GoPlus: In 2025, the Web3 domain experienced over 1200 serious security incidents, resulting in cumulative losses exceeding $3.5 billion.

GoPlus released its "2025 Web3 User Security and Risk Trends Report," stating that over 1,200 serious security incidents occurred in the Web3 space in 2025, resulting in cumulative losses exceeding $3.5 billion. CeFi platforms were the primary victims due to the theft of hot wallets and administrator private keys; while the proportion of losses from DeFi contract vulnerabilities decreased, deep logic vulnerabilities and Move contract issues increased; private key theft, phishing, and Rug Token attacks were the most frequent types of incidents. Bybit ($1.5 billion), Cetus ($223 million), and Balancer ($128 million) were among the cases with the highest annual losses.