The average loss per attack in the crypto industry is approximately $24.5 million, with a few major incidents accounting for the majority of the losses.
Odaily News According to Immunefi's 2026 On-Chain Security Report, a total of 191 publicly disclosed attack incidents occurred between 2024 and 2025, resulting in total losses of $4.67 billion. The cumulative losses over the five-year period reached $11.9 billion, involving 425 attacks. In 2024, 94 attacks were recorded, and 97 in 2025, indicating a trend towards stabilization in overall frequency.
The median loss per attack decreased from the previous $4.5 million to approximately $2.2 million, but the average loss remained as high as around $24.5 million. The five largest incidents between 2024 and 2025 accounted for 62% of the total stolen funds, with the top ten accounting for 73%. Among these, a single $1.5 billion attack on Bybit constituted 44% of all losses in 2025 and 32% of the total losses over the two-year period.
Although centralized exchanges were involved in only 20 out of the 191 incidents, they bore over half of the total losses, amounting to $2.55 billion. The tokens of attacked projects fell by an average of about 10% within two days of the incident. Six months later, the median decline reached 61%, with approximately 84% of the affected tokens still trading below their pre-attack levels.
