A total of $2,472,777,618 was lost across 344 on-chain security incidents in H1 2025.

Nearly two-thirds (64%) of respondents ranked cloud security among their top five security priorities.

Phishing was the second most costly, with $410,747,038 stolen across 132 on-chain security incidents in H1 2025.

Wallet compromise was the most costly attack vector, with $1,706,937,700 stolen across 34 on-chain security incidents in H1 2025.

17% of respondents identified cloud security as their number one priority.

Ethereum experienced the highest number of security incidents, with a total of 70 hacks, scams, and exploits in Q2 2025 in Q2 2025.

Ethereum experienced the highest number of security incidents, with a total of 175 hacks, scams, and exploits in H1 2025.

55% of respondents report cloud environments are more complex to secure than on-premises infrastructure. This represents a 4-percentage-point increase from last year.

The average number of public cloud providers per organisation has risen to 2.1.

57% of organisations use five or more encryption key managers.

The median loss per on-chain security incident was $103,996 in Q2 2025.

The average loss per on-chain security incident was $4,308,091 in Q2 2025.

Enterprises now use an average of 85 SaaS applications, contributing to security tool sprawl.

Four of the top five most targeted assets in reported attacks are cloud-based.

Over half (52%) of respondents are prioritising AI security investments over other security needs.

68% of respondents reported a rise in access-based attacks.

61% of organisations use five or more tools for data discovery, monitoring, or classification.

85% of organisations say at least 40% of their cloud data is sensitive.

Code vulnerability was the second most costly attack vector, with $235,783,844 stolen across 47 on-chain security incidents in Q2 2025.

Over half of cloud data is now classified as sensitive.