Crypto’s 2-Second Laundering Era: Hackers Now Move Before Victims Speak

2026-2-12 03:40

Crypto hackers are now moving stolen funds in as little as two seconds after an attack begins. In most cases, they shift assets before victims even disclose the breach. 

That is the clearest finding from Global Ledger’s 2025 analysis of 255 crypto hacks worth $4.04 billion.

Blink and It’s Gone: Crypto Laundering Now Starts Before Disclosure

The speed is striking. According to Global Ledger, 76% of hacks saw funds move before public disclosure, rising to 84.6% in the second half of the year. 

How Fast Crypto Hackers Move Stolen Funds. Source: Global Ledger

This means attackers often act before exchanges, analytics firms, or law enforcement can coordinate a response.

However, speed tells only part of the story.

While first transfers are now near-instant, full laundering takes longer. 

On average, hackers needed about 10.6 days in the second half of 2025 to reach final deposit points such as exchanges or mixers, up from roughly eight days earlier in the year. 

In short, the sprint is faster, but the marathon is slower.

This shift reflects improved monitoring after disclosure. Once incidents go public, exchanges and blockchain analytics firms label addresses and increase scrutiny. 

As a result, attackers break funds into smaller pieces and route them through multiple layers before attempting cash-out. 

Hacking Speed Increased, but Crypto Laundering Speed Became Slower. Source: Global Ledger

Bridges, Mixers, and the Long Road to Cash-Out

Bridges have become the main highway for that process. Nearly half of all stolen funds, about $2.01 billion, moved through cross-chain bridges. 

That is more than three times the amount routed via mixers or privacy protocols. In the Bybit case alone, 94.91% of stolen funds flowed through bridges.

At the same time, Tornado Cash regained prominence. The protocol appeared in 41.57% of hacks in 2025. Its usage share jumped sharply in the second half of the year, following sanctions changes cited in the report.

State of Crypto Theft and Money Laundering. Source: Global Ledger 

Meanwhile, direct cash-outs to centralized exchanges fell sharply in the second half. DeFi platforms received a rising share of stolen funds. Attackers appear to avoid obvious off-ramps until attention fades.

Notably, nearly half of all stolen funds remained unspent at the time of analysis. That leaves billions sitting in wallets, potentially waiting for future laundering attempts.

The scale of the problem remains severe. Ethereum accounted for $2.44 billion in losses, or 60.64% of the total. 

Overall, $4.04 billion was stolen across 255 incidents.

Yet recovery remains limited. Only about 9.52% of funds were frozen, and 6.52% were returned.

Taken together, the findings show a clear pattern. Attackers now operate at machine speed in the first seconds after a breach. 

Defenders respond later, forcing criminals into slower, staged laundering strategies. The race has not ended. It has simply entered a new phase—measured in seconds at the start, and days at the finish.

The post Crypto’s 2-Second Laundering Era: Hackers Now Move Before Victims Speak appeared first on BeInCrypto.

origin »

Bitcoin price in Telegram @btc_price_every_hour

Emerald Crypto (EMD) на Currencies.ru

$ 0 (+0.00%)
Объем 24H $0
Изменеия 24h: 0.00 %, 7d: 4.67 %
Cегодня L: $0 - H: $0
Капитализация $0 Rank 99999
Доступно / Всего 19.117m EMD / 32m EMD

crypto victims hackers clearest even disclose 160

crypto victims → Результатов: 126


Authorities dismantle a cross-border crypto fraud network in Europe

The cross-border fraud network used call centres to defraud victims. The network operated in Germany, Serbia, Cyprus, and Bulgaria. 15 people connected to the network have been arrested so far. After the raid on Nexo’s offices in Bulgaria, the European Union Agency for Criminal Justice Cooperation and Europol has arrested 15 people allegedly connected to […] The post Authorities dismantle a cross-border crypto fraud network in Europe appeared first on CoinJournal.

2023-1-13 18:53


More security, transparency, and scalability: What blockchain needs for mass adoption

In February 2022, the Ukrainian government ran a crypto donation campaign to support victims of the Russian invasion. When the nation tried to reward those who had contributed to the fundraiser by sending crypto wallet holders complimentary NFTs, a slew of scammers took advantage of the government’s generosity, causing the operation to cease.

2022-6-29 09:21