温馨提示：本站仅提供公开网络链接索引服务，不存储、不篡改任何第三方内容，所有内容版权归原作者所有
AI智能索引来源：http://www.bee.com/ko/53054.html
点击访问原文链接

Beosin News | Analysis of Web3 Blockchain Security Situation in the First Half of 2025 | Bee Network

进入原网站 导航首页
Beosin News | Analysis of Web3 Blockchain Security Situation in the First Half of 2025 | Bee Network Login 인기 뉴스 밈 런치패드 AI 에이전트 DeSci 탑체인 익스플로러 뉴비의 경우 100x 코인 꿀벌 게임 필수 웹사이트 필수 앱 암호화폐 유명인 드핀 루키 에센셜 함정 탐지기 기본 도구 고급 웹사이트 교환 NFT 도구 안녕, 로그아웃 웹3 유니버스 계략 DApp 꿀벌 하이브 성장하는 플랫폼 기원 후 찾다 영어 코인 충전 로그인 다운로드 웹3 유니 계략 DApp 꿀벌 하이브 기원 후 집•분석•본문 Beosin News | Analysis of Web3 Blockchain Security Situation in the First Half of 2025분석8개월 전업데이트와이엇 29,0821 57 *This report is jointly produced by Beosin and Footprint Analytics

1. Overview of Web3 blockchain security situation in the first half of 2025 According to Beosin Alert monitoring and early warning, the total loss of Web3 due to hacker attacks, phishing scams and project party Rug Pull in the first half of 2025 was about 2.138 billion US dollars. Among them, there were 90 major attacks, with a total loss of about 2.093 billion US dollars; the total loss of Rug Pull was about 3.2 million US dollars; the total loss of phishing scams was about 41.38 million US dollars.

In terms of the types of projects attacked, exchanges have become the type of projects with the highest amount of losses. Six attacks on exchange platforms have caused a total loss of more than 1.591 billion US dollars, accounting for 74.4% of all attack losses.

In terms of the amount of losses on each chain, Ethereum is still the chain with the highest amount of losses and the most attacks. 81 attacks on Ethereum caused a loss of $1.739 billion, accounting for 81.3% of the total losses. Sui lost about $224 million due to the Cetus Protocol incident, ranking second.

In terms of attack methods, the most frequent attacks in the first half of the year were those that exploited contract vulnerabilities, which occurred 63 times in total and caused losses of $408 million. Bybit was stolen $1.44 billion due to defects in its wallet infrastructure, accounting for 67.4% of the total attack losses, making it the attack type with the highest proportion of losses.

In terms of capital flow, only a small portion (about US$238 million) of the stolen funds were frozen or recovered in the first half of the year, and about 71.2% of the stolen funds are still circulating in on-chain wallets and have not flowed into exchanges or mixers.

2. Overview of attacks in the first half of 2025 90 major attacks cost a total of $2.093 billion In the first half of 2025, Beosin Alert monitored 90 major attacks in the Web3 field, with a total loss of US$2.093 billion. Among them, there were 2 security incidents with losses exceeding US$100 million, 7 incidents with losses between US$10 million and US$100 million, and 18 incidents with losses between US$1 million and US$10 million.

Attacks with losses exceeding 10 million USD (sorted by amount):

● 바이비트 – $1.44 billion

Attack method: Safe wallet front end was tampered with Chain platform: Ethereum

On February 21, the 암호화폐currency exchange Bybit was attacked and about $1.44 billion of funds were stolen from its Safe multi-signature wallet. The hacker implanted malicious code by hacking into Safes server, replacing normal transaction requests, causing the signer to sign the tampered transaction without knowing it.

● Cetus Protocol – $224 million

Attack method: Contract vulnerability Chain platform: Sui

On May 22, the DEX Cetus Protocol on the Sui ecosystem was attacked . The vulnerability was caused by an implementation error of the left shift operation in the open source library code. Subsequently, with the cooperation of the Sui Foundation and other ecological projects, the stolen funds of $162 million on Sui have been successfully frozen.

● Nobitex – $90 million

Attack method: not yet clear Chain platform: multi-chain

On June 18, Irans largest crypto exchange Nobitex announced that it had suffered a hacker attack , with losses exceeding $90 million, involving multiple cryptocurrencies such as BTC, ETH, Doge, XRP, SOL, TRX and TON. A pro-Israel organization called Gonjeshke Darande has claimed responsibility for the attack and characterized it as a strike against Irans crypto infrastructure.

● Phemex – $70 million

Attack method: private key leakage Chain platform: multi-chain

On January 23, about $70 million worth of crypto assets were stolen from the hot wallet of Phemex, a Singapore-based cryptocurrency exchange, involving a variety of crypto assets such as ETH, SOL, BTC, BNB, USDT, etc.

● UPCX – $70 million

Attack method: Access control vulnerability Chain platform: Ethereum

On April 1, UPCX lost approximately $70 million worth of tokens due to unauthorized access. The hacker upgraded UPCX’s ProxyAdmin contract and subsequently executed a function that allowed administrators to withdraw funds, resulting in funds being transferred from three different administrative accounts.

● Infini – $49.5 million

Attack method: Permission management vulnerability Chain platform: Ethereum

On February 24, Infini was stolen $49.5 million because an internal developer secretly retained contract management authority by deceiving the team and stole funds by upgrading the contract.

● Abracadabra Finance – $13 million

Attack method: Contract vulnerability Chain platform: Ethereum

On March 25, the decentralized lending protocol Abracadabra Finance suffered a theft of approximately 6,262 ETH due to a contract vulnerability, resulting in a loss of approximately US$13 million.

● Cork Protocol – $12 million

Attack method: Contract vulnerability Chain platform: Ethereum

On May 28, the Cork Protocol, an anchored asset protocol on the Ethereum chain, was attacked . The attacker made a profit of $12 million through a logical vulnerability in the project contract (key parameters were not verified).

● BitoPro – $11.5 million

Attack method: private key leakage Chain platform: multi-chain

On June 2, the cryptocurrency exchange BitoPro issued an announcement confirming that it had been attacked , stating that during the recent wallet system upgrade and cryptocurrency transfer, its hot wallet was attacked by hackers, and approximately US$11.5 million of funds had abnormally outflowed from multiple on-chain hot wallets.

3. Types of Attacked Projects CEX is the project type with the highest loss amount The project type with the highest losses in the first half of the year was centralized exchanges. Six attacks on centralized exchanges caused a total loss of more than $1.591 billion. The exchange with the largest loss was Bybit, which lost about $1.44 billion. Other exchanges with large losses included Nobitex (lost about $90 million) and Phemex (lost about $70 million). Noones, BitoPro and Coinbase were also attacked.

The second most attacked type is DeFi. Among them, Cetus Protocol was stolen about 224 million US dollars, accounting for 69.1% of the stolen funds in DeFi. Other DeFi projects with large losses include Abracadabra Finance (13 million US dollars), Cork Protocol (about 12 million US dollars), Resupply (about 9.6 million US dollars), zkLend (about 9.5 million US dollars), Ionic (about 8.8 million US dollars), and Alex Protocol (about 8.37 million US dollars).

In addition, two security incidents occurred in the field of encrypted payments, with a loss of approximately $120 million, ranking third among all project types. Other attacked project types include: browsers, token contracts, cross-chain bridges, Memecoin launch pads, etc.

4. Amount of losses in each chain Ethereum is the chain with the highest amount of losses and the most attacks As in previous years, Ethereum is still the public chain with the highest amount of losses. 81 attacks on Ethereum caused losses of $1.739 billion, accounting for 81.3% of the total losses.

The second most attacked public chain is BNB Chain, with 33 attacks causing a total loss of about $42.53 million. BNB Chain has a large number of on-chain attacks, but the amount of losses is relatively small. However, compared with the same period last year, the number of attacks and the amount of losses have increased significantly, with the amount of losses increasing by 357%.

Arbitrum and Base ranked third and fourth, with losses of $21.2 million and $13.05 million respectively. Compared with the same period last year, the number of attacks on the Arbitrum chain increased, but the amount of losses dropped significantly by 71.8%; the number of attacks and the amount of losses on the Base chain increased significantly, with the amount of losses increasing by 294%.

5. Analysis of attack methods 70% of attacks come from contract vulnerabilities In the first half of the year, there were 63 attacks targeting contract vulnerabilities, causing losses of $408 million, which was the largest type of attack method with the exception of the theft of Bybit due to a flaw in the wallet infrastructure. The losses caused by private key leaks in the first half of this year were significantly reduced compared to the same period last year, but the total loss amount still exceeded $102 million.

According to the breakdown of contract vulnerabilities, the top three vulnerabilities causing losses are: business logic vulnerabilities (US$356 million), algorithm defects (US$21.37 million), and verification vulnerabilities (US$12.7 million). The top three contract vulnerabilities in terms of frequency are business logic vulnerabilities (45 times), access control vulnerabilities (7 times), and algorithm defects (5 times).

6. Analysis of the flow of stolen funds Only 11.1% of stolen assets were frozen and recovered
According to the analysis of the Beosin KYT anti-money laundering platform, of the stolen funds in the first half of 2025, approximately US$238 million of the stolen funds were frozen or recovered, accounting for approximately 11.1%.

About $97.89 million of stolen funds were transferred to various exchanges, accounting for about 4.6%. A total of $278 million (13.0%) was transferred to mixers: about $19.46 million was transferred to Tornado Cash; $259 million was transferred to other mixers. Compared with last year, the amount of stolen funds cleaned through mixing in the first half of 2025 increased significantly.

7. Summary of Web3 blockchain security situation in the first half of 2025 Compared with the first half of 2024, the total losses caused by hacker attacks, phishing scams, and project party Rug Pulls in the first half of this year have increased significantly, reaching US$2.138 billion. The number of attacks and the amount of losses on exchanges and mainstream public chain ecosystems are increasing overall, and the situation in the Web3 security field is still very serious.

The most damaging attack in the first half of the year was the Bybit theft, which accounted for about 67.4% of the losses. From the perspective of project types, attacks occurred in all areas of Web3: exchanges, DeFi, personal wallets, infrastructure, token contracts, payment platforms, browsers, Memecoin launch platforms, etc. All Web3 project owners/individual users need to be vigilant, store private keys offline, use multi-signatures, use third-party services with caution, and conduct regular permission updates and security training for privileged employees.

Only a small portion of assets were frozen or recovered in the first half of the year, indicating that global supervision and anti-money laundering efforts still need to be strengthened. The proportion of stolen funds transferred by hackers to exchanges in the first half of the year dropped significantly, which is related to the exchanges strengthening of anti-money laundering, timely identification of hacker behavior, and active cooperation with law enforcement agencies and project parties to freeze funds and conduct evidence collection. At present, the cooperation between exchanges and law enforcement agencies, project parties, and security teams has achieved relatively obvious results, so hackers are more likely to try to choose a variety of mixers to clean funds.

Of the 90 attacks in the first half of the year, 63 were still from contract vulnerability exploitation. It is recommended that project owners seek audits from professional security companies before going online. As one of the earliest blockchain security companies in the world engaged in formal verification, Beosin focuses on the security + compliance full-ecological business and has established branches in more than 10 countries and regions around the world. Its business covers code security audits before project launch, security risk monitoring and blocking during project operation, stolen recovery, virtual asset anti-money laundering (AML), and compliance assessments that meet local regulatory requirements, and other one-stop blockchain compliance products + security services.

This article is sourced from the internet: Beosin News | Analysis of Web3 Blockchain Security Situation in the First Half of 2025

Related: Web3 lawyer reveals: What kind of RWA do you understand? Recently, discussions about the RWA project have been heated in major Web3 communities. Industry observers on the Internet often put forward the conclusion that RWA will reconstruct the new financial ecology of Hong Kong, and believe that relying on the existing regulatory framework of the Hong Kong Special Administrative Region, this track will usher in a breakthrough development. In the process of communicating and discussing with colleagues, Crypto Salad found that everyone has been arguing about the so-called compliance issue recently, and the understanding of the question of what is compliance is also different. There is always a situation where the public has its own reasons and the woman has her own reasons. This phenomenon is actually based on the fact that there are still differences in the understanding of…

# 분석# 암호# 데피# 이더리움# 교환# 토큰# 웹3© 版权声명배열 上一篇 RWA Weekly Report｜The U.S. Senate passed Trump’s tax reform bill in a procedural vote; South Korea’s eight major banks a 下一篇 Crypto wins again? An in-depth analysis of Trump’s “Big and Beautiful Bill” 상关文章 The traditional payment model is about to collapse, and a trillion-dollar stablecoin financial company is about to be bo 6086cf14eb90bc67ca4fc62b 27,427 1 24H Hot Cryptocurrencies and Key News｜Fed Keeps Interest Rates Unchanged; Spot Gold Approaches $5600 (January 29) 6086cf14eb90bc67ca4fc62b 9,124 1800% 급등에서 하루 만에 반 토막까지: 기관 매도가 MYX의 “가치 폐쇄 루프” 해자를 무너뜨리다추천 예술 6086cf14eb90bc67ca4fc62b 24,464 1 A Comprehensive Guide to On-Chain U.S. Stocks: Why Are Crypto Enthusiasts Turning to U.S. Stocks, While Wall Street Goes On-Chain? 6086cf14eb90bc67ca4fc62b 13,660 1 Escalating geopolitical tensions in East Asia: A structural growth cycle for stablecoins, RWA, and on-chain yields. 6086cf14eb90bc67ca4fc62b 28,676 When the NFT bubble bursts, who will still be able to tell the “IP story” well? 6086cf14eb90bc67ca4fc62b 16,677 댓글 1 개 댓글을 남기시려면 로그인이 필요합니다! 즉시 로그인 Ahmed.alhilali143 손님 좋은

8개월 전 Bee.com 세계 최대의 Web3 포털 파트너 코인카프 바이낸스 코인마켓캡 코인게코 코인라이브 갑옷 Bee Network 앱을 다운로드하고 web3 여정을 시작하세요 백지 역할 자주하는 질문 © 2021-2026. 모든 권리 보유. 개인 정보 정책 | 서비스 약관 꿀벌 네트워크 앱 다운로드 Web3 여정을 시작해보세요 세계 최대의 Web3 포털 파트너 CoinCarp Binance CoinMarketCap CoinGecko Coinlive Armors 백지 역할 자주하는 질문 © 2021-2026. 모든 권리 보유. 개인 정보 정책 | 서비스 약관 찾다 찾다사이트에온체인사회의소식 熱门推荐 : 에어드롭 헌터 데이터 분석 암호화폐 유명인 함정 탐지기 한국어 English 繁體中文 简体中文 日本語 Tiếng Việt العربية Bahasa Indonesia हिन्दी اردو Русский 한국어

智能索引记录