State hackeos and sophisticated exploits derive record losses in the crypto industry: TRM Labs

So far from 2025, more robberies and capital losses have been registered as a result of hackeos than seen in 2024. TRM Labs He warns about sophistication of attacks, and alerts about the need for better measures to protect crypto funds.

***

• More than 80% of cryptocurrency losses are due to attacks on key infrastructure.
• The total theft so far this year already exceeds everything lost in 2024.
• Hackers backed by states represent most capitalized losses.

For the first half of 2025, cryptocurrency robberies have reached record figures, mainly driven by attacks on technical infrastructure and protocols. This is revealed by a new report by the Intelligence Firm Blockchain TRM Labs, reviewed by Cointelegraph, which estimates losses for more than USD $ 2.1 billion.

The report underlines a worrying change: Cybeards are no longer only the work of criminals individually, but are increasingly led by actors backed by geopolitical states and motivations.

Infrastructure attacks dominate the panorama

TRM Labs identified that 80% of robbed cryptocurrencies between January and June 2025 They were the product of attacks on protocols infrastructure, including private seed phrases and manipulations in user interfaces.

These attacks, defined as “Infrastructure exploits”, They allow attackers to take control of the systems from their foundations. Often, they combine with social engineering techniques to deceive users and operators.

“The approach points to fundamental weaknesses in cryptographic systems, exacerbated by the excessive trust of users in vulnerable interfaces,” He warned TRM Labs.

On average, these attacks generated losses ten times greater than other types of exploits.

Protocol exploits remain effective

In addition to infrastructure attacks, exploits to protocols – as light loans (flash loans) and reentry attacks – represented 12% of the losses so far this year.

These vulnerabilities in intelligent contracts allow to extract funds or alter the behavior of the system. Although their proportion was lower, they are still a persistent threat.

“These weaknesses can be exploited even without direct access to private keys, which makes them attractive vectors for highly technical attackers,” The report pointed out.

Record figures and state participation

The losses of the first semester of 2025 already exceed the total robberies reported throughout 2024. In addition, the previous record recorded in 2022 exceeds 10%.

Much of this impact is attributed to a single event: the hacking in February of the platform Bybit, based in Dubai, by groups linked to North Korea. This attack generated losses for USD $ 1.5 billion, representing 70% of the annual total to date.

The report highlights that the average size of the attacks has also grown significantly. In 2025, incidents have averaged about USD $ 30 million, twice as much as the previous year.

Other relevant incidents include the attack of the Pro-Israel cybernetic group Gonjeshke Darende (Predatry Sparrow) To the Iranian platform Nobitex, On June 18, which resulted in the loss of USD $ 100 million.

An urgent call to global collaboration

TRM Labs He warned that the increase in sophisticated attacks with state motivations marks a turning point for the crypto industry. They point out that it is now crucial to adopt an integral security posture, beyond individual solutions.

Among the suggested measures are the extended use of authentication of two or more factors, cold storage, regular audits, and greater surveillance of internal threats and advanced social manipulation.

The report also advocates a “Multifaceted collaboration” Among financial intelligence agencies, international police forces and specialized signatures in blockchain analysis.

“The record figures of robberies in the first half of 2025 are an urgent call to a strategic, sustained and coordinated defense, capable of facing not only crime, but also undercover operations led by governments,” concluded TRM Labs.

Article written by a content editor. Edited by Angel Di Matteo / Diariobitcoin

Original image of Diariobitcoin, created with artificial intelligence, freely used, licensed under public domain

WARNING: Diariobitcoin offers informative and educational content on various topics, including cryptocurrencies, AI, technology and regulations. We do not provide financial advice. Cryptactive investments are high risk and may not be adequate for all. Investigate, consult an expert and verify the applicable legislation before investing. I could lose all its capital.

Subscribe to our newsletter