Despite the $1.4 billion lost in the recent Bybit hack, crypto companies have not changed their approach to cybersecurity, according to Hacken CEO Dyma Budorin.
In an interview with Cointelegraph at the Token2049 event in Dubai, Budorin said the industry continues to rely on limited measures such as bug bounties and penetration tests, rather than implementing comprehensive, layered security strategies:
“Most of the projects think, ‘Okay, we did pentests. That’s enough. Maybe bug bounty. That’s enough.’ It’s not enough.”
He said that crypto companies must go beyond these isolated security measures and adopt more layered approaches similar to those of traditional industries. These include supply-chain security, operational security and blockchain-specific security assessments.
“In big Web2 companies, this is mandatory,” Budorin added.
Real-time blacklisting, a step forward
While crypto security approaches remained the same, post-hack security approaches shifted slightly. Budorin told Cointelegraph there were some improvements in the crypto space’s post-hack security responses.
“Maybe a little shift from a post-hack approach,” Budorin told Cointelegraph, citing how security firm Chainalysis introduced near real-time blacklisting of stolen funds. He said this small improvement is a step toward progress in crypto security.
“This is great because, previously, Chainalysis was blacklisting within three days when the funds were moving. And this is obviously nothing because hackers had enough time to launder, through exchanges, the stolen money,” Budorin said.
On Feb. 21, the Bybit hack saw $1.4 billion in crypto stolen through a safe wallet vulnerability. This became the largest crypto hack in history. After the hack, the malicious actors laundered 100% of the stolen money in just 10 days.
While faster blacklisting is a step forward, it still doesn’t address the deeper structural risks. “But in terms of the practice, cybersecurity, nothing changed,” Budorin told Cointelegraph.
Related: Bybit hacker launders 100% of stolen $1.4B crypto in 10 days
Crypto losses near $360 million in April
In April 2025, blockchain security firm PeckShield reported that the space saw nearly $360 million in digital assets stolen across 18 hacking incidents.
April’s losses show a 990% increase compared to March, when crypto lost to hacks totalled about $33 million. The largest chunk of the losses came from an unauthorized Bitcoin transfer.
On April 28, blockchain investigator ZachXBT flagged a suspicious transfer of $330 million in BTC. The investigator later confirmed that the transfer was a social engineering attack targeting an elderly individual in the United States.
Magazine: 12 minutes of nail-biting tension when Ethereum’s Pectra fork goes live
