Cumulative losses exceed $3.63 billion, with nearly 60% of attacks on crypto platforms involving completed security audits

Odaily News: Between January 2025 and July 2026, a total of 245 security incidents were recorded. The top ten attack events accounted for over 72.5% of stolen funds. Supply chain and infrastructure vulnerabilities remain the primary security risks facing both CEXs and DEXs, with related losses exceeding $1.8 billion. Private key leakage is the most common risk for CEXs, while DApps lost approximately $546 million due to smart contract vulnerabilities. Among the 147 incidents involving platforms that had completed independent security audits, stolen funds accounted for 88.44% of total losses. Most attacks fell outside the scope of traditional audit coverage, with common causes including external infrastructure, unaudited code updates, and governance attacks. Only about 11% of incidents involved smart contract defects within audit scope.