[Cumulative Losses Exceed $3.63 Billion, Nearly 60% of Crypto Platform Attacks Involve Audited Platforms] Odaily Planet Daily News: Between January 2025 and July 2026, a total of 245 security incidents were recorded. The top ten attacks accounted for over 72.5% of the stolen funds. Supply chain and infrastructure vulnerabilities remain the primary security risks faced by CEX and DEX, with related losses exceeding $1.8 billion. The most common risk for CEX is private key leakage, while DApps suffered approximately $546 million in theft due to smart contract vulnerabilities. Among the 147 incidents involving independently audited platforms, stolen funds accounted for 88.44% of total losses. Most attacks fell outside the scope of traditional audits, with common causes including external infrastructure, unaudited code updates, and governance attacks. Only about 11% of incidents involved smart contract defects within the audit scope.