40% of Crypto Investors Report Hacking Incidents: Realities of Asset Security and Defense Strategies

The Paradoxical Structure of 40.9% Hacking Victim Rate and Asset Defense Strategies | Clabo Inc.

Clabo Inc. (Headquarters: Minato-ku, Tokyo; CEO: Ikuma Ueno) conducted a survey titled "Survey on Hacking Incidents and Unauthorized Access" targeting 746 individuals with cryptocurrency investment experience.

The results revealed that 40.9% of cryptocurrency investors have experienced some form of hacking incident, with 11.9% reporting actual financial loss.

Most strikingly, 60.6% of those who expressed confidence in their security measures reported being victims—significantly higher than those who admitted to having no security practices, revealing a paradoxical structure.

This suggests that investors with higher defense awareness may be more active in on-chain activities, making them more visible and vulnerable targets for attackers.

This report provides detailed analysis on the concentration of incidents among beginners with 1–2 years of investment experience and the notably high victim rate of 65.3% among those in their 20s.

View the full survey results

Survey Overview

40.9% Hacking Incident Rate

The Paradoxical Structure of 40.9% Hacking Victim Rate and Asset Defense Strategies | Clabo Inc.

40% of Investors Experienced Unauthorized Access

In this survey targeting cryptocurrency investors, 40.9% reported experiencing some form of unauthorized access or hacking incident.

This figure indicates that security risks in the Web3 space are no longer limited to technical experts but have become an unavoidable daily threat for retail investors.

While 55.6% avoided victimization, the fact that nearly two out of five investors have been targeted represents an extremely serious situation.

This reflects the reality that as the market rapidly expands, opportunities for attacks have become commonplace, underscoring the urgent need for each investor to strengthen their personal defense mechanisms.

Investors must recognize the environment under the assumption that their accounts or wallets could become targets at any time.

It is essential to reconfirm that many users are potentially exposed to risks, with dangers lurking within everyday transactions.

Approximately 1 in 10 Suffered Financial Loss

Among those who experienced incidents, 11.9% reported actual loss of cryptocurrency assets.

The remaining 29.0% were attacked but managed to protect their assets—classified as attempted but unsuccessful breaches.

At first glance, the actual loss rate may seem low.

However, while most investors successfully safeguarded their holdings, the fact that nearly 1 in 10 suffered critical losses is a reality that cannot be ignored.

This data suggests that there is still room to prevent damage through prompt action, such as early detection of anomalies or disconnecting wallets from suspicious sites.

At the same time, it serves as a stark warning: a single moment of negligence or delayed response can result in the complete disappearance of assets.

These figures vividly illustrate the difficulty of fully protecting assets in the context of investment.

Continuously Update Asset Defense Awareness

Those who experienced attacks but retained their assets may have succeeded due to early detection of irregularities or avoiding connections to suspicious websites—indicating effective defensive actions.

Their success stories are the best proof that proper risk management can prevent losses.

However, one successful experience does not guarantee future safety.

While security technologies evolve rapidly, attack methods are also becoming increasingly sophisticated, and past countermeasures may no longer be effective.

It is clear that implementing security measures does not equate to complete safety.

Each investor must regularly review their asset management practices and continuously update their defensive awareness—this is the key to long-term asset management.

The ongoing effort to update knowledge and adapt to evolving threats is, in fact, the responsibility of every investor.

Over 4-Fold Difference in Victim Rates by Age Group

The Paradoxical Structure of 40.9% Hacking Victim Rate and Asset Defense Strategies | Clabo Inc.

20-Somethings Show Alarmingly High 65.3% Victim Rate

The most striking finding in this survey was the exceptionally high victim rate among those in their 20s.

At 65.3%, this figure overwhelmingly surpasses other age groups.

This is likely due to younger investors’ active investment behaviors, such as gathering information via social media and actively participating in trending DeFi projects.

While they adapt quickly to new technologies, they also have more opportunities to fall into sophisticated traps set by attackers.

This figure is no coincidence—it demonstrates that the behavioral patterns of younger generations are directly linked to higher attack risks.

Precisely because they are digital natives, they should strengthen their defenses against the latest threats.

30s and 40s Show Moderate Incident Rates

The victim rates for those in their 30s and 40s were 49.8% and 35.0%, respectively.

Although lower than the 20s, these levels remain concerning and cannot be overlooked.

As this generation is typically in their prime working years, they likely invest during limited free time amid busy schedules.

Prioritizing convenience over thorough research when selecting platforms may be one factor increasing their risk.

Despite their mid-career experience, their preparedness for crypto-specific security issues still appears to require updates.

Remaining vigilant and strictly implementing basic countermeasures is the path to protecting their assets.

50+ Show Low Incident Rates

In contrast, the victim rates for those in their 50s and 60s were 20.8% and 18.0%, respectively—showing a clear decline with age.

Compared to younger generations, the difference is stark.

Older investors tend to prefer conservative investment strategies.

Their lower exposure to high-risk new services and complex on-chain transactions likely contributes to their lower victim rates.

It is not necessarily because their security awareness is extremely high.

Rather, the lower rate stems from relatively fewer activities that make them targets.

A structural difference in investment styles is evident—activity level itself acts as a defense barrier.

Peak Victim Rate at 1–2 Years of Investment Experience

The Paradoxical Structure of 40.9% Hacking Victim Rate and Asset Defense Strategies | Clabo Inc.

Concentration of Incidents in Early Investment Phase

A shocking finding emerged: the period of 1–2 years after starting investment is the most vulnerable to hacking incidents.

The victim rate reaches 51.4%, meaning over half of investors in this group have experienced some form of attack.

The initial phase of entering the cryptocurrency market is likely a period of unfamiliarity with trading operations and wallet management.

This lack of proficiency may make them ideal targets for attackers.

Curiosity to engage with multiple projects may also lead to neglecting proper risk management.

Establishing solid fundamentals should be the first priority.