December 2025 saw a sharp decline in crypto-related losses despite a steady flow of security incidents, according to new data released by PeckShield. The blockchain security firm reported that the month recorded around 26 major crypto exploits, resulting in total losses of approximately $75.95 million.
The figure represents a drop of more than 60% compared with November’s losses of roughly $194.27 million, signaling a meaningful month-over-month reduction in the financial impact of attacks. While the number of incidents remained significant, the lower aggregate losses suggest fewer large-scale breaches relative to previous months.
Two incidents accounted for the majority of December’s damage. The largest loss involved a wallet address beginning with 0xcB80…819, which lost $50 million through an address poisoning attack.
Address poisoning typically involves attackers sending small transactions from lookalike addresses to trick victims into transferring funds to the wrong destination. The second-largest incident saw a multisig wallet identified as 0xde5f…e965 drained of $27.3 million after a private key leak compromised its security.
PeckShield’s leaderboard of the top five exploits in December highlights the concentration of losses among a handful of events.Â
Alongside the multisig breach, decentralized domain project babur(dot)sol suffered losses of around $22 million. Meanwhile, Trust Wallet recorded losses of approximately $8.5 million, while both Unleash Protocol and Flow each reported losses near $3.9 million.
The report also traced how stolen assets were moved on-chain following the attacks. In several cases, funds were routed through mixers and cross-chain bridges, underscoring ongoing challenges for investigators attempting to track and recover illicit proceeds.
Despite the decline in total losses, PeckShield cautioned that security risks remain elevated. Wallet-level attacks, private key leaks, and social engineering continue to dominate exploit vectors, highlighting the importance of stronger key management, multisig safeguards, and user education.
Overall, December’s data suggests some improvement in limiting the scale of crypto exploits, but the persistence of attacks indicates that security remains one of the industry’s most pressing concerns heading into 2026.