In 2025, the cryptocurrency sector experienced its worst year for hacks, but the primary cause was human error rather than smart contract vulnerabilities. According to Mitchell Amador, CEO of Immunefi, operational failures such as compromised passwords, keys, and manipulated employees were the main culprits, not on-chain code issues. This shift indicates that while on-chain security is improving, criminals are increasingly targeting individuals through social engineering and impersonation scams. Chainalysis' 2026 Crypto Crime Report supports this view, highlighting a $17 billion loss to scams and frauds in 2025, with impersonation scams growing by 1,400% year-over-year. Amador emphasizes that as code becomes harder to exploit, attackers are focusing on human vulnerabilities. He warns that the main security challenge in 2026 will be protecting against sophisticated social engineering tactics, with AI playing a significant role in both defense and attack strategies.