Crypto platforms lost $3.63B in cyberattacks despite security audits, CoinGecko report says

According to the report, cited by CNBC, roughly 88% of the stolen funds and about 60% of the affected platforms had "completed independent security audits." Most of the attacks targeted areas that security checks do not typically cover, the report said.

Bybit was the most affected platform, losing $1.4 billion in a February 2025 heist that blockchain analytics firm Elliptic attributed to North Korea, the report said. KelpDao lost $292 million and Drift Protocol lost $285 million, making them the second- and third-most affected platforms, respectively.

Bybit, KelpDao and Drift Protocol did not immediately respond to CNBC's request for comment.