[Report: Social Engineering Scams to Account for 40.8% of Crypto Security Incidents by 2025, Becoming the Main Threat]
The 2025 annual security report released by crypto exchange platform WhiteBIT reveals that social engineering scams (such as fake investments, identity impersonation, etc.) have become the primary security threat in the crypto industry, accounting for 40.8% of all security incidents throughout the year. Technical wallet attacks (including phishing, malware, and keyloggers) rank second, with a share of 33.7%. Additionally, over 10% of scams are carried out via instant messaging platforms like Telegram, with common forms including "spamming scams" and fake channels.
WhiteBIT's compliance team pointed out that most threats stem from "human behavioral vulnerabilities" rather than technical flaws, and recommended users take measures such as enabling two-factor authentication, verifying URLs, refraining from sharing sensitive information, and prioritizing secure exchanges and cold wallets for asset storage. The report also mentioned that in the first half of this year, crypto-related crimes resulted in losses of nearly $2.5 billion, with the Bybit hacking incident causing approximately $1.5 billion in damages, believed to have been orchestrated by North Korea's Lazarus Group.