The Alarming Rise of Cyber Threats in the NFT and Cryptocurrency Space

The NFT and cryptocurrency space continues to grow fast, but so do the cyber threats targeting it. According to the latest Cryptocurrency & NFT Industry Threat Landscape Report by SOCRadar, attackers are evolving, and they are focusing their efforts on both emerging markets and major platforms like Binance and Coinbase.

Cryptocurrency & NFT Industry Threat Landscape Report

The United States stands out as the top country discussed in dark web forums, with nearly 20% of all threat mentions, which is more than four times that of the United Kingdom. This shows how strongly the U.S. dominates the global crypto scene and how heavily it is being targeted.

Dark web activity around crypto and NFTs is mostly about monetization. Almost 70% of threats involve selling stolen data or services, while 23% involve sharing information or tools. The focus is clear: cybercriminals want to profit.

Among the stolen data, email and password pairs make up the vast majority, with over 622,000 credentials exposed. This puts users and platforms at serious risk of account takeovers. Password hashes and IP addresses also appear frequently, but financial data like credit cards is less common, likely due to tighter controls and quicker reporting.

Phishing is another major concern. Attackers have moved beyond basic scams. In fact, 75% of phishing sites now use HTTPS, giving them a fake sense of legitimacy. These sites often mimic well-known platforms like Coinbase and Kraken, using convincing titles and layouts to trick users. This shows that simply looking for the HTTPS padlock is no longer enough to ensure a site is safe.

Stay Ahead of the Threats

The main takeaway is clear: as crypto and NFTs go mainstream, so do the risks.

Now more than ever, businesses and users must invest in proactive security measures. Solutions like SOCRadar’s Dark Web Monitoring and Identity Intelligence tools can help detect threats early and prevent costly breaches.

You can also look at our CEO Edition or CISO Edition for special insights.