The cryptocurrency market had a rare moment of “breathing” in October 2025, when the total value of damage from hacks and exploits fell to its lowest level of the year.
Data from blockchain security firm PeckShield shows that just $18.18 million was stolen across 15 separate incidents, a sharp 85.7% drop from the $127.06 million recorded in September 2025.
Cryptocurrency hacks hit yearly low despite new risks
The biggest cases of the month took place at Garden Finance, Typus Finance and Abracadabra, accounting for a total of $16.2 million in stolen funds.
Biggest DeFi hacks in October 2025. Source: defillamaGarden Finance, a peer-to-peer Bitcoin protocol, said on October 30, 2025, that the project was exploited for over $10 million after one of its solvers was compromised.
The incident only affected the solver's own assets, but pushed up October's loss figures in the final hours of the month.
Without the Garden Finance case, total losses would have been just around $7.18 million — the lowest monthly level since early 2023.
Typus Finance, a yield generation platform built on Sui, suffered an oracle manipulation attack on October 15, 2025. The exploit drained approximately $3.4 million from liquidation pools.
Investigators later traced the vulnerability to one of the TLP contracts, causing the project's native Token to drop by about 35%.
Around the same time, DeFi lending platform Abracadabra suffered its third attack since its launch. The attack resulted in a loss of about $1.8 million in MIM stablecoins after hackers bypassed solvency checks through a smart contract vulnerability.
While October's modest losses suggest protocol security has improved, cybersecurity experts warn the threat landscape continues to evolve.
Earlier this month, BeInCrypto reported that state-backed groups, particularly hackers linked to North Korea , are experimenting with embedding malware directly into blockchain networks . This new tactic could bypass traditional layers of security and create new risks for decentralized systems.
All in all, the new phase of “cyberwar” targeting blockchain shows a sobering reality: as DeFi protocols strengthen their defenses, attackers evolve at the same pace.
So the industry's best month in 2025 may just be a temporary lull, not the start of long-term security.




