Crypto Hacks Drop 22% in September 2025, but $127M Still Lost to Exploits

Funds misplaced to assaults diminished by 22% final month to $127M, however 2025 remains to be shaping up as some of the damaging years for Web3 safety.

Blockchain safety agency PeckShield has revealed that there have been about 20 main crypto exploits in September 2025 that price customers and tasks $127 million.

Whereas the entire is down 22% from the $163 million that was stolen in August, it nonetheless reveals how a lot hackers are hurting the digital asset sector.

UXLINK, SwissBorg, and Venus Lead September’s Largest Losses

In an October 2 submit on X, PeckShield flagged UXLINK’s $44 million exploit as final month’s largest. The social Web3 mission was first hit on September 22 when unhealthy actors manipulated its multi-signature pockets, stripping away admin controls and draining $11.3 million.

Quickly after, attackers minted billions of latest UXLINK tokens on Arbitrum, almost doubling the provision and sending the token’s value down greater than 70%. Regardless of efforts by exchanges reminiscent of Upbit to freeze belongings, a lot of the stolen funds stay within the attackers’ wallets.

Elsewhere, Swiss wealth administration platform SwissBorg misplaced about $41.5 million. The breach occurred as a result of Kiln, a trusted third celebration that handles Solana (SOL) staking, was attacked within the provide chain. The hacker was in a position to take management of just about 193,000 SOL by hiding malicious directions inside what appeared like a standard unstaking request.

A phishing rip-off additionally shook the Venus lending platform on September 2. In that incident, a sufferer misplaced about $13 million after being tricked right into a faux Zoom assembly, which let attackers take over their machine and alter their pockets code. Venus rapidly stopped operations after which forcibly closed the prison’s positions to get the stolen a refund.

Different exploits listed by Peckshield included an incident on the Yala stablecoin protocol that led to the lack of $7.6 million, and GriffAI, which misplaced $3 million in a smaller however extra focused assault.

You may additionally like:

A 12 months of Heavy Losses Regardless of Latest Decline

Even with September’s dip, 2025 has already formed up as some of the damaging years for crypto safety. Hacken, a blockchain safety agency, said in July that over $3.1 billion had been stolen within the first half of the yr alone, which is greater than the full-year whole of $2.85 billion in 2024. Loads of this was resulting from large-scale entry management failures, just like the $1.5 billion Bybit incident within the first quarter.

The sample reveals that two issues are getting worse: attackers are utilizing backdoors or privileged entry factors which were missed by safety groups, and customers are nonetheless falling for social-engineering traps. Analysts have famous that until platforms make investments extra closely in hardened entry management, unbiased audits, and person training, September’s dip could show non permanent in what stays a record-breaking yr for crypto crime.