Crypto Space Lost $92M to Hacks in April 2025, Total Loss YTD Hits Whopping $1.74B

Hackers stole more than $92.4 million from crypto projects in April 2025. At the same time, the total losses for the first four months of the year alone surpassed $1.74 billion, according to blockchain security platform Immunefi.

In April, the crypto space suffered a loss of $92,453,100 across 15 specific incidents. Per the report, this is a 27.3% increase compared to April 2024. At the time, registered losses stood at $72,606,827.

Furthermore, this figure marks a 2.2x rise month-over-month. Losses in March 2025 totaled $41,406,115.

Meanwhile, Immunefi noted that two incidents were responsible for the majority of the $92.4 million. Open-source platform UPCX lost $70 million, while decentralized exchange KiloEx suffered a $7.5 million loss.

Loopscale and ZKsync followed with losses between $5 million and $6 million. Term Labs and Bitcoin Mission also saw more than $1 million stolen each.

In 2025 YTD, the crypto ecosystem saw $1,742,117,315 in total losses. This is a 4x increase compared to $420 million during the same period last year.

Moreover, it has already surpassed the total losses for the entire 2024, which recorded a loss of $1.49 billion.

Meanwhile, Immunefi’s March report noted that “Q1 2025 marks the worst quarter for hacks in the history of the crypto ecosystem,” with $1.64 billion lost. Most of that was the result of only two hacks of centralized exchanges. Phemex suffered a $69.1 million loss in January, while Bybit lost $1.46 billion in February.

100% DeFi Hacks

Hacks were the main cause of losses in April, compared to fraud, accounting for 100% of it.

At the same time, decentralized finance (DeFi) surpassed centralized finance (CeFi) yet again. The former accounted for 100% of the stolen funds.

Moreover, Ethereum and BNB Chain were once more the most targeted chains. The two accounted for over half of the losses, or 60% to be more precise.

Ethereum suffered the most attacks. Its five incidents represented 33.3% of all attacks. BNB Chain saw four attacks, or 26.7%.

Furthermore, Base recorded three incidents (20%), while Arbitrum, Solana, Sonic, and ZKsync suffered a single attack each.

Meanwhile, Immunefi says it offers over $180 million in available bounty rewards and has paid out over $116 million in total bounties so far.

In late March, it launched Magnus, its novel AI-powered security orchestration platform. The team said that the new platform united threat intelligence and automated security operations across a protocol’s security stack, maximizing protection.

They also said they planned to announce additional partnerships with “a number of top-tier security service and tooling providers.”