CertiK releases its annual security report: Web3 losses are projected to increase by 37% year-on-year in 2025, with phishing attacks and supply chain incidents being the main threats.

Global Web3 security company CertiK released its "2025 Skynet Hack3D Web3 Security Report," summarizing security incidents and risk trends in the Web3 field over the past year. The report shows that 630 security incidents occurred in the Web3 field in 2025, resulting in approximately $3.35 billion in losses, a 37% increase year-over-year. Although the total number of incidents decreased by 137 compared to 2024, the average loss per attack reached $5.322 million, a surge of 66.6% year-over-year, indicating that attackers are focusing on high-value targets. The report points out that market recovery and regulatory clarity have not alleviated security risks, and the Web3 industry still faces systemic threats. In the future, projects that integrate security into their design, development, and operational processes are expected to gain an advantage in the fierce competition.