Loading article…
Explore the history of major cryptocurrency heists, including the largest thefts from Bybit, the Ronin Network, and the recent KelpDAO exploit.
Cryptocurrency platforms have faced significant security challenges, with billions of dollars in digital assets stolen through various exploits and cyberattacks over the last decade [2]. While blockchain technology is often marketed as a secure alternative to traditional finance, high-profile breaches have resulted in massive losses for investors and exchanges alike [2].
Key takeaways
The scale of cryptocurrency theft has grown significantly, with the 2025 Bybit hack standing as the largest known exploit in history [2]. This incident, which involved the theft of $1.5 billion in ether, has been attributed to the Lazarus Group, a North Korean state-sponsored collective [2]. North Korea has been accused of utilizing stolen digital assets to fund its nuclear weapons development, with a United Nations panel estimating that the country has stolen over $3 billion in cryptocurrency since 2017 [1].
Other notable incidents include the 2022 breach of the Ronin Network, which resulted in the loss of $625 million in Ether and USDC [2]. In April 2026, the DeFi platform KelpDAO suffered a significant exploit, losing approximately $290 million after two blockchain servers hosted by LayerZero were compromised [1]. Experts suggest that the sophistication required for such large-scale attacks points toward state-backed actors, as few other groups possess the necessary technical expertise [1].
The rise of decentralized finance has introduced new security risks, as hackers frequently target smart contracts and cross-chain bridges [2]. In 2021, the Poly Network was exploited for over $600 million, though the hacker eventually returned the stolen assets after claiming the attack was performed "for fun" [2]. Similarly, the 2022 Binance BNB Bridge hack saw attackers exploit a bug in a smart contract to withdraw 2 million Binance Coins, totaling $569 million [2].
The frequency and size of these hacks present a major barrier to the mainstream adoption of digital currencies [2]. As platforms like KelpDAO and Bybit face these exploits, industry observers warn that such incidents may deter new participants from entering the DeFi ecosystem [1]. Security experts emphasize that investors should prioritize offline storage, such as cold wallets, and avoid custodial accounts that lack insurance to mitigate the risk of total loss [2]. As cybercrime programs become more sophisticated, the ongoing struggle between blockchain security measures and state-sponsored hacking groups remains a defining challenge for the industry [1].
Coverage is mostly measured — 14 of 18 reports stay neutral.
Every Monday — the token unlocks, Fed dates & catalysts set to move crypto and markets this week. So you’re never blindsided.
Free · 3-min read · one-click unsubscribe
The largest hack occurred in February 2025, when $1.5 billion in ether was stolen from a Bybit cold wallet.
Exchanges are major targets because they often hold large amounts of digital assets in hot wallets or through smart contracts that can be exploited by hackers.
Safety recommendations include keeping cryptocurrencies in offline cold storage when not actively trading and avoiding custodial accounts that lack insurance.
AI-assisted synthesis by the TrendWatcher Editorial Desk · sourced from 3 outlets · Jun 12, 2026 · How we report
Yes, in the 2021 Poly Network hack, the attacker returned all stolen assets after developers appealed for the funds and requested exchanges to blacklist the hacker's addresses.