Edited By
Tomรกs Reyes

Cryptocurrency exchanges suffered a staggering $2.4 billion loss due to hacks from January 2025 to February 2026, with an alarming 71% of these losses traced back to a single incident. This raises serious concerns about security protocols in the crypto industry.
From the total losses, centralized exchanges (CEX) took a hit of over $2 billion. The most notable breach was the Bybit hack in February 2025, accounting for a staggering $1.7 billion. Itโs not just one-off cases either; several other significant breaches followed:
Binance: $300 million (linked to the October 10 crash)
Bitget: $100 million
Nobitex: $90 million
Phemex: $80 million
Interestingly, three out of the top five hacks were a result of compromised private keys, with perpetrators using social engineering and UI-phishing tactics. On the decentralized exchange (DEX) side, the largest exploit was considerably smaller, with Cetus losing $223 million, followed by:
Balancer: $128 million
GMX: $42 million
Hyperliquid: $17 million
The commentary from people on forums indicates a strong frustration with how centralized custody risks exacerbate vulnerabilities. One commenter stated, ">> That stat says more about centralized custody risk than crypto itself."
Some users stressed the importance of self-custody, arguing, ">> If youโre holding long term, use self-custody. Exchanges should mainly be for trading."
The mood reflects a mix of concern and acknowledgment that a single hack can severely affect overall trust in the system. "Crazy that $1.7 billion was lost in just over a year, and most of it from one hack."
71% of CEX losses linked to the Bybit breach.
Compromised private keys top the list as a failure point.
DEX exploits much smaller, illustrating different vulnerabilities.
With these alarming figures, the question arises: How secure is your capital on exchanges? As debates heat up around self-custody versus exchange-held assets, many are left weighing risks versus convenience.
As the crypto landscape continues to evolve, thereโs a high likelihood that exchanges will implement stricter security measures in response to these staggering losses. Experts estimate that around 80% of exchanges will enhance their protocols over the next year, focusing on safeguarding private keys and utilizing advanced authentication methods. Additionally, the push for self-custody solutions is likely to gain traction among people as they weigh the risks tied to exchange custody. With users becoming increasingly educated about the vulnerabilities of centralized systems, we might expect a shift away from traditional exchanges, favoring decentralized options. This trend could reshape the market significantly, as the demand for more secure and transparent platforms grows.
Interestingly, this situation bears a resemblance to the early days of ransomware in the mid-2010s when businesses were forced to confront the harsh realities of cybersecurity threats. Many organizations underestimated the risks associated with online operations until high-profile breaches resulted in massive financial losses. Just as companies then began to prioritize cybersecurity frameworks and employee training, the current crypto landscape might witness an uptick in awareness and proactive measures from people and exchanges alike. The evolution of corporate cybersecurity could mirror the changes happening now in the crypto world, highlighting how critical it is to adapt in the face of cyber threats.