CertiK report: More than 700 Web3 security incidents in 2025 will result in $3.35 billion in losses.

PANews reported on December 24th that CertiK released its 2025 Skynet Hack3D security report. The report shows that Web3 security losses totaled $3.35 billion in 2025, with over 700 security incidents. The report points out that while the Web3 ecosystem has recovered due to improved macroeconomic conditions and US policy support, the threat landscape has become increasingly complex. Attackers are concentrating resources on large-scale operations, primarily targeting high-value objectives such as private key management, authentication, and access control. Data shows that the average loss per attack in 2025 was $5.32 million, a 66.64% increase year-over-year, while the median loss decreased by 35.75% to $104,000. February was the worst month of the year due to the Bybit incident, with losses reaching $1.537 billion, accounting for nearly half of the total losses. Supply chain attacks were the most expensive type of attack, causing $1.45 billion in losses, while phishing attacks topped the list with 248 incidents. Ethereum was the most attacked ecosystem, with 310 incidents and losses totaling $1.698 billion.

According to previous reports, CertiK's annual report recorded 248 fishing incidents in 2025, resulting in losses of approximately $723 million .