CoinGecko: Crypto hacks stole $3.63B from 245 incidents since 2025

CoinGecko analyzed 245 security incidents at crypto platforms between January 2025 and July 2026 and found that $3.63 billion was stolen. More than 72.5% of total losses came from the 10 largest attacks, while losses tied to infrastructure and supply-chain vulnerabilities alone exceeded $1.8 billion. Among centralized exchanges, private key compromise was the most common vulnerability, according to the analysis. In dApps, smart contract attacks led to $546 million in losses. Losses also stemmed from oracle and market manipulation or internal mechanism failures, with Bitget, Binance, and Hyperliquid cited as examples. CoinGecko said 147 of the total incidents occurred at platforms that had undergone external security audits in advance, accounting for 88.44% of the total amount stolen. However, many of the attacks on audited platforms occurred in areas beyond the usual scope of audits, including external infrastructure and code added after the audit. Incidents caused by smart contract flaws that were within audit scope accounted for about 11%, with related losses totaling $396 million.