The security situation of Web3.0 remains severe, with losses nearing $2.5 billion in the first half of 2025.

Recently, a report on the security situation of Web3.0 in the second quarter and first half of 2025 was released. The report shows that in just the first half of 2025, losses caused by security incidents are close to 2.5 billion USD, and so far, the total losses have exceeded last year's annual level. Overall, the security situation of Web3.0 remains severe, and the methods of threats are still continuously evolving and upgrading.

Key Data for Q2 2025

• A total of 144 on-chain security incidents occurred in the Web3.0 industry, with total losses of approximately $800 million. Compared to the previous quarter, the total loss amount decreased by about 52.1%, and the number of security incidents reduced by 59.

• Phishing attacks were the most damaging attack method this quarter, with a total of 52 security incidents resulting in approximately $400 million stolen. Next were code vulnerability attacks, with 47 security incidents leading to approximately $240 million stolen.

• Approximately $180 million in stolen funds have been recovered this quarter, with a total net loss of about $620 million.

Overview of the First Half of 2025

• A total of 344 security incidents occurred, with cumulative losses reaching as high as $2.47 billion.

• The theft of wallets has caused the most severe financial losses, with 34 incidents resulting in approximately $1.71 billion in losses. Following that are phishing attacks, which have accumulated to 132 security incidents, causing losses of about $410 million, and have now become the most frequent type of attack.

• The total amount of recovered stolen funds is approximately $190 million, while the total net loss is approximately $2.29 billion.

Security Trend Analysis

As of June 30, the cumulative net loss in 2025 reached $2.29 billion, exceeding last year's total net loss of $1.98 billion. Despite the increasingly severe security situation from an overall data perspective, approximately $1.78 billion of this year's losses are concentrated in two major incidents. Excluding these two incidents, the overall loss for the industry this year stands at $690 million, and the risk landscape still requires a dialectical view.

From the perspective of attack methods, although the leakage of private keys attracted widespread attention in 2024, this issue has significantly decreased in the first half of 2025. However, phishing attacks have surged, becoming the most threatening form of attack currently. As phishing techniques become increasingly covert and deceptive, users urgently need to enhance their security awareness: avoid clicking on unknown links, carefully verify website domain names, enable multi-factor authentication, and it is recommended to use hardware wallets for private key management.

Industry Development Trends

In the first half of 2025, several globally influential regulatory and market developments occurred, which will profoundly impact the future direction of the cryptocurrency industry:

• The United States has revoked the previous digital asset policy through Executive Order 14178, prohibiting any form of government-issued CBDC (Central Bank Digital Currency), and introduced a new regulatory framework.

• The United States officially established a strategic Bitcoin reserve, utilizing seized assets to create a national sovereign-level cryptocurrency asset reserve.

• The EU's Markets in Crypto-Assets Regulation (MiCA) has come into full effect, providing clear regulatory guidelines for stablecoin issuers and crypto asset service providers.

• Hong Kong has passed legislation related to stablecoins, requiring issuers to obtain a license and have a clear redemption mechanism.

• India has announced that it will release a policy document on the regulation of digital assets.

• Pakistan has established its first Bitcoin reserve and is building energy infrastructure to support cryptocurrency mining.

• One stablecoin issuer launched an IPO, while another expanded into the commodity-backed stablecoin application space and made significant investments in Latin America.

With the continuous development of the industry, security issues remain one of the main challenges faced in the Web3.0 field. Both users and project parties need to stay vigilant and take necessary security measures to deal with increasingly complex security threats.