Crypto Hack Losses Drop 60% in December to $76M: PeckShield

Source: DefiPlanet Original Title: Crypto Hack Losses Drop 60% in December to $76M: PeckShield Original Link:

Quick Breakdown

• Crypto exploits fell 60% month-over-month to $76 million in December 2025, per PeckShield data.
• A $50 million address poisoning scam dominated losses, with 26 total incidents recorded.
• Private key leaks caused $27.3 million in damage, highlighting persistent wallet vulnerabilities.

Blockchain security firm PeckShield revealed that December 2025 brought a sharp decline in crypto hack losses, dropping 60% from November’s $194.2 million to approximately $76 million across 26 major exploits. This marks one of the lowest monthly totals amid a year where global crypto theft exceeded $3 billion, according to various reports. The downturn offers temporary relief to the industry, though experts warn threats like scams and key compromises persist.

Address Poisoning Scam Claims $50M in a Single Hit

The largest incident involved an address poisoning attack, where hackers tricked a victim into sending $50 million to a fraudulent wallet mimicking a legitimate one. PeckShield noted this scam alone accounted for over 65% of December’s losses, underscoring user vigilance needs in transaction verification. Such attacks exploit human error rather than code flaws, making them hard to mitigate through audits alone.

A separate private key leak from a multi-signature wallet led to $27.3 million being stolen, exposing risks even in advanced security setups. Additional exploits included a $7 million Christmas hack on a wallet browser extension and a $3.9 million breach in the Flow protocol. These events spanned scams, key mismanagement, and protocol vulnerabilities, with no single chain dominating losses.

Broader Context: Security Trends Persist

Despite a 60% drop in crypto hack losses in December to $76 million, the year-to-date total for crypto-related theft remains high, exceeding $3.3 billion. This significant figure is largely attributed to sophisticated scams, key leaks, supply chain attacks, and breaches of centralized platforms.

The threat landscape continues to evolve, with advanced threat actors leveraging AI and sophisticated techniques to execute larger-scale crypto-theft operations. For instance, November saw losses ranging from $172.5 million to $194 million, with sophisticated threats being enhanced by advanced tools.

In light of this, PeckShield emphasizes the urgent need for better key management practices and comprehensive anti-scam education, especially since vulnerabilities in browser wallets remain a common entry point for attackers.