Hack history / Monthly reports / 2025-09
Crypto hacks and thefts, September 2025
Thefts are hacks, exploits, phishing, scams and rug pulls, in dollars at the time. A single source for $500M or more waits for a second source before it counts.
Taken
$129.3M
20 thefts
vs the month before
−19%
−19% ($159.2M)
vs a year earlier
−18%
−18% ($157.1M)
Largest thefts
SwissBorg 09 · API Key Compromised$41.5MSBI Crypto 24 · Hot Wallet Key Compromised$21MVenus Protocol user exploited for $13.5 million; most funds later recovered 02 · Hack or exploit$13.5MUXLINK 22 · Delegatecall Hijack$11.3MBunni V2 02 · Rounding Error$8.4MYala 14 · Deployer Key Compromised$7.6MAqua 08 · Rug Pull$4.7MHyperVault 26 · Admin Drain$3.6MGriffinAI 24 · Cross-Chain Message Spoofing$3MShibarium 13 · Validator Key Compromised$2.4M
How attackers got in
Keys, accounts and infrastructure 6$74.7M
Smart contract bug 6$24.2M
Other 2$14.8M
Insiders: rug pulls, frauds, collapses 3$8.7M
Bridge and cross-chain 1$3M
Phishing and scams 1$2M
Price, oracle and governance 1$1.9M
By chain
Ethereum 7$94.5M
Solana 3$53.8M
Bitcoin 2$28.6M
BNB Chain 6$22.5M
Litecoin 1$21M
Doge 1$21M
Bitcoin Cash 1$21M
Arbitrum 1$11.3M
By target
Centralized exchange 1$41.5M
DeFi protocol 13$37.8M
Other 1$21M
not stated 3$19.5M
Token 2$9.5M
Cite this page
SwanBluechip, "Crypto hacks and thefts, September 2025", Crypto hack history, https://swan-hack-tracker.pages.dev/history/m/2025-09/ (data as of 2026-10-31).