Analysis of Web3.0 Security Situation in the First Half of 2025: Losses Near $2.5 Billion, Escalating Threat Tactics

Recently, a report on the security status of Web3.0 in the second quarter and the first half of 2025 has attracted widespread attention in the industry. The report shows that losses due to security incidents in just the first half of 2025 are close to $2.5 billion, and as of now, the total losses have exceeded last year's annual level. Overall, the security situation of Web3.0 remains severe, and the methods of threats are continuously evolving and upgrading.

Key Data for Q2 2025

• A total of 144 on-chain security incidents occurred in the Web3.0 industry, with total losses amounting to approximately $800 million. Compared to the previous quarter, the total loss decreased by about 52.1%, and the number of security incidents reduced by 59.

• Phishing attacks were the most damaging attack method this quarter, with a total of 52 security incidents resulting in approximately $400 million stolen. Following that, code vulnerability attacks accounted for 47 security incidents, leading to approximately $240 million stolen.

• Approximately $180 million of stolen funds have been recovered this quarter, with a total net loss of about $620 million.

Overview of Data for the First Half of 2025

• A total of 344 security incidents occurred, with cumulative losses amounting to 2.47 billion dollars.

• The most severe financial loss was caused by wallet theft, with 34 incidents resulting in losses of approximately $1.71 billion. Following that were phishing attacks, which totaled 132 security incidents, leading to losses of about $410 million, making it the most frequently occurring type of attack.

• The total amount of stolen funds recovered in the first half of the year is approximately $190 million, with a net loss of approximately $2.29 billion.

Security Trend Analysis

As of June 30, the cumulative net loss for 2025 reached $2.29 billion, surpassing last year's total net loss of $1.98 billion. Despite the increasingly severe security situation from an overall data perspective, approximately $1.78 billion of this year's losses were concentrated in two major incidents. Excluding these two incidents, the overall industry loss this year is $690 million, and the risk landscape still needs to be viewed dialectically.

From the perspective of attack methods, although the leakage of private keys attracted widespread attention in 2024, this issue has significantly decreased in the first half of 2025. However, phishing attacks have surged, becoming the most threatening form of attack currently. As phishing methods become increasingly covert and deceptive, users urgently need to enhance their security awareness: avoid clicking unknown links, carefully verify website domain names, enable multi-factor authentication, and it is also recommended to use hardware wallets for private key management.

Industry Development Trends

In addition to security incidents, several globally influential regulatory and market developments occurred in the first half of 2025, and these developments will profoundly impact the future direction of the cryptocurrency industry:

• The United States has revoked its previous digital asset policy through Executive Order No. 14178, prohibiting any form of government-issued CBDC (Central Bank Digital Currency), and introduced a new regulatory framework.

• The United States officially established a strategic Bitcoin reserve, using confiscated assets to create a national sovereign-level cryptocurrency reserve.

• The EU's Markets in Crypto-Assets Regulation (MiCA) has come into full effect, providing clear regulatory guidance for stablecoin issuers and crypto asset service providers.

• Hong Kong has passed legislation related to stablecoins, requiring issuers to obtain licenses and have clear redemption mechanisms.

• India has announced the release of a policy document regarding the regulation of digital assets.

• Pakistan has established its first Bitcoin reserve and is building energy infrastructure to support crypto mining.

• A well-known stablecoin company has launched an IPO, while another stablecoin giant has expanded into the field of commodity-backed stablecoin applications and made significant investments in Latin America.

This report provides valuable security insights and trend analysis for the industry, helping practitioners and users better address the security challenges in the Web3.0 field and promote healthy industry development.