Reports

August 2025 was a turbulent but comparatively lighter month for crypto exploits. While major losses totalled ~$65 million, less than half of July’s ~$141 million, the industry still faced serious disruptions. However, this was overshadowed by widespread phishing campaigns targeting individual wallets, which alone accounted for an enormous $97 million in losses. High-profile incidents ranged from the $48 million breach at BTCTurk, to the suspicious disappearance of CrediX, underscoring the diverse and persistent threats facing the sector.

July 2025 was marked by a series of high-profile security breaches across both centralized and decentralized crypto platforms. From sophisticated backend compromises to smart contract exploits and phishing attacks, the month exposed critical vulnerabilities in the digital asset ecosystem.

June 2025 was a turbulent month for on-chain security, with a broad range of attacks having taken place, involving smart contract exploits, politically motivated exchange breaches, and more. In total, the month saw over $106.9 million in confirmed losses across a range of incidents, victimising DeFi protocols, centralized exchanges, and infrastructure providers.

This report breaks down the latest changes in VARA’s Rulebook 2.0, including mandatory KYT, Travel Rule enforcement, and quarterly AML risk assessments.

May 2025 marked a shift in the nature of crypto threat activity. While the number of major attacks decreased compared to previous months, the contextual events, including real world crimes, phishing operations and compliance breaches, saw a noticeable rise in frequency and complexity.

April 2025 witnessed a surge in complex and multi-faceted attacks across the crypto ecosystem, highlighting once again that vulnerabilities are not just technical, they can be systematic.

March 2025 was marked by a range of significant security incidents in the crypto ecosystem, underscoring the persistent and evolving risks facing decentralized platforms and token projects.

Recent intelligence has uncovered a significant threat to global cybersecurity infrastructure: the exposure of Medialand, a bulletproof hosting provider long suspected of enabling a wide range of illicit activities

February 2025 witnessed a surge in crypto related attacks, ranging from rug pulls and social engineering to contract vulnerabilities and private key compromises.

The first month of 2025 has seen a wave of crypto exploits, highlighting persistent vulnerabilities in the industry. From bridge exploits and smart contract flaws to phishing scams and compromised admin keys, these attacks have resulted in millions of dollars in losses across multiple blockchain networks.

The rapid evolution of blockchain technology, artificial intelligence (AI), and decentralized finance (DeFi) is reshaping the financial landscape, creating new opportunities while introducing significant risks in regards to anti-money laundering (AML) and counter-terrorist financing (CTF).

Cryptocurrency ATMs are becoming increasingly widespread across the globe, with countries like Poland, Canada, Spain, and Australia expanding their networks to offer easier access to digital currencies.

Recent years have demonstrated the growing reliance of cryptocurrency by terrorist organizations attempting to counter and avoid the traditional counterterrorism financing measures in place by regulatory services. The online nature of fundraising based on social media, such as telegram, has revealed the significant rise and role in digital currency to allow these terrorist groups, such as Hamas, Hezbollah, the Islamic State Khorasan (ISK) , the Taliban, IS and the Palestinian Islamic Jihad to fu

This report explores these differences, focusing on the relative vulnerabilities of crypto platforms due to their decentralized nature, the lack of regulatory oversight, and the inherent challenges in reversing transactions once they have been executed on the blockchain.

This report provides an analysis of significant security incidents and vulnerabilities within the cryptocurrency space during November 2024.

This month’s report highlights a significant surge in rug pulls among major incidents, alongside, and perhaps due to, a concerning rise in social engineering and phishing attacks targeting individual users.