Cybercriminals targeting cryptocurrencies continue to undermine the industry's credibility, with nearly $1.5 billion stolen through cyberattacks so far in 2024.
According to a report from Immunefi, hackers made off with over $71 million in November alone, pushing the total value of digital assets stolen this year to $1.48 billion across 209 separate incidents. While this represents a 15% decline compared to the same period in 2023, when losses exceeded $1.75 billion, the industry remains far from secure.
Mitchell Amador, CEO of Immunefi, warned that the sector is constantly at risk of a major attack. Despite the decline in losses, hackers continue to refine their tactics, exploiting weaknesses in projects, compromising wallets, and uncovering vulnerabilities. He emphasized the need for vigilance, as one significant breach could cause severe damage to the ecosystem.
The rise in cryptocurrency valuations and the increasing total value locked (TVL) in decentralized finance (DeFi) protocols make the space an even more enticing target. The TVL has grown by more than 164% since late 2023, amplifying risks for both investors and developers. Amador highlighted the necessity for robust security measures, noting that the escalating value in the ecosystem demands heightened protection to safeguard projects and users as 2025 approaches.
Among the largest incidents in November was the $25.5 million Thala attack, which targeted a farming vulnerability but ultimately saw all stolen assets recovered. Another major event was the $21 million DEXX hack on November 18, impacting more than 900 investors.
The U.S. Securities and Exchange Commission (SEC) has filed emergency enforcement actions against First Liberty Building & Loan, LLC and its founder, Edwin Brant Frost IV, alleging they operated a $140 million Ponzi scheme that spanned more than a decade and defrauded around 300 investors.
A legal clash between Coin Center and the U.S. Treasury Department over sanctions imposed on Tornado Cash has officially come to an end, following a joint decision to dismiss the case.
A sophisticated cyberattack targeting Brazil’s central bank reserve accounts has resulted in the theft of over $140 million (R$800 million), much of which was swiftly funneled through cryptocurrency channels.
A malicious open-source project on GitHub disguised as a Solana trading bot has compromised user wallets, according to a July 2, 2025, report by cybersecurity firm SlowMist.