📰 ETHCC, IVS2025, Web3 Summit 2025, Trends, , CI/CD Upgrades – July's Blockchain Security Brief by Set In Stone
July 2025 Edition
July is here — and the heat isn’t just in the weather. As Web3 moves deeper into the spotlight, the pressure is on for builders, auditors, and compliance leads to raise their game.
This month, we’re bringing you sharp product enhancements, fresh data from the field, and a closer look at the vulnerabilities that defined the first half of 2025. From Cannes to Kyoto to Berlin, Set In Stone is on the ground — and in your corner.
Here’s what’s inside:
📄 Our White Paper Release State of Blockchain Security & Compliance – H1 2025
570+ views in just one month. That’s how far our latest whitepaper — State of Blockchain Security & Compliance (H1 2025) — has travelled across France, the UK, the US, and beyond. From security leaders to compliance teams, it’s become the go-to snapshot for anticipating risk and aligning with regulation. 👉 Access it here.
⚒️ What’s New on Set In Stone
🚀 You’ll get fresh product updates: expanded API coverage - in section A. ⚒️ News About Set In Stone
🎫 List of side events
You’ll discover what’s next on the global Web3 scene — from Cannes to Kyoto — with curated event picks focused on security and funding. - in section B. 🎫 Next Events - 🛡️Web3 Security & 💸Web3 Startup Funding
📊 Security Insights In H1 2025, over $7.24 billion in crypto assets were stolen, with April alone accounting for $5.58B due to massive, concentrated exploits. June saw a drop in financial impact ($114M) despite 10 hacks, contrasting sharply with May’s $264M across only 4 incidents. The $82M Nobitex breach exposed deep infrastructure flaws, underlining the urgent need for Zero Trust architecture and runtime monitoring across centralized platforms. - in section C. 📊 Security Insights: study of stolen funds last month
Ready to stay ahead and keep your smart contracts safe? Let’s dive in.
A. ⚒️ News About Set In Stone
Our Last Whitepaper viewed over 570 times — with traction in France, the UK, and the US.
The most advanced analysis of where blockchain security is headed — and how to stay ahead.
Key Highlights:
1️⃣ 2025 Security & Compliance Roadmap
A panoramic view of new and upcoming regulatory frameworks such as MiCA (EU), DORA (EU), and CETU (U.S.), with cybersecurity now fully embedded in financial regulations across the G20 — including Singapore and the UK.
2️⃣ Security Incident Landscape – H1 2025
A taxonomy-driven breakdown of major incidents from the first half of 2025, analyzing attack vectors, protocols targeted, and financial losses. Spoiler: access control and social engineering are now ahead of smart contract bugs in terms of impact.
3️⃣ Comparative Risk Mapping by Ecosystem
An up-to-date technical deep dive into ecosystem upgrades — from Ethereum Pectra to Solana Firedancer and XRPL’s new DID + EVM sidechain — and what they mean for your risk profile.
4️⃣ Strategic Playbook for Security & Compliance Leaders
A hands-on checklist to align with the latest standards. Topics include infrastructure hardening, smart contract validation, threat intelligence, incident response, and executive accountability.
This report is your Q3 starting block.
🚀 What’s New on Set In Stone — June 2025
We’ve got a fresh batch of updates designed to give you more control, better visibility, and an even smoother experience. Here's what just landed:
1️⃣ API Access — 4 additional networks
Our API can analyse smartcontracts on 4 additional networks in the EVM ecosystem (linea mainnet, linea sepolia testnet, mantle mainnet, mantle sepolia testnet).
You can now use the API of then your dashboard on https://app.setinstone.io
and test it from the home page of the website: setinstone.io (only smartcontracts in solidity and verified).
More information on our documentation: Set In Stone Documentation - API Section
⚙️ Secure by Default: Integrate Set In Stone directly into your CI/CD pipeline with GitHub Actions or GitLab Pipelines. Every commit triggers an automated security scan — from dev to prod.
📤 Upload & Analyze: Prefer manual uploads? Drop your Solidity smart contracts from a
.zip,.tar, or even a GitHub repo. Get an instant vulnerability report with remediation tips.🔍 Address-Based Scanning: Already deployed? Just paste the address. We'll fetch the contract and analyze its security posture on-chain.
B. 🎫 Next Events - 🛡️Web3 Security & 💸Web3 Startup Funding
CANNES, FRANCE: ETHCC
KYOTO, JAPAN: IVS2025
FUNKHAUS, GERMANY: Web3 Summit 2025
ETHCC Cannes - June 30th to July 3rd, 2025
🌟Venture Capital Community Demo Day Ethcc Cannes
Category: 💸Web3 Startup Funding
Location: Cannes, Provence-Alpes-Côte d'Azur
Date: June 27, 2025 – 11:00 AM to 1:00 PM
Red Team vs. Blue Team Live Simulation
Category: 🛡️Web3 Security
Location: Cannes, Provence-Alpes-Côte d'Azur
Date: June 28, 2025 – 11:30 AM to 5:30 PM
Demo Day & Pitch Competition | Hosted by Atlassoit
Category: 💸Web3 Startup Funding
Location: Espace Croisette, 21 Rue du Canada, 06400 Cannes, France
Date: June 29, 2025 – 3:00 PM to 7:30 PM
Demo Day & Pitching Competition (Founder Focused)
Category: 💸Web3 Startup Funding
Location: Canopy by Hilton Cannes, 2 Bd Jean Hibert, 06400 Cannes, France
Date: June 29, 2025 – 4:00 PM to 9:00 PM
Private Yacht Party (Whitelist Only) - Day 1
Category: 💸Web3 Startup Funding
Location: Cannes, Provence-Alpes-Côte d'Azur
Date: June 29, 2025 – 7:00 PM to 11:00 PM
Breakfast with friends by Masterkey VC
Category: 💸Web3 Startup Funding
Location: Cannes, Provence-Alpes-Côte d'Azur
Date: June 30, 2025 – 9:30 AM to 11:30 AM (UTC+2)
EthCC Founders & Investors Brunch ✨ (invite only)
Category: 💸Web3 Startup Funding
Location: Cannes, Provence-Alpes-Côte d'Azur
Date: June 30, 2025 – 11:00 AM to 2:00 PM
🇫🇷Family office & Investors Summit 🇫🇷EthCC[8] Cannes
Category: 💸Web3 Startup Funding
Location: Carlton Cannes, a Regent Hotel, 58 Bd de la Croisette Cs 40052, 06400 Cannes, France
Date: June 30, 2025 – 3:00 PM to 6:00 PM
EthCC - VCs & LPs Cocktail Hour✨ (invite only)
Category: 💸Web3 Startup Funding
Location: Cannes, Provence-Alpes-Côte d'Azur
Date: June 30, 2025 – 3:00 PM to 5:00 PM
🥂Founder x VC Happy Hour @ ETH CC
Category: 💸Web3 Startup Funding
Location: Le Roof at Five Seas Hotel, 1 Rue Notre Dame, 06400 Cannes, France
Date: June 30, 2025 – 4:30 PM to 5:30 PM
Builder Nights Cannes - Presented by MetaMask 🦊, Linea and 1inch
Category: 🛡️Web3 Security
Location: Cannes, Provence-Alpes-Côte d'Azur
Date: June 30, 2025 – 6:00 PM to 11:00 PM
VNTR Investor Forum Cannes | EthCC 🇫🇷
Category: 💸Web3 Startup Funding
Location: Cannes, Provence-Alpes-Côte d'Azur
Date: July 1, 2025 – 9:00 AM to 2:00 PM
Breakfast with friends by Masterkey VC
Category: 💸Web3 Startup Funding
Location: Masterkey flat, Cannes
Date: July 1, 2025 – 9:30 AM to 11:30 AM (UTC+2)
DeFi Founders Club: Cannes
Organized by: DeFi Founders Club
Category: 💸 Web3 Startup & DeFi Networking
Location: Cannes, Provence-Alpes-Côte d'Azur (address available upon registration)
Date: Tuesday, July 1, 2025 — 12:00 PM to 4:00 PM
URL: https://lu.ma/03rd8ydwImmunefi Riviera Affair @ EthCC Cannes with ChainSecurity
Category: 🛡️Web3 Security
Location: La Plage Du Festival, 52 Bd de la Croisette, 06400 Cannes, France
Date: July 1, 2025 – 7:00 PM to 12:00 AM
PUMP with WTG Ventures (The Cannes beach workout)
Category: 💸Web3 Startup Funding
Location:
https://maps.app.goo.gl/b1nH1meJqAS3NQkg6
Date: July 2, 2025 – 8:30 AM to 9:30 AM
THE LOCAL: A Rooftop Brunch for Founders, Funders & Friends
Category: 💸Web3 Startup Funding
Location: Cannes, Provence-Alpes-Côte d'Azur
Date: July 2, 2025 – 11:00 AM to 2:00 PM
Founders & VCs Brunch and Lunch 🥐 ETH CC
Category: 💸Web3 Startup Funding
Location:
Cannes, Provence-Alpes-Côte d'Azur
Date: July 2, 2025 – 11:00 AM to 2:00 PM
The Value Accrual Lab
Category: 💸Web3 Startup Funding
Location: Cannes, Provence-Alpes-Côte d'Azur
Date: July 2, 2025 – 12:30 PM to 5:30 PM
EthCC Builders Showcase🇫🇷 @EthCC Main Venue 5th Floor
Category: 💸Web3 Startup Funding
Location: Palace of Festivals and Congresses of Cannes, 1 Bd de la Croisette, 06400 Cannes, France
Date: July 2, 2025 – 1:00 PM to 4:00 PM
Breakfast with friends by Masterkey VC
Category: 💸Web3 Startup Funding
Location: Masterkey flat, Cannes
Date: July 3, 2025 – 9:30 AM to 11:30 AM (UTC+2)
URL:
Hack Seasons Conference Cannes
Category: 🛡️Web3 Security
Location: Hotel Barrière Le Majestic Cannes, 10 Bd de la Croisette, 06400 Cannes, France
Date: July 3, 2025 – 10:00 AM to 7:00 PM
Security Mixer - EthCC
Category: 🛡️Web3 Security
Location: Cannes, Provence-Alpes-Côte d'Azur
Date: July 3, 2025 – 10:00 PM to 11:00 PM
📅 Web3 Events in KYOTO – July 2025
IVS Flying Night – Entrepreneurs × VC Meetup
Category: 💸 Web3 Startup Funding
Location: Kyoto Research Park, GOCONC, Bldg. 10, 1F, 91 Kuritachō, Nakagyō-ku, Kyoto, Japan
Date: Tuesday, July 1, 2025 – 6:00 PM to 9:00 PM (UTC+09:00)
URL: https://4s.link/en/b2fe6298-0b46-4137-8fa7-fd609103784d
Kyoto Machiya Night – VC & CVC Pre-Party
Category: 💸 Web3 Startup Funding
Location: SIGHTS KYOTO, 255 Miyagawa-suji 2-chome, Higashiyama-ku, Kyoto, Japan
Date: Tuesday, July 1, 2025 – 6:30 PM to 9:00 PM (UTC+09:00)
URL: https://4s.link/en/a390329a-b87e-4861-a2a9-00fa9290c616
Entrepreneurs × CVC Happy Hour (20 CVCs!) – Free Participation
Category: 💸 Web3 Startup Funding
Location: Izakaya Anil, 6F Toritane Building, 186 Zaimokuchō, Nakagyō-ku, Kyoto, Japan
Date: Wednesday, July 2, 2025 – 4:00 PM to 6:00 PM (UTC+09:00)
URL: https://4s.link/en/fa62003b-d5f0-4688-91e4-e741191054d1
IVS Startup Market
Category: 💸 Web3 Startup Funding
Location: Miyakomesse (Kyoto International Exhibition Hall), 9-1 Seishōjichō, Okazaki, Sakyo-ku, Kyoto, Japan
Date: Thursday, July 3, 2025 – 11:30 AM to 12:00 PM (UTC+09:00)
URL: https://4s.link/en/227e7c5a-0b81-46b5-a0b4-15336c9b359c
Women Entrepreneurs × Women VCs Networking Lunch
Category: 💸 Web3 Startup Funding
Location: Hashimoto-chō area, Nakagyō-ku, Kyoto, Japan
Date: Thursday, July 3, 2025 – 11:30 AM to 1:00 PM (UTC+09:00)
URL: https://4s.link/en/6561322e-f280-48d5-a17a-fac1b9d93070
Startup Market Tour by ANOBAKA @ IVS2025
Category: 💸 Web3 Startup Funding
Location: Miyakomesse, 9-1 Seishōjichō, Okazaki, Sakyo-ku, Kyoto, Japan
Date: Thursday, July 3, 2025 – 12:00 PM to 12:30 PM (UTC+09:00)
URL: https://4s.link/en/3abed787-d66d-4dbc-bbd7-b8825709db59
KYOTO Innovation Studio Networking @ Marl Café (Kiyomizu-Gojo)
Category: 💸 Web3 Startup Funding
Location: Marl Café, 762 Nishihashizume-chō, Shimogyō-ku, Kyoto, Japan
Date: Thursday, July 3, 2025 – 7:30 PM to 9:30 PM (UTC+09:00)
URL: https://4s.link/en/d0b282c3-6a65-4618-b3fb-af9597c7ce55
📅 Web3 Events in Funkhaus– July 2025
Web3 Summit 2025
Category: 💸 Web3 Startup Funding
Location: Funkhaus Berlin, Germany
Date: July 16–18, 2025
⚙️ Secure by Default: Integrate Set In Stone directly into your CI/CD pipeline with GitHub Actions or GitLab Pipelines. Every commit triggers an automated security scan — from dev to prod.
📤 Upload & Analyze: Prefer manual uploads? Drop your Solidity smart contracts from a
.zip,.tar, or even a GitHub repo. Get an instant vulnerability report with remediation tips.🔍 Address-Based Scanning: Already deployed? Just paste the address. We'll fetch the contract and analyze its security posture on-chain.
C. 📊 Security Insights: study of stolen funds last month and last semester
c.1 The Total funds stolen in previous month: $114,223,000
We notice a decrease when we compare this figure to May2025. Remind that the Total funds stolen in May 2025 was $264,060,000.
We have counted 10 rekt projects in june 2025 (i.e. Projects that have seen their funds stolen)
$0was recovered
Statistics:
Largest Blockchain Hack in the previous month :$82,000,000
Arithmetic Mean : $11,422,300
Median : ``$1,200,000
Data sources : https://de.fi/rekt-database, https://rekt.news/, https://x.com/blockthreat*
c.2. Crypto Hack Trends – First Half of 2025 (H1)
In the first six months of 2025, the crypto ecosystem suffered a total of $7.24 billion in stolen funds. This period was marked by a mix of high-impact exploits and steady attack frequency, with clear shifts in both the scale and nature of the incidents.
In January, we saw a high number of small-scale hacks — 13 projects were affected, but the total financial loss was relatively low at around $60 million.
February took a sharp turn. Hackers executed multiple large-scale attacks, driving losses up to over $1.76 billion, despite only 10 projects being hit.
In March, things cooled off dramatically. The total damage was just $14,000, even though 10 separate incidents were recorded — making it the quietest month financially.
Then came April, which was catastrophic. A few massive exploits led to a record-breaking $5.58 billion stolen. Only 7 projects were impacted, but this month alone accounted for the majority of the semester’s total losses.
May brought some relief in terms of volume — only 4 projects were hacked — but the financial damage remained high, totaling $264 million. The few attacks that did happen were substantial in value.
Finally, in June, we saw a return to higher activity: 10 projects were compromised, similar to January, but the total funds lost dropped to $114 million, suggesting the attacks were less severe on average.
Key Lessons from H1 2025
First, a few incidents dominated the loss figures — most notably in April — showing how a single breach can skew the landscape.
Second, a high number of hacks doesn’t always mean high financial loss. June and January had the same number of incidents, but wildly different outcomes in terms of stolen value.
Lastly, some platforms showed serious weaknesses in operational security. Centralized exchanges and borrowing protocols like Nobitex and AlexLab were hit hard, underscoring ongoing issues in access control and infrastructure resilience.
The trends and insights from H1 2025 — including the concentration of large-scale hacks, operational failures in centralized platforms, and the disconnect between hack volume and financial loss — strongly align with the core findings highlighted in your latest whitepaper available at:
🔗 https://www.setinstone.io/state-of-blockchain-security-compliance
These patterns reinforce the need for:
Proactive infrastructure hardening
Stronger internal access controls
Real-time anomaly detection
Continuous compliance monitoring across DeFi and CeFi systems
⚙️ Secure by Default: Integrate Set In Stone directly into your CI/CD pipeline with GitHub Actions or GitLab Pipelines. Every commit triggers an automated security scan — from dev to prod.
📤 Upload & Analyze: Prefer manual uploads? Drop your Solidity smart contracts from a
.zip,.tar, or even a GitHub repo. Get an instant vulnerability report with remediation tips.🔍 Address-Based Scanning: Already deployed? Just paste the address. We'll fetch the contract and analyze its security posture on-chain.
