Web3.0 Industry Security Situation Report for the First Half of 2025

Recently, a report on the security status of the Web3.0 industry in the first half of 2025 has attracted widespread attention. The report reveals the severe security challenges currently facing the industry, while also reflecting the evolving threat landscape.

Overview of Security Incidents in the First Half of 2025

In the first half of 2025, the Web3.0 industry experienced a total of 344 security incidents, with cumulative losses reaching as high as $2.47 billion. Among them, 144 incidents occurred in the second quarter, resulting in approximately $800 million in losses, which is a decrease compared to the first quarter.

Among various types of attacks, the losses caused by wallet theft are the most severe, with 34 incidents resulting in approximately $1.71 billion in losses. Phishing attacks have become the most frequent threat, occurring 132 times and causing about $410 million in losses.

It is worth noting that approximately $190 million of stolen funds have been recovered in the first half of the year, reducing the total net loss to $2.29 billion. However, this figure still exceeds the loss level for the entire year of 2024.

Security Situation Analysis

Despite the overall loss data being concerning, in-depth analysis reveals that approximately $1.78 billion of the losses are concentrated in two major incidents. Excluding these two events, the overall loss for the industry is $690 million, indicating that the risk situation still needs to be viewed dialectically.

In terms of attack methods, the issue of private key leakage that attracted widespread attention in 2024 has significantly decreased in the first half of 2025. However, phishing attacks have shown a surge trend, becoming the most threatening form of attack currently. As phishing techniques become increasingly covert and deceptive, users urgently need to enhance their security awareness and take necessary protective measures.

Industry Regulation and Market Development Dynamics

In the first half of 2025, several far-reaching regulatory and market development events occurred globally:

• The United States has abolished its previous digital asset policy, prohibiting the government from issuing CBDCs, and introduced a new regulatory framework.
• The United States has established a national strategic Bitcoin reserve.
• The EU's "Regulation on Markets in Crypto-Assets" has come into full effect.
• Hong Kong has passed legislation related to stablecoins.
• India announces the release of regulatory policies for digital assets.
• Pakistan has established its first Bitcoin reserve.
• Circle launches IPO, Tether expands its business scope and invests heavily in Latin America.

These developments will have a profound impact on the future direction of the crypto industry.

Security Recommendations

In light of the current security situation, users are advised to:

1. Avoid clicking on unknown links
2. Carefully verify the website domain name
3. Enable Multi-Factor Authentication
4. Consider using a hardware wallet for private key management

By staying vigilant and taking appropriate security measures, users can significantly reduce the risk of becoming targets of attacks.

With the continuous development of Web3.0 technology, security issues will remain one of the primary challenges faced by the industry. Continuously monitoring the security situation and taking timely protective measures are crucial for both individual users and industry participants alike.