CERTIK: WEB3 SECURITY LOSSES REACHED $118M IN DECEMBER 2025, WITH PHISHING ACCOUNTING FOR NEARLY 80%

According to CertiK December 2025 on-chain security report, Web3 security incidents resulted in approximately $118 million in losses. Phishing attacks were the primary cause, accounting for $93.46 million, or nearly 79% of total losses. Among them, address poisoning attacks alone caused losses of $51.85 million.

Other major loss categories included wallet compromises ($29.44 million) and insider-related incidents ($11.38 million). The largest single incident of the month was a Trust Wallet vulnerability, which led to losses of $8.5 million.

Only around $159,000 was recovered, reflecting an extremely low recovery rate and underscoring the critical importance of on-chain user security awareness and protection.