GoPlus 年度安全报告:1200 起严重安全事件造成超 35 亿美元总损失,攻击者策略呈现“精准猎杀”、“广撒网”并行的趋势

ChainCatcher 消息,据 GoPlus RektDatabase 数据显示,2025 年 Web3 领域用户和项目方发生超 1200 起较严重的安全事件,造成总损失超过 35 亿美元。
私钥窃取(基于病毒木马和社工)、钓鱼攻击、Rug Token(欺诈 Token)是最高发的三种攻击与欺诈类型。其中,Bybit 被盗事件(2 月 21 日,15 亿美元)、Cetus 被盗事件(5 月 22 日,2.23 亿美元)、Balancer 被盗事件(11 月 2 日,1.28 亿美元)为 2025 年受损金额 Top3 事件。
安全态势上呈现出“超大额事件数量增加”、“用户小额欺诈成本显著降低”的明显特征,这标志着攻击者策略呈现“精准猎杀”、“广撒网”并行的趋势。值得注意的是,2025 年单体损失金额超 3000 万美元的攻击事件共 12 起,其中 CeFi 占了 7 起,管理员私钥被盗、热钱包私钥被盗是最主要的原因,暴露了显著的风险。
Disclaimer: OKX Orbit content is provided for informational purposes only. Learn more
Replies
Related Flash News
How does OKX navigate Meme? X Layer Leader: We welcome PEPE-style "Tuyile", but reject bottomless hype
suiUSDe is now listed on Sui, becoming the first synthetic USD to support DeepBook Margin
Wu said daily featured crypto news + macro indicators of the week
GoPlus:
GoPlus: In 2025, there will be more than 1,200 serious security incidents in the Web3 field, with cumulative losses exceeding $3.5 billion
Bybit's Lazarus Security Lab reports that 16 mainstream blockchains have fund freeze mechanisms
Sui's first native AI agent launch platform, Surge, is now officially live
SuiFest led the overall rise in the ecosystem, with AIA leading the way with an intraday increase of more than 30%
Cetus DLMM is officially launched
Surge, the first native AI Agent launchpad on Sui, has announced its official launch




