CETUS Breach and North Korea theft led to $ 244 million encryption in May
The encryption industry lost more than $ 244 million for breakthroughs and fraud in May 2025, according to Blockchain Peckshield security.
Although this number is still large, it represents a 39 % decrease compared to April $ 402 million, indicating a temporary slowdown in malignant activity.
Snements are tried to cook now framing the victims
Peckshield data shows that attacks spanned various protocols, with some accidents that lead to slight violations and other catastrophic losses.
The largest exploitation of the CETUS protocol, a central exchange that works on Sui Blockchain, who lost nearly $ 223 million in one attack.

After the violation, CETUS participated with SUI’s health to freeze some stolen assets, which amounted to about $ 162 million or about 71 % of the stolen money.
CETUS recently witnessed its proposal to restore the frozen money approved by Sui Deveridators. This represents the beginning of the broader recovery process that includes the upgrade of smart contracts, the restoration of liquidity, and the preparation of the platform for restart.
Meanwhile, another platform witnessed a major attack on ETAREUM.
Atthereum (WSTHEM) markets used to the platform, and theft of about 3,761.8 WSTHE, at a value of approximately $ 12 million. Although other markets were not affected, Cork has stopped all operations to allow a full review.
Pixchild’s report raised new concerns about the return of infiltrators associated with North Korea. According to the company, it is claimed that these fierce actors stole $ 5.2 million from one encryption merchant.
The incident sparked fears of the state’s sponsored attacks, after calmness after BIBIS exploited a value of $ 1.5 billion.
Other incidents included the exploitation of $ 2.2 million on Mobius icon contracts on the BNB series. In this case, the attacker used one smart contract to drain 28.5 million barrels.
Amid the increasing threats, Tornado Cash, an ETHEREUM, remains a favorite tool for laundering stolen money.

Given, Yu Xian, co -founder of Blockchain SlowMist, urged the victims to share their wallet addresses after their exploitation. I suggest making it public or partially monitoring to support investigations and avoid identifying them by mistake as suspects.
According to him, infiltrators are increasingly using different tactics to convert doubts to innocent users to complicate law enforcement agencies.
“Some of the infiltrators nowadays want to frame others. You will not only suffer from the pain of stole your money, but also the following cooperation with the investigation of law enforcement … It is not good to be treated as a suspect,” Add.
The post -CETUS breach and North Korea’s theft led to a $ 244 million encryption losses in May for the first time on Beincrypto.