The crypto business misplaced over $244 million to hacks and scams in Could 2025, based on blockchain safety agency PeckShield.
Whereas the determine stays substantial, it marks a 39% decline in comparison with April’s $402 million loss, signaling a short lived slowdown in malicious exercise.
Crypto Hackers are Now Attempting to Body Victims
PeckShield’s knowledge exhibits the assaults spanned numerous protocols, with some incidents leading to minor breaches and others involving catastrophic losses.
The biggest exploit concerned Cetus Protocol, a decentralized trade working on the Sui blockchain, which misplaced roughly $223 million in a single assault.
Following the breach, Cetus engaged with Sui validators to freeze some stolen belongings, which amounted to roughly $162 million or about 71% of the stolen funds.
Cetus lately noticed its proposal to reclaim the frozen funds permitted by Sui validators. This marks the start of a broader restoration course of that features upgrading sensible contracts, restoring liquidity, and making ready the platform for relaunch.
In the meantime, one other platform that noticed a big assault was the Ethereum-based Cork Protocol.
Attackers exploited the platform’s Wrapped Staked Ethereum (wstETH) and Wrapped Ethereum (weETH) markets, stealing round 3,761.8 wstETH, valued at practically $12 million. Though different markets weren’t affected, Cork paused all operations to permit for a full audit.
The PeckShield’s report raised new issues in regards to the return of North Korea-linked hackers. In line with the agency, these malicious actors allegedly stole $5.2 million from a single crypto dealer.
The incident has reignited fears of state-sponsored assaults, following a lull after February’s $1.5 billion Bybit exploit.
Different incidents included a $2.2 million exploit on Mobius Token contracts on the BNB Chain. On this case, the attacker used a single sensible contract to empty 28.5 million MBU tokens.
Amid the rising threats, Twister Money, an Ethereum-based crypto mixing device, stays the popular device for laundering stolen funds.

Contemplating this, Yu Xian, co-founder of blockchain safety agency SlowMist, urged victims to share their pockets addresses after an exploit. He prompt making them public or partially censored to assist investigations and keep away from being mistakenly recognized as suspects.
In line with him, hackers more and more use totally different ways to shift suspicion onto harmless customers to complicate regulation enforcement businesses’ investigations.
“Some hackers nowadays like to frame others. You will not only suffer the pain of having your funds stolen, but also the subsequent cooperation with law enforcement investigations… It is not pleasant to be treated as a suspect,” he added.
The publish Cetus Breach and North Korea Theft Led to $244 Million Crypto Losses in Could appeared first on BeInCrypto.