$14.6 Million in RWA Hacks This Year Reveals the Gap Between Tokenization Hype and Reality

Cybersecurity Tech Brief By HackerNoon

This story was originally published on HackerNoon at: https://hackernoon.com/$146-million-in-rwa-hacks-this-year-reveals-the-gap-between-tokenization-hype-and-reality.
RWA tokenization hit $35.68B in 2025, but $14.6M in hacks exposed security gaps. Can the industry scale to $2 trillion by 2028 amid regulatory fragmentation?
Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity. You can also check exclusive content about #blockchain-security, #rwa-tokenization, #real-world-assets, #defi-exploits, #cryptocurrency-regulation, #genius-act, #web3-hacks, #web3-breaches, and more.
This story was written by: @johnwrites. Learn more about this writer by checking @johnwrites's about page, and for more stories, please visit hackernoon.com.
Real-world asset (RWA) tokenization reached $35.68 billion in 2025, with projections to hit $2 trillion by 2028. But the rapid growth exposed critical vulnerabilities: $14.6 million was lost to hacks—more than double the previous year—with most exploits occurring in DeFi wrappers rather than the tokenized assets themselves. The GENIUS Act provided regulatory clarity for stablecoins but left gaps across the full asset lifecycle. Meanwhile, institutional giants like BlackRock, JPMorgan, and State Street are building on private blockchains, validating the market but creating interoperability challenges. Platforms like Mavryk (tokenizing $10B in luxury real estate), Ondo Finance (Treasury-backed tokens), and Securitize (infrastructure provider) are attempting to bridge institutional compliance with public blockchain efficiency.