Crypto Hacks in July 2025 Hit $142M Across 17 Attacks as Insider Threats and Phishing Surge

In July, from the Crypto landscape, hackers stole at least $142 million across seventeen separate attacks. 

The major attacks involved $27 million from the BigOne hot wallet,  $14 million phishing strike on WOO X, and  $42 million from GMX v1.  Further, the scammer utilized a phishing attack on a team member to access the development space of the platform and build malicious withdrawal requests.

CoinDCX Faces July’s Largest Hack: $44.2 Million Lost via Insider Threat

CoinDCX, an Indian exchange, experienced this Month’s highest hack at $44.2 M via insider involvement. The attack on this exchange resulted in the compromised login information belonging to Rahul Agarwal, a software engineer imprisoned on suspicion of participation in the $44 million robbery.

According to the Police investigation,  the theft occurred when  Rahul Agarwal utilised his firm laptop for freelance work. He received a call through WhatsApp from Germany regarding the file completion, which included malicious code.

Police research revealed that the violation happened at 2:37 AM, when a stranger accessed the company laptop and transferred a single penny (1 USDT)to test the connection.

The police statements from Neblion Technologies, Hardeep Singh (Vice President), added that, in the morning (9:40 am), bad actors hacked $44 million and provided money to around 6 crypto wallets.

The cybercriminals utilised social engineering to obtain access to the development landscape during the hacking of WOO X, according to the chairman of Halborn, Rob Behnke. Further, the multiple malicious transactions were conducted over 2 hours before the suspicious activity was recognised, and the platform suspended withdrawals.

GMX Hacker Steals $42 Million, Then Returns the Funds

On July 11, the scammer who hacked the decentralized exchange GMX  for $40 M, the 2nd highest hack of this month, gave back the robbed money days later, according to blockchain security and data analytics firm, PeckShield. 

The hacking style of the cybercriminals included sudden distribution and systematic fund extraction to various addresses to make the recovery process more difficult.

A few days later, on July 16, BigONE, a crypto exchange, experienced a 3rd party attack that concentrated on its infrastructure of hot wallets, resulting in a loss of twenty-seven million. The production network of BigOne was compromised when scammers advanced server logic for risk controls and account functions.

Moreover, the hacking of this month continues the destructive security trend of 2025, with crypto traders or investors losing about 2.2 billion in the first half via 344 situations. 

Also Read: Best Crypto Exchanges With Lowest Fees To Buy Bitcoin In 2025

New Hacking Patterns: Off-Chain Systems in Focus

The Chairman of the blockchain security company Halborn,  Rob Behnke, said that the latest trend of cyber criminals in their hacking system is to focus more on off-chain systems for high-value hacks. This system can be recognized and notified through smart contract security audits, which are easier for scammers to attack than identifying important vulnerabilities in smart contracts.

Today, cyber criminals are becoming more civilized and begin to focus more on back-end systems and infrastructure. Hence, the platforms need to have efficient security measures as well as procedures in place to prevent these hazards.