[Chain News] I just saw a report on the statistics of Web3 security from last year, and it's quite shocking. A total of 248 phishing incidents were recorded throughout 2025, with the total amount of money lost exceeding $700 million—this is just the cases that were reported.
The most frightening thing is not the phishing itself, but that the attacks have become smarter now. Hackers have started using AI tools that can quickly generate phishing pages identical to real websites and can also spoof wallet pop-ups. Not only that, they use AI to generate scam messages in multiple languages and then combine on-chain transaction data with social media information to precisely target users for their attacks - it's like transforming traditional net fishing into sniping.
What does this mean? Traditional defense methods are starting to fail. Those red flags identified by experience are becoming less effective. For us ordinary users, we need to be more vigilant. Project teams also need to keep up with the pace, not just conduct security audits, but also enhance user education and risk warnings at the operational level.
Calculating it out, if this trend of escalating attacks continues, the data for 2026 might be even more frightening. The same old saying applies—your own awareness of security is the last bastion in Web3.
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
18 Likes
Reward
18
4
Repost
Share
Comment
0/400
CoinBasedThinking
· 2025-12-26 01:08
AI phishing is really getting more and more aggressive. 700 million dollars just disappeared like that. It's heartbreaking.
View OriginalReply0
NftRegretMachine
· 2025-12-24 10:00
700 million USD lost, AI phishing is truly incredible, our circle is really outrageous
View OriginalReply0
metaverse_hermit
· 2025-12-23 14:56
I can't believe 700 million dollars just disappeared like that, it's really ridiculous... AI has now become an outsourcing tool for hackers.
View OriginalReply0
SatoshiHeir
· 2025-12-23 14:35
It should be noted that the fundamental technical issues reflected behind these 248 incidents have been severely underestimated. AI-generated phishing pages? Obviously, this is exactly the design flaw that we should have foreseen in 2017—over-reliance on user self-verification.
Laughable, yet another "raise security awareness" cliché. How do you expect me to distinguish? On-chain data shows that 85% of victims cannot tell the difference, this is not an awareness issue, it's a failure of system design.
Wait, does anyone really think traditional defense measures will be effective? I have verified all historical documents, and since 2009 it should have been clear—Decentralization comes at the cost of self-custody.
$700 million... my lips twitch. Based on the following arguments, this figure is just the tip of the iceberg; dark web data suggests that the actual losses could be doubled.
But you see, this is the true test of value consensus. Technology will not save human greed, it never will.
In 2025, there were over 248 Web3 phishing incidents, with AI becoming a new assistant for attacks.
[Chain News] I just saw a report on the statistics of Web3 security from last year, and it's quite shocking. A total of 248 phishing incidents were recorded throughout 2025, with the total amount of money lost exceeding $700 million—this is just the cases that were reported.
The most frightening thing is not the phishing itself, but that the attacks have become smarter now. Hackers have started using AI tools that can quickly generate phishing pages identical to real websites and can also spoof wallet pop-ups. Not only that, they use AI to generate scam messages in multiple languages and then combine on-chain transaction data with social media information to precisely target users for their attacks - it's like transforming traditional net fishing into sniping.
What does this mean? Traditional defense methods are starting to fail. Those red flags identified by experience are becoming less effective. For us ordinary users, we need to be more vigilant. Project teams also need to keep up with the pace, not just conduct security audits, but also enhance user education and risk warnings at the operational level.
Calculating it out, if this trend of escalating attacks continues, the data for 2026 might be even more frightening. The same old saying applies—your own awareness of security is the last bastion in Web3.