Security remains a top priority across crypto, yet losses keep climbing, with over $3.63 billion stolen since 2025. CEXes are most exposed through private key compromise, while DEXes face smart contract exploits, increasingly compounded by fake UIs and malicious integrations. The actors have evolved just as fast. Rogue individuals have given way to organized cartels and state-sponsored groups, including North Korean hackers, who now use mixers, bridges, and staggered withdrawals to stay untraceable. This report examines the shifting threat landscape, from auditing and insurance protocols to the security infrastructure CEXes like Toobit deploy to protect users. We’ve summarized the key highlights, but be sure to dig into the full 15 slides in the full report here.