💸 US\$ 3.1 billion has already been stolen from the crypto sector in 2025 — access control remains the main threat

According to Hacken, the crypto industry lost US\$ 3.1 billion in the first half of 2025 due to access vulnerabilities, bugs in smart contracts, and scams — surpassing the total for all of 2024.

➡️ Main vulnerabilities

🟡 59% of losses were caused by access control failures

🟡 Smart contracts caused US\$ 263 million in losses

🟡 The attack on GMX v1 became the main target due to outdated code

🟡 The attack on Cetus (US\$ 223 million in 15 minutes) is the largest DeFi exploit since the beginning of 2023

➡️ DeFi and CeFi under attack

🟡 A combined total of US\$ 1.83 billion was stolen from DeFi and CeFi platforms

🟡 In DeFi, there were fewer access control failures, but more bugs in smart contracts

🟡 In the case of Cetus, up to 90% of funds could have been saved with an automatic TVL pause

➡️ AI — the new risk vector

🟡 AI-driven attacks increased by 1,025% in one year

🟡 98.9% are linked to insecure APIs

🟡 34% of Web3 projects are already using AI agents in production

🟡 Current standards (NIST, ISO 27001) do not cover specific AI risks

With the advancement of AI adoption and the expansion of DeFi, the weakest link remains the same — access and processes. Technology evolves, but old mistakes persist.

Cryptocurrency Showcase 💸