Bitcoin hacks in 2025

SBI Crypto, SBI Holdings' mining arm, lost $24M across BTC, ETH, LTC, DOGE and BCH. Undetected for 7 days until ZachXBT flagged a pattern matching DPRK Lazarus.

Odin.fun, a Bitcoin memecoin launchpad, lost ~$7M when attackers manipulated bonding-curve liquidity accounting to drain BTC pools. Founder paused trading.

Attackers compromised BigONE's backend and rewrote risk-control logic to auto-approve any withdrawal, draining $27M from the hot wallet without exposing keys.

$90M+ drained from Iran's largest exchange by Predatory Sparrow, then burned to addresses tagged with anti-IRGC messages — a destruction-not-profit hack.

A self-listing verification flaw drained $8.37M (up to $16.2M with ALEX tokens) from ALEX Protocol on Stacks, the team's second major incident in 13 months.

~$73M drained from Phemex hot wallets across 16 blockchains in a coordinated sweep — the first major exchange hack of 2025, with TTPs consistent with Lazarus.