$3.63 billion stolen since 2025

Security remains a top priority across crypto, yet losses continue to climb, with $3.63 billion stolen since 2025. CEXes are most exposed through private key compromise, while DEXes face smart contract exploits, increasingly compounded by fake UIs and malicious integrations.

The actors have evolved just as fast. Rogue individuals have given way to organized cartels and state-sponsored groups, including North Korean hackers, who now use mixers, bridges, and staggered withdrawals to stay untraceable. This report examines the shifting threat landscape, from auditing and insurance protocols to the security infrastructure CEXes like Toobit deploy to protect users.