Crypto Hack Loss Drop 60% in December to $76M, PeckShield Reports

Trade Now

This article was first published on The Bit Journal. Crypto-related losses from crypto hacks and cybersecurity exploits declined sharply in December, offering a brief respite after months of heightened attack activity across the digital asset sector, according to blockchain security firm PeckShield.

PeckShield Reports Monthly Crypto Hack Decline

In a report published this week, PeckShield noted that total losses due to crypto hacks decreased by approximately 60% monthly to approximately 76 million, compared to 194.2 million in November. The firm also warned that, although the drop was experienced, it may not be a permanent sign of improvement in the security situation in the industry.

There were 26 notable incidents associated with crypto hacks in December, and a small number of cases accounted for the majority of the losses. The biggest one was with one victim who lost 50 million dollars in an address poisoning attack, which remains among the most efficient user-focused attacks in crypto history.

#PeckShieldAlert December 2025 witnessed ~26 major crypto exploits, resulting in total losses of ~$76M.

This figure represents a decrease of over 60% from November's total of $194.27M, marking a significant reduction in monthly losses.

Notably:
🔺Wallet 0xcB80…819 lost $50M… pic.twitter.com/CNW3R6646j

— PeckShieldAlert (@PeckShieldAlert) January 1, 2026

Address Poisoning Exploits Visual Similarity

The address poisoning scams operate by submitting small amounts of transactions using wallet addresses that are similar to genuine addresses. When carrying out a transfer, victims who are not aware of it may replicate the fraudulent address, which redirects the funds to attackers. Due to the irreversibility of blockchain transactions, these crypto hacks have a high likelihood of permanent losses.

These scams play a lot on image similarity, according to PeckShield. The fake addresses are structured in a way that they resemble the first and the final characters of the real addresses and one easily overlooks the differences between them when user is scanning the transaction history in haste.

Multi-Signature Wallet Breach Raises Concerns

The other significant crypto hacks that occurred in the month was linked to a multi-signature wallet and was a leak of the private key, which cost the users approximately $27.3 million. The event underscored long-standing weaknesses in major management, even in wallets that mandate several approvals in transacting funds.

The general decrease in the amount of money stolen in crypto hacks can be seen as a positive development, but security professionals cautioned against complacency. PeckShield cited several more notable breaches, such as a Christmas Day exploit of Trust Wallet browser extension, which emptied about $7 million, and a 3.9 million hack on the Flow protocol.

Browser Wallets Remain Prime Attack Targets

Researchers noted that browser-based wallets are the commonest victims of crypto hacks because of their permanent connectivity to the internet. Conversely, hardware wallets, keeping personal keys offline, are generally regarded as one of the most secure ways to store crypto assets on a long-term basis.

PeckShield recommended that users minimize their risk of crypto hacks by implementing basic security controls (checking all characters of destination addresses), not using saved transaction histories, and storing their private keys with no access to the Internet as much as possible.

Prosecutors Charge Suspect in Coinbase Scam

In the meantime, the law enforcement agencies are also trying to hunt down offenders involved in crypto hacks and fraudulent schemes. As it was reported before, a 23-year old Brooklyn resident, Ronald Spektor, has been accused by US prosecutors of stealing approximately 16 million dollars worth of cryptocurrency belonging to approximately 100 Coinbase users in phishing and social engineering attacks.

The Brooklyn District Attorney’s Office suggests that Spektor impersonated Coinbase employees and convinced victims to hand over money to wallets in his control by asserting that their assets were being threatened. Officials claimed the attack was based on panic and not technical adventures, highlighting the fact that human intervention continues to be a significant cause of crypto hacks in addition to advanced cyberattacks.

Conclusion

Although it dropped in December, analysts note that human-centered scams and other evolved attack techniques still remain a major threat. Enforcement measures have become increasingly highlighted in recent times, though security firms emphasize that only increased user awareness of the issue, enhanced key management best practices, and general acceptance of more secure options of storage in the crypto ecosystem will see this situation improve.

Follow us on Twitter and LinkedIn, and join our Telegram channel to be instantly informed about breaking news!

Summary

• Crypto hack losses dropped 60% to about $76 million in December.
• Address poisoning and key leaks led losses, including a $50 million scam.
• High-profile attacks continued, hitting Trust Wallet and Flow.
• Experts warn risks persist, urging stronger user security and vigilance.

Glossary of Key Terms

• PeckShield: Blockchain firm tracking crypto security incidents.
• Address Poisoning: Scam using lookalike wallet addresses.
• Private Key: Secret code controlling a crypto wallet.
• Browser Wallets: Online wallets accessed via web browsers.
• Hardware Wallets: Offline devices for secure crypto storage.
• Phishing: Fraud using fake messages to steal assets.

Frequently Asked Questions About Crypto Hacks

How much did losses drop?

Losses fell 60% to about $76 million in December.

What is an address poisoning scam?

Fake wallet addresses trick users into sending funds to hackers.

How can users protect their crypto?

Check addresses carefully, avoid saved histories, and keep keys offline.

Reference

Twitter