The average loss from a single attack in the crypto industry is approximately $24.5 million, with a few large-scale incidents accounting for the majority of the losses.

According to Immunefi's 2026 On-Chain Security Report, 191 publicly disclosed attacks occurred between 2024 and 2025, resulting in a total loss of $4.67 billion, and a cumulative loss of $11.9 billion over five years, involving 425 attacks. 94 attacks were recorded in 2024 and 97 in 2025, showing a relatively stable frequency. The median loss per attack decreased from $4.5 million to approximately $2.2 million, but the average loss remained as high as approximately $24.5 million. The five largest incidents between 2024 and 2025 accounted for 62% of the total stolen funds, and the top ten accounted for 73%. The $1.5 billion attack on Bybit accounted for 44% of all losses in 2025 and 32% of the total losses over the two years. Centralized exchanges, though involved in only 20 of the 191 incidents, bore more than half of the total losses, amounting to $2.55 billion. The tokens of attacked projects fell by an average of about 10% within two days of the incidents, with a median drop of 61% six months later. Approximately 84% of the affected tokens remained below their pre-attack levels six months later.