September’s Crypto Heists: $127M Lost, Yet the Bots Smile 😅

September 2025, that unscrupulous month, delivered a polished little pantomime to the crypto world: roughly twenty major exploits, totalling about $127 million. The figure is not nothing, though it does wear the air of a well-cut suit on a man who has forgotten his wallet. Even so, the dismal arithmetic shows a 22% decline from August’s $163 million, which is the sort of improvement that would thrill a vice-chancellor with a spreadsheet and a fondness for mischief.

The Notable Misadventures

Leading the procession was UXLINK, with a $44 million misappropriation. On September 22, bad actors manipulated its multisignature wallet, stripping admin controls and draining $11.3 million. Then they minted billions of UXLINK tokens on Arbitrum, nearly doubling supply and sending the price down by more than 70%. Exchanges like Upbit did their best to freeze assets, but most of the stolen funds remain in the thieves’ wallets-a charming persistence in maleficence. 😂

SwissBorg, the Swiss fortress of affluence, lost about $41.5 million. The breach stemmed from Kiln, a trusted third party handling Solana staking, which proved vulnerable in the supply chain. The hacker seized almost 193,000 SOL by embedding malicious instructions within an ordinary unstaking request, as if a clerk’s pen had suddenly turned sinister. 🕵️‍♂️

A phishing scam also trod the boards, unsettling Venus on September 2. A victim surrendered about $13 million after being lured into a fake Zoom meeting, allowing attackers to seize control of a device and alter wallet code. Venus sprang to life, halted operations, and then forcibly closed the intruders’ positions to recover the stolen money. A salutary reminder that Zoom is not a fairy-tortured fountain of safety. 🪳

Other entries in PeckShield’s ledger included the Yala stablecoin breach that cost $7.6 million and GriffAI’s more discreet $3 million misfortune-two performances of a smaller scale, but no less disarming. 😬

A Year of Heavy Losses Despite a Momentary Dip

Even with September’s dip, 2025 has already established itself as one of the most ruinous years for crypto security. Hacken reported that over $3.1 billion was stolen in the first half of the year-outstripping the full-year total of $2.85 billion for 2024. A great deal of this stemmed from spectacular access-control failures, such as the $1.5 billion Bybit incident in the first quarter, which reads like a cautionary tale told in boldface. 🤯

The pattern is stubborn: attackers rely on backdoors or privileged access points that security teams have somehow managed to overlook, while users continue to bite on social-engineering bait. Unless platforms invest more in fortified access control, independent audits, and real education for users, September’s dip may prove only a temporary pause in what threatens to become a record-breaking year for crypto crime. 🚨

2025-10-04 13:32

The Notable Misadventures

A Year of Heavy Losses Despite a Momentary Dip

Read More