According to CertiK, in 2025, $3.35 billion was stolen in Web3 attacks. Losses increased by 37% despite a lower number of incidents. The largest contributors were supply-chain exploits.