Is Web3 security deteriorating in 2025? The truth behind 630 incidents and a loss of $3.35 billion.

[Coin World] Just saw a data report on Web3 security for 2025, the numbers are a bit scary.

Last year, Web3 experienced a total of 630 security incidents, resulting in losses of approximately $3.35 billion, a year-on-year increase of 37%. At first glance, the total number of incidents is 137 fewer than in 2024, but there is a detail worth noting— the average loss per attack reached $5.322 million, an astonishing year-on-year surge of 66.6%. What does this mean? It means that while the number of attacks has decreased, each one is hitting hard, clearly indicating that they are organized and planned targeting high-value objectives.

What’s even more heartbreaking is that while the market is recovering and regulations are clarifying, this has not diminished security threats at all. The systemic risks faced by the Web3 industry still exist and may even have deepened. This indicates that relying solely on market improvements and favorable policies is far from sufficient; the root cause of security issues must be addressed from the projects themselves.

The suggestions in the report are quite interesting—rather than passively responding, it is better to embed security awareness into the core of the project, considering it throughout the entire process from the design phase, development process to operation and maintenance. Whoever solidifies this aspect first will gain a true moat in the competition.