Crypto Hackers Hit $14.6M in 2025! But Why? 😱

by

Oh no! Cryptocurrency villains are targeting real-world asset tokenization protocols, threatening the growing demand for this blockchain trend. Who knew digital gold could be so… risky? 🤡💰

Real-world asset tokenization is like turning your grandma’s piano into a blockchain NFT. Now everyone can trade it, but who’s watching the store? 🎹🔒

Hackers have started targeting RWA protocols, as losses from RWA-specific exploits reached $14.6 million during the first half of 2025, according to a report by blockchain security firm CertiK and shared with CryptoMoon. 🚨💸

The $14.6 million is more than double the $6 million lost to RWA protocol exploits during 2024, and may rise above the $17.9 million lost in 2023. Wait, so the numbers are going up? That’s not a trend, that’s a party! 🎉💣

These RWA exploits were defined “entirely by onchain and operational failures,” signaling a “clear transformation in the RWA threat landscape between 2023 and 2025,” according to CertiK. So, it’s not just the code-it’s the “I’ll handle it” attitude. 😂👩‍💻

The growing malicious activity around the sector comes as the RWA market surged over 260% during the first half of 2025, surpassing $23 billion in total valuation by June 5, CryptoMoon reported. 📈📉

Tokenized private credit led the RWA market boom, accounting for about 58% of the market share, followed by tokenized US Treasury debt, which accounted for 34%, driven by “increased participation from major industry players,” as “regulatory frameworks become clearer,” according to a Binance Research report shared with CryptoMoon. 🧠💼

RWA tokenization introduces “hybrid” security risks due to offchain assets

RWA protocols present more complex, “hybrid” security challenges, as an RWA token’s value is a claim on an offchain asset, expanding the attack surface beyond just smart contracts. It’s like a vault with a clown walking in. 🎪🔒

Each component of this five-layer security stack can present a single point of vulnerability, according to CertiK’s report, which states: “Key risks emerge from this interaction because offchain processes involve human actors, are subject to legal interpretation, and follow operational workflows.” So, it’s not just code-it’s a legal comedy. 🤡⚖️

 “Key risks emerge from this interaction because offchain processes involve human actors, are subject to legal interpretation, and follow operational workflows.”

Risks include oracle manipulation, custodial and counterparty failures, the “unenforceability of legal frameworks, and fraudulent proof of reserves attestations,” added the report. It’s a legal thriller with a side of chaos. 🧨🎭

RWA restaking protocol Zoth suffered the largest exploit among RWA protocols in 2025, losing $8.5 million to a “classic operational security failure,” a compromised private key on March 21, the same month a different attacker exploited a smart contract logic flaw to mint $385,000 worth of assets without sufficient collateral. Classic! 🔐💸

Loopscale suffered the second-largest hack worth $5.8 million on April 26, caused by blockchain oracle price manipulation. Yet, in a positive turn of events, the protocol recovered $2.8 million worth of the stolen funds by April 29, CryptoMoon reported. A silver lining? Maybe. 🌈💸

Read More

2025-08-21 16:51