Alisa Davidson
Revealed: December 09, 2025 at 6:19 am Up to date: December 09, 2025 at 6:19 am
Edited and fact-checked:
December 09, 2025 at 6:19 am
In Transient
Kerberos’ newest report reveals that phishing and social engineering drove $594M in Web3 losses in H1 2025, with Solana customers hit hardest amid quick ecosystem progress.
Web3 safety agency Kerberus printed a brand new report exhibiting that phishing and social engineering assaults had been liable for $594 million, or 36%, of all Web3 losses within the first half of 2025, with roughly $90 million, or 15%, occurring on the Solana community. These figures are based mostly on a complete of $1.64 billion in Web3 hacks and scams throughout H1 2025, excluding the Bybit incident, with Solana accounting for $250 million of that complete.
The Solana ecosystem has skilled vital progress and excessive transaction exercise in recent times, which has elevated its visibility to attackers. This heightened consideration isn’t as a result of inherent safety weaknesses however fairly the bigger person base and transaction quantity, which create extra alternatives for assaults concentrating on people. In early 2024, two drainer instruments had been linked to $4.17 million in losses. Even extremely refined risk actors have more and more centered on user-targeted strategies; for instance, in Might 2025, the state-sponsored Lazarus Group carried out a $3.2 million Solana pockets heist by tricking customers into approving malicious transactions.
Between October 2024 and March 2025, over 8,000 phishing transactions had been detected on Solana, leading to roughly $1.1 million in confirmed losses throughout 64 phishing accounts. Researchers recognized three assault strategies particular to Solana’s structure, together with account authority transfers and system account impersonation. Assault methods have turn out to be extra complicated, with faux presale web sites and Telegram impersonation campaigns geared toward stealing credentials. By July 2025, CoinNess reported a surge of such impersonation scams in South Korea, with attackers posing because the Solana Basis.
These findings point out a transparent pattern: in broadly used, high-activity ecosystems reminiscent of Solana, attackers have a tendency to focus on customers via deception and social engineering fairly than exploiting technical vulnerabilities. To handle this, Kerberus launched a micro-brief at Solana Breakpoint, outlining the frequent ways behind these thefts and offering steering on how customers can shield themselves.
“What we see on Solana matches what we see on each chain that has grown shortly,” stated Alex Katz, cofounder of Kerberus, in a written assertion. “Attackers go after moments of confusion. The sooner an ecosystem expands, the extra of these moments there are,” he added.
Kerberus Exposes Web3 Safety Hole: Sentinel3 Delivers Actual-Time Safety With 99.9% Accuracy
The agency’s latest report highlights a niche within the business’s strategy to safety. Solely 13% of Web3 safety instruments present real-time safety, with the bulk concentrating on audits, schooling, and post-incident evaluation fairly than intervening when a person is about to approve a dangerous transaction. Broader cybersecurity research recommend that human error accounts for round 60% of breaches.
“Individuals get scammed as a result of they’re rushed, distracted, or enthusiastic about one thing taking place on-chain,” stated Danor Cohen, cofounder of Kerberus. “Safety has to work routinely in these moments.”
The Kerberus Sentinel3 browser extension analyzes Web3 transactions earlier than they’re accepted, routinely stopping malicious exercise with a reported 99.9% detection charge. It has maintained a document of zero person losses for almost three years and presents as much as $30,000 in protection per transaction via a third-party supplier.
In February 2025, Kerberus prolonged Sentinel3’s real-time safety from all EVM chains to incorporate customers on the Solana community. Following its acquisition of competitor Pocket Universe in August, Kerberus carried out the identical Solana protection for Pocket Universe customers in November.
“Our purpose is to make sure unsafe transactions can’t be accepted within the first place,” stated Alex Katz. “It’s straightforward to be distracted or rushed within the warmth of on-chain occasions. That’s why Kerberos protects customers in the meanwhile they signal, so that they don’t want to examine each signature themselves,” he added.
The corporate is working towards a mannequin of safer Web3 adoption, the place safety operates routinely and customers can give attention to their supposed actions.
Disclaimer
Consistent with the Belief Venture pointers, please observe that the data supplied on this web page isn’t supposed to be and shouldn’t be interpreted as authorized, tax, funding, monetary, or another type of recommendation. You will need to solely make investments what you’ll be able to afford to lose and to hunt unbiased monetary recommendation if in case you have any doubts. For additional info, we propose referring to the phrases and circumstances in addition to the assistance and help pages supplied by the issuer or advertiser. MetaversePost is dedicated to correct, unbiased reporting, however market circumstances are topic to vary with out discover.
About The Creator
Alisa, a devoted journalist on the MPost, focuses on cryptocurrency, zero-knowledge proofs, investments, and the expansive realm of Web3. With a eager eye for rising developments and applied sciences, she delivers complete protection to tell and interact readers within the ever-evolving panorama of digital finance.
Extra articles
Alisa, a devoted journalist on the MPost, focuses on cryptocurrency, zero-knowledge proofs, investments, and the expansive realm of Web3. With a eager eye for rising developments and applied sciences, she delivers complete protection to tell and interact readers within the ever-evolving panorama of digital finance.
Extra articles
