Ledger All ledgers
Crypto in 2025: the year in data
Crypto in 2025: $2.72bn lost to hacks, 157 US enforcement steps, 187 sanctioned addresses and 98 MiCA licences, from the ledgers.
$2.72bn lost to crypto hacks in 2025
$2.72bn was lost in 146 crypto hacks with a known loss. Losses were up 63% on 2024. The largest was Bybit, at $1.40bn. US government statements attribute one of the year’s hacks to North Korea, $1.40bn in all.
US agencies took 157 crypto enforcement steps, down 14% on 2024, most of them from the DOJ (105). The median prison sentence across the 30 sentences that included prison time was 7.1 years.
OFAC actions named 187 crypto addresses that no OFAC action since January 2024, when this ledger starts, had named before, up 117% on 2024, and OFAC removed 90.
98 firms were authorised under MiCA in the EU.
Largest hacks
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 21 Feb 2025 | Bybit | $1.40bn | CEX | Signer Phishing | $1.40bn |
| 22 May 2025 | Cetus CLMM | $223.0m | DeFi Protocol | Arithmetic Error | — |
| 03 Nov 2025 | Balancer V2 | $128.0m | DeFi Protocol | Rounding Error | — |
| 20 Apr 2025 | Bitget | $100.0m | CEX | Market Maker Bot Exploited | — |
| 23 Jan 2025 | Phemex | $85.0m | CEX | Hot Wallet Key Compromised | — |
| 18 Jun 2025 | Nobitex | $82.0m | CEX | Malware | — |
| 01 Apr 2025 | UPCX | $70.0m | DeFi Protocol | Proxy Upgrade Hijack | — |
| 24 Feb 2025 | Infini | $49.5m | DeFi Protocol | Private Key Compromised | — |
| 14 Aug 2025 | BtcTurk | $48.0m | CEX | Hot Wallet Key Compromised | — |
| 19 Jul 2025 | CoinDCX | $44.2m | CEX | Hot Wallet Key Compromised | — |
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
US enforcement
- DOJ105
- SEC24
- OFAC14
- CFTC9
- FinCEN3
- NYDFS2
Every enforcement step in 2025 · By US Attorney’s office
Sanctions
Most addresses added were tied to Cheil Credit Bank (53), Garantex Europe OU (9), Ansarallah (8), Grinex (7). 12 individuals were also listed; they aren’t named here. The FBI published 51 addresses from thefts it attributes to North Korea.
Check an address · Sanctioned entities
MiCA licences
98 firms were authorised in 17 countries, most in the Netherlands.
The MiCA register · Which big exchanges have one
Hacks are DefiLlama’s records; enforcement, sanctions and licences come from the agencies’ own documents and lists. Enforcement and sanctions records start in January 2024. How this is built
Cite this Bitminer.io, “Crypto in 2025, the year in data”, data to 5 November 2026, https://bitminer.io/ledger/year/2025/. Free to reuse under CC BY 4.0 with credit and a link. How this is built · Frozen copy of November 2026’s data