CipherTrace: the amount of cryptocurrencies stolen from exchanges tripled to $761M in the first half of 2018 compared to all of 2017, may reach $1.5B this year
Bloomberg Tweets: @agoracom : Sounds scary ... But how much bigger is the problem in fiat, especially when you add in forgery, stolen credit cards, etc? http://twitter.com/...
Context & Ripple Effects
CipherTrace's mid-year tally put exchange theft on a steep escalator: $761M stolen in H1 2018, triple the total for all of 2017, with a year-end projection of $1.5B. The projection proved conservative — the firm's follow-up counted over $1.7B lost in 2018 once investor scams were added, turning this report into the first installment of what became a recurring annual loss series.
Why it matters: the numbers gave regulators, insurers, and institutional buyers a quantified custody-risk baseline just as exchanges were courting mainstream capital, and the same series was still being cited years later when TRM measured hacks doubling again in H1 2024.
First-order effects
- Exchanges holding customer funds absorb the losses directly, and every breach raises the bar for the custody practices — cold storage, insurance, withdrawal controls — the rest of the market now expects.
- CipherTrace's projection of $1.5B for 2018 makes theft a headline metric for the industry's legitimacy pitch, not a background operational cost.
Second-order effects
- Demand shifts toward blockchain-forensics and AML vendors like CipherTrace itself, whose quarterly loss reports double as marketing for the tracking tools exchanges need to detect stolen-fund flows.
- Later coverage showing cross-border payments from US exchanges up 46% over two years signals that stolen coins move through legitimate off-ramps, pulling compliance teams and payment processors into the containment effort.
Third-order effects
- If the pattern holds, exchange theft becomes a permanent, annually-benchmarked line item — the corpus tracks it from $761M in H1 2018 to an estimated $2.7B in 2025, including the $1.4B Bybit breach as the largest single hack — making custodial security a structural cost of operating an exchange rather than an anomaly.
- Concentration is the systemic signal: TRM found five large attacks accounted for 70% of crypto stolen in H1 2024, so risk consolidates around the biggest custodians, and a single failure can move the entire industry's annual loss number.
The trend: Cryptocurrency exchange theft has hardened into an escalating, annually-tracked structural cost of the market, with blockchain-analytics firms like CipherTrace, TRM, and Chainalysis serving as its de facto scorekeepers.