Share this article

Crypto is Bleeding Billions a Year. Traditional Finance Is Watching.

If the DeFi industry doesn’t adopt the security tools we've already built, then we will watch institutional capital deploy elsewhere while hackers fund their operations with our losses, writes Immunefi’s Mitchell Amador.

Sep 10, 2025, 3:06 p.m.
Office at home
(Mesh/Unsplash)

What to know:

You're reading Crypto Long & Short, our weekly newsletter featuring insights, news and analysis for the professional investor. Sign up here to get it in your inbox every Wednesday.

Crypto is superior to traditional finance. Unlike SWIFT, which can take days to process payments, newer blockchain networks achieve finality in mere seconds and have throughput sufficient for real-world mass adoption. U.S. Treasury Secretary Bessent projects stablecoins alone will hit $3.7 trillion by 2030. That’s the equivalent of Germany's GDP.

Despite its technological edge, crypto has a major security problem. We're on track to lose around 4% of total value locked to hacks in 2025. In H1 alone, the industry lost over $2 billion. When annualized, that points to over $4 billion flowing into hackers' wallets this year.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Long & Short Newsletter today. See all newsletters

If these losses were mirrored in traditional finance, the entire system would collapse. Yet crypto normalizes catastrophic loss rates while wondering why JPMorgan isn't moving their balance sheet on-chain.

Hacks cost more than you think

The real damage goes far beyond immediate theft. It’s a burden on the whole ecosystem and it gets priced in. Hacked protocols suffer a median 52% token price decline over six months, with the majority still showing price suppression half a year later.

For an industry aspiring to manage the world's wealth, this is an existential problem. No traditional financial market could survive with annual theft rates approaching 4%. To unlock the institutional flood gates and bring the next trillion on-chain, we must drive hack rates below 1% – now.

The North Koreans are stalking your development team

The moment a crypto project announces funding, North Korean hackers begin social engineering attacks on development teams. They've gotten scary good at it. Look at the Radiant Capital hack – $50 million gone because attackers compromised devices through malware that infected transaction signing.

The most painful part of all of this is that we have the tools to stop this, and they keep getting better. AI-driven monitoring systems can spot and resolve critical security issues before code is deployed, catching vulnerabilities that humans miss. Auditing services connect projects with elite Web3 security researchers to deliver tailored security reports. We have the tools, yet projects still ship with single pre-launch audits and pray. Protocols set rewards to identify vulnerabilities at 1% of funds at risk when they should be at 10%. Moreover, they skip monitoring because it seems expensive until they're explaining to users why $50 million vanished.

How to make crypto ready for primetime

Reducing hack rates below 1% is an engineering challenge we already know how to solve. Protocols must embrace comprehensive security stacks: continuous monitoring, meaningfully priced security rewards to encourage security researchers, formal verification for critical components and AI-powered threat detection. The cost is trivial compared to the potential losses.

Banks and institutions see these hack rates. They run the math. And they conclude – correctly – that crypto isn't ready for prime time.

DeFi survived every market crash with no systemic bad debt. We solved the technical problems. Security can’t be an afterthought. Either we adopt the security tools we've already built, or we watch institutional capital deploy elsewhere while hackers fund their operations with our losses.

Note: The views expressed in this column are those of the author and do not necessarily reflect those of CoinDesk, Inc. or its owners and affiliates.

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

CoinDesk 20 Performance Update: Index Falls 1.5% as Nearly All Constituents Decline

9am CoinDesk 20 Update for 2025-12-05: leaders

Bitcoin Cash (BCH), up 0.5%, was the only gainer from Thursday.