Crypto firms faced a record $2.72 billion in theft this year as attackers expanded their reach across major exchanges and DeFi platforms.