
Crypto Security Report: December 2025
$3.4 billion stolen in 2025, AI agents exploiting real smart contracts in simulation, DPRK Zoom scams hitting $300 million in losses, and more.

$3.4 billion stolen in 2025, AI agents exploiting real smart contracts in simulation, DPRK Zoom scams hitting $300 million in losses, and more.

DPRK operatives recruiting collaborators on Upwork and Fiverr, a $128 million Balancer exploit from a rounding error, fake wallet extensions on the Chrome Web Store, and more.

Déjà vu over and over and over again…

Featuring MetaMask joining SEAL's phishing defense network, record pig butchering busts totaling $22 billion, AI outrunning bug bounty programs, and more.

Featuring the npm supply chain attack on 18 packages with 2 billion weekly downloads, deepfake voice phishing targeting crypto executives, ModStealer wallet-draining malware, the Ethereum Foundation's Trillion Dollar Security initiative, and more.

Featuring an Ethereum developer drained by a malicious AI coding extension, AI-generated npm malware with 1,500+ downloads, the LastPass-linked Toptal breach, a cracked DPRK device exposing North Korea's hiring scams, and MetaMask's new Kipuka toolkit.

Featuring over 40 fake Firefox extensions, impersonating MetaMask and other wallets, GMX's $42 million re-entrancy hack resolved by a white hat bounty, zombie appsdapps reviving defunct crypto domains, and the DPRK's NimDoor macOS backdoor.

Featuring North Korean operatives laundering billions through Tron, Interpol's global infostealer takedown netting 32 arrests, the largest-ever pig butchering fund recovery, Taylor Monahan on the CrimeEnjoyor drainer script, and more.

MetaMask's Solana security rollout, the Coinbase extortion attempt by rogue support agents, the FreeDrain AI phishing campaign, FBI and Europol's LummaC2 takedown, violent attacks on crypto holders in Paris and New York, and more.

Featuring security researcher Nick Franklin exposed as a DPRK operative behind the Radiant Capital hack, Lazarus Group laundering Bybit funds through THORChain, FBI IC3's record crypto fraud report, and more.