The Web3.0 industry lost $364 million in April, with phishing attacks becoming a major threat.

According to the latest security data analysis, the Web3.0 industry will incur losses of up to $364 million due to hacker attacks and scams by April 2025, with $337 million coming from phishing attacks. This astonishing figure highlights the severity of the current blockchain security situation.

Data shows that the massive losses in April were mainly due to a single incident: a senior American citizen fell victim to a carefully designed social engineering attack, resulting in the theft of 3,520 bitcoins. On-chain investigations revealed that the stolen assets were quickly transferred to multiple swap platforms and exchanged for Monero, causing the XMR price to surge by 50% at one point.

In addition, several significant security incidents occurred in April. A decentralized trading platform suffered a $7.5 million attack due to a price oracle vulnerability; another project, Loopscale, lost $5.8 million; and an airdrop contract of an Ethereum scaling protocol was also attacked, with over $5 million stolen by attackers. It is worth noting that these platforms have partially recovered the stolen funds with the assistance of white-hat hackers.

In comparison to the loss of 28.8 million dollars in March, the losses in April have significantly increased. However, compared to the "historical highest month" of 1.5 billion dollars in February, this month's losses are still relatively small. The huge losses in February were mainly due to a large-scale attack launched by a hacker organization on a major exchange.

Industry experts warn that although blockchain technology has gradually become an important part of the global financial infrastructure, security challenges remain severe. Data shows that in the first quarter of 2025, the industry suffered losses of as much as $1.67 billion due to hacker attacks, a quarter-on-quarter increase of 303%, with the Ethereum ecosystem becoming a primary target for attacks.

In light of the current situation, security experts are calling for the incorporation of advanced technologies such as formal verification into the security protection system, and emphasize that the industry should face the systemic risks exposed by each attack incident. Meanwhile, experts suggest that Web3.0 project teams and users must verify the authenticity of URLs and smart contracts when transferring assets, and adopt storage methods that isolate the internet, such as cold wallets, to further enhance asset security. Additionally, users should avoid publicly sharing their digital asset-related information on social media to reduce the risk of becoming a target for attacks.