According to online reports, Web3 security company CertiK released a report saying that in the first half of 2025, Web3 security losses were nearly US$2.5 billion, with a net loss of US$2.29 billion, exceeding the entire year of 2024. Among them, two major incidents, Bybit and Cetus Protocol, caused losses of US$1.78 billion, accounting for 72% of the total losses. If these two incidents are excluded, the industry loss is US$690 million, and the industry risk distribution is still complex. In the second quarter, phishing attacks lost approximately $400 million, becoming the main threat. CertiK recommends that the industry strengthen front-end protection and real-time monitoring to respond to threat upgrades.