Analysis Report on the Security Situation of Web3.0 in the First Half of 2025

According to the latest industry data, the security situation in the Web3.0 field remains severe in the first half of 2025. In just the first half of the year, losses due to security incidents approached $2.5 billion, surpassing the total for the entire previous year. It is worth noting that threat methods continue to evolve and upgrade.

Main Data

Q2 2025:

• A total of 144 on-chain security incidents occurred, with a total loss of approximately $800 million. Compared to the previous quarter, the total loss decreased by 52.1%, and the number of incidents decreased by 59.
• Phishing attacks caused the largest losses, with 52 incidents resulting in approximately $400 million stolen.
• Code vulnerability attacks ranked second, with 47 incidents causing losses of approximately $240 million.
• Approximately $180 million of stolen funds have been recovered, with a net loss of about $620 million.

First half of 2025:

• A total of 344 security incidents occurred, with cumulative losses of $2.47 billion.
• The most severe losses were caused by wallet thefts, with 34 incidents resulting in losses of approximately $1.71 billion.
• A total of 132 phishing attacks occurred, resulting in losses of approximately $410 million, making it the most frequent type of attack.
• Approximately $190 million of stolen funds have been recovered, with a net loss of about $2.29 billion.

Security Trend Analysis

As of June 30, the cumulative net loss for 2025 has reached $2.29 billion, exceeding last year's total of $1.98 billion. However, it is important to note that approximately $1.78 billion of this year's losses are concentrated in two major events. Excluding these two events, the overall industry loss stands at $690 million, and the risk landscape still needs to be viewed dialectically.

From the perspective of attack methods, the issue of private key leakage, which has drawn significant attention in 2024, has noticeably decreased in the first half of 2025. However, phishing attacks have surged, becoming the most threatening form of attack currently. As phishing techniques become increasingly covert and deceptive, users urgently need to enhance their security awareness:

• Avoid clicking on unknown links
• Carefully check the website domain name
• Enable Multi-Factor Authentication
• It is recommended to use a hardware wallet for private key management.

Industry Development Trends

In the first half of 2025, several far-reaching regulatory and market development events occurred globally:

• The United States has abolished its previous digital asset policy, prohibiting the government from issuing CBDC, and introduced a new regulatory framework.
• The United States has established a strategic Bitcoin reserve, utilizing confiscated assets to build a national-level cryptocurrency reserve.
• The EU's Markets in Crypto-Assets Regulation (MiCA) comes into full effect.
• Hong Kong has passed legislation related to stablecoins, requiring issuers to obtain licenses and have clear redemption mechanisms.
• India has announced the release of a regulatory policy document for digital assets.
• Pakistan has established its first Bitcoin reserve and is building energy infrastructure to support crypto mining.
• Circle launches IPO, Tether expands into the commodity-backed stablecoin space, and invests heavily in Latin America.

These developments will profoundly impact the future direction of the cryptocurrency industry, and all parties should closely monitor related dynamics and adjust their strategies in a timely manner.