Crypto Lost $3.63B to Exploits Since 2025: 60% of Hit Platforms Had Been Audited (CoinGecko)

Active crypto insurance coverage dropped from $163.2 million to $130.2 million, even as security exploits became increasingly frequent.

Crypto platforms have lost more than $3.63 billion to security incidents between January 2025 and July 2026. CoinGecko documented 245 attacks during the period.

The 10 largest incidents accounted for more than 72.5% of the total amount stolen, demonstrating that a relatively small number of major breaches drove most of the losses. Infrastructure and supply-chain vulnerabilities were the biggest sources of damage across both centralized exchanges and decentralized exchanges. Combined losses exceeded $1.8 billion.

Most Attacked Platforms Had Been Audited

Security failures involving Bybit and KelpDAO were notable examples. CoinGecko also found that the main weaknesses differ depending on how platforms are built.

For centralized exchanges, compromised private keys remained the most common point of failure, while decentralized applications lost $546 million through sophisticated smart contract exploits. Both centralized and decentralized platforms, however, remain exposed to oracle and market manipulation, with errors in internal mechanisms causing major losses for platforms including Bitget, Binance and Hyperliquid.