CertiK: Web3 security losses reached $118 million in December 2025, with phishing attacks accounting for nearly 80%.

On-chain security incidents resulted in approximately $118 million in losses, with phishing attacks dominating, causing $93.46 million in losses, accounting for nearly 79% of the total. Among these, "address poisoning" attacks accounted for $51.85 million. This was followed by wallet theft ($29.44 million) and insider malicious activity ($11.38 million).