Cryptocrime escalates in 2025 | $247 million stolen, AI and social engineering dominate new attack wave

1. Industry Overview: Cryptocurrency Crime Amount Exceeds $2.47 Billion

The global crypto asset security situation deteriorated again in 2025. According to the latest security reports released by ICO Bench and Chainalysis , the crypto industry had accumulated losses of approximately $2.47 billion by the end of September this year, a nearly 38% increase compared to the same period in 2024.

Among them, the means of attack are undergoing major changes:

• The proportion of protocol vulnerability attacks will drop from 56% in 2024 to 27% this year;

• Social engineering and phishing attacks accounted for more than 40% of the total for the first time;

• The growth rate of AI-driven attacks (such as Deepfake scams) exceeded 180%.

📉 The report points out that this shift means that attackers no longer rely primarily on smart contract vulnerabilities, but instead directly target the social behavior and psychological weaknesses of individual users, team members, and even company executives .

2. Major changes in attack methods: from technical vulnerabilities to "human vulnerabilities"

Two trends are particularly evident in security incidents in 2025:

1. 🧠 AI-driven phishing attacks surge

Attackers use AI to generate voice and deepfake videos to impersonate exchange customer service, fund managers, or founders, tricking users into signing malicious contracts and authorizing wallet access.

• Case: In May, a Singaporean user lost $2.2 million in ETH due to deep fake customer service instructions to sign a malicious smart contract.

2. 📱 Social engineering becomes the main battlefield

Unlike traditional vulnerabilities, social engineering is almost impossible to defend against through code audits.

• Common methods include: fake investment communities, impersonating trading platforms, phishing websites, and airdrop scams.

• Attackers often commit fraud after establishing trust through social platforms such as Telegram and Discord.

📊Changes in attack method proportions (2024 vs 2025):

3. Capital Flows: Stolen Assets Accelerate Decentralized Money Laundering

According to Elliptic ’s on-chain tracking report, the flow of stolen crypto assets is becoming increasingly complex.

🔎 It is worth noting that some hacker teams even use new methods such as NFT "pseudo auctions" to launder assets, further increasing the difficulty of tracking.

4. Typical Cases: Frequent Losses from Millions to Tens of Millions

Industry analysts pointed out: "These attacks are no longer scattered incidents, but organized and systematic attacks, and may be operated by professional teams or even nation-state hackers."

5. Industry Experts: AI and Human Nature Are the Future's "Biggest Security Shortcomings"

A research report by cybersecurity company SlowMist points out that in the next 2-3 years, the focus of encryption crimes will shift from "technical attack and defense" to "psychological and behavioral manipulation."

"We are witnessing a shift from vulnerabilities in code to vulnerabilities in human nature.
Traditional defenses are nearly ineffective against AI-enabled fraud.”
— Simon Yu, Lead Researcher at SlowMist

Experts suggest that exchanges and wallet platforms should strengthen user security education, wallet signature reminder mechanisms , and promote defense measures such as biometrics and AI risk monitoring models .

6. Investor Protection Tips: Five Signs to Identify "New Attacks"

📊 Summary: The crypto industry has entered the era of “social engineering”

The crypto security landscape of 2025 is fundamentally changing.
Attackers no longer focus on technical vulnerabilities, but instead leverage AI and social engineering to directly attack users' psychological defenses. Security protection is no longer a matter of code auditing, but a battle of cognition and behavior.

For investors, the only defense strategy is to raise security awareness: do not trust unverified information, do not sign any contracts easily, and do not grant unlimited permissions to unfamiliar applications.