V2 | Nov | $128 million |
| Bitget | Apr | $100 million |
| Phemex | Jan | $85 million |
Centralized exchanges weren’t spared. Phemex and Nobitex both suffered hot wallet breaches, with losses totaling $85 million and $80-90 million, respectively. In each case, withdrawals were frozen and remaining assets secured.
Key Takeaways
- December saw fewer large-scale breaches, but 26 incidents still occurred
- Bybit’s February breach remains the largest single hack of 2025
- Multisig and private key leaks continue to be major attack vectors
- $2.2 billion lost in 2025 underscores the ongoing security crisis in crypto
Even with December’s decline, the year-end total shows crypto security remains a critical vulnerability across both DeFi and centralized platforms.
