May 2025 Sees $244.1 Million in Cryptocurrency Security Incidents

CertiK's latest report highlights a significant surge in losses due to code vulnerabilities, emphasizing the need for enhanced security measures in the Web3 space.

SUI

Summary

In May 2025, cryptocurrency investors faced over $302 million in losses from scams, hacks, and exploits, with code vulnerabilities causing $229.6 million—a staggering 4,483% increase from April. Phishing accounted for $47.6 million, while private key compromises and price manipulation contributed $11.6 million and $1 million, respectively. The Cetus Protocol exploit was the largest incident, resulting in a $225.6 million loss.

Terms & Concepts
  • code vulnerability: A flaw in software code that can be exploited by attackers to compromise security and access funds.
  • phishing: A fraudulent attempt to obtain sensitive information by disguising as a trustworthy entity, often through deceptive emails or websites.
  • private key compromise: A security breach where an attacker gains access to a user's private key, allowing them to control the associated cryptocurrency.