In late 2025, crypto breaches escalated as Chainalysis tallied $3.4 billion in losses for the year. During Christmas week, Trust Wallet disclosed a $7 million Chrome-extension breach, while DeBot confirmed a $255,000 theft traced to a server in Japan; OKX's Star Xu cautioned that DEX bots and custodial wallets heighten risk.

On December 28, 2025, Kaspersky's SecureList reported that stolen crypto accounts listed on dark-web markets fetch an average of $105, with individual prices ranging from $60 to $400. The data is harvested by phishing kits, exfiltrated via email, Telegram bots, or admin panels, and then monetized immediately or routed into broader resale pipelines.

On December 28, 2025, Bitfinex Securities' Head of Operations Jesse Knutson projected strong 2026 growth in tokenized real‑world assets led by emerging markets. He cited on‑chain capital formation and fractional ownership as catalysts, contrasted developed‑market Treasuries with developing‑market real estate and commodities, and said the market could reach one trillion dollars within the next decade despite legal, liquidity, and interoperability hurdles.

On December 28, DeBot disclosed a wallet security breach involving compromised private keys and about $255,000 in unauthorized transfers. The team says it will fully compensate affected users, is monitoring impacted accounts, and warns against fake claim forms. Community responses urged moving funds to secure addresses as the attacker consolidates stolen assets.

Indian police in Hyderabad have arrested a former Coinbase customer support agent over an alleged role in the crypto exchange's data breach that began in December 2024 and exposed information for 69,461 users. Coinbase declined to pay a $20 million ransom, instead incurring $307 million in related costs and offering bounties while also facing a shareholder lawsuit over its handling of the incident.

On-chain figures from TradeFi.Network show that tokenized real-world assets on the XDC Network have reached $717 million, with $345.3 million now deployed via VERT Capital in USDC-based private credit pools. This concentration suggests institutional capital is favoring larger, targeted allocations on XDC, where low-cost, permission-aware infrastructure supports private credit markets that Moody's estimates exceed $1.6 trillion globally.

On December 28, Trust Wallet CEO Eowyn Chen said the browser extension investigation is ongoing and Google has escalated the support ticket, while a new alert now warns users to migrate if a wallet is compromised. The company reports more than 2,630 claims and losses of $1.05M–$3.5M, prioritizing ownership verification to deter fraud.

Senator Cynthia Lummis said Christopher Waller's proposal for "skinny" Federal Reserve master accounts could end crypto debanking. She made the comment after Waller presented the idea in October, which would let crypto and fintech firms obtain Fed accounts with restrictions. Recent reports still describe banks blocking some crypto companies, including actions involving JPMorgan.