Crypto platforms lost $3.63 billion across 245 security incidents as most attacks targeted risks outside routine smart-contract audits.