H1 2025 Crypto Hacks Steal $3.01B, 54.26% from CEXs as Funds Laundered in Under 3 Minutes

A new report from Swiss blockchain analytics firm Global Ledger has uncovered alarming trends in cryptocurrency theft and laundering, revealing that $3.01 billion was stolen through 119 crypto hacks in the first half of 2025 alone—surpassing the total losses of 2024 [1]. The report highlights not only the scale of these breaches but also the unprecedented speed at which stolen funds are laundered, often before victims or the public are even aware. By analyzing onchain data, researchers found that 23% of laundering processes were completed entirely before a breach was publicly disclosed, with many others already in motion by the time a hack was reported [1]. In the fastest incident, funds were moved just four seconds after an exploit, with full laundering finalized in under three minutes [1].

The report underscores systemic vulnerabilities in centralized exchanges (CEXs), which accounted for 54.26% of total losses in 2025—far exceeding losses from token contract exploits (17.2%) or personal wallet breaches (11.67%) [1]. Compliance teams at CEXs often have only 10–15 minutes to block suspicious transactions before funds are irretrievable, as attackers leverage mixers, bridges, and real-time transaction tools to evade detection. The average time between a hack and public disclosure was 37 hours, while attackers typically moved funds within 15 hours, securing a 20-hour head start [1]. As a result, only 4.2% of stolen funds were recovered in the first half of 2025, a figure that raises concerns about the efficacy of current anti-money laundering (AML) systems.

The report also points to structural challenges in combating crypto crime. Traditional ticket-based compliance processes, which rely on manual reviews, are increasingly inadequate against automated laundering techniques. Global Ledger recommends that exchanges adopt real-time, automated monitoring systems capable of detecting and halting illicit activity within seconds of its initiation. This shift is further pressured by new legislation such as the Genius Act, signed by U.S. President Donald Trump on July 18, which mandates stricter AML protocols and faster response times for virtual asset service providers (VASPs) [1].

The legal landscape is evolving in tandem with technological threats. The ongoing trial of Roman Storm, the developer of Tornado Cash, exemplifies growing regulatory expectations for proactive crime prevention. U.S. prosecutors argue that Storm’s platform facilitated over $1 billion in illicit transactions, including funds linked to North Korea’s Lazarus Group, and that he had the technical ability to implement controls to prevent such use [1]. The case has sparked debate over the responsibilities of open-source developers and privacy tools, with critics warning that prosecuting code writers could stifle innovation.

Analysts note that the convergence of AI-driven attacks and onchain vulnerabilities is exacerbating the crisis. A parallel report from Hacken documented a 1,025% surge in AI-related exploits in H1 2025, driven by insecure APIs and weak input validation [2]. Ethereum remains the most targeted network, accounting for 61.4% of losses, while BNB Chain and Arbitrum represent 20.2% and 11.4%, respectively [2]. The rise of cross-layer attacks and collaborations among threat actors further complicates defensive strategies, particularly for smaller protocols with limited resources [2].

Regulatory frameworks like the EU’s Markets in Crypto-Assets (MiCA) and AI Act may soon impose real-time monitoring requirements on platforms, compelling them to integrate cybersecurity into their design. However, the industry’s ability to respond will depend on rapid adoption of automated systems and standardized security benchmarks. As breaches continue to expose the fragility of blockchain infrastructure, stakeholders must prioritize proactive measures to preserve trust in digital assets [2].

Source:

[1] [Real-time crypto laundering exposes CEX vulnerabilities — Report](https://cointelegraph.com/news/real-time-crypto-laundering-cex-vulnerabilities-report)

[2] [Hacken Report Flags $3.1B Web3 Meltdown, 1,025% Spike in AI Attacks](https://t.co/6x8JDjkmJT)

[3] [Inside the $44M CoinDCX Hack: How Hackers Drained ...](https://www.ccn.com/education/crypto/coindcx-hack-44m-india-crypto-security-crisis-explained/)