Monthly report

OKLink Security Monthly Report: Zero major Rug Pull incidents in November, with total losses across the network amounting to approximately 203 million USD

OKLink released the November 2024 Security Report, which indicates that on-chain security incidents across the network have resulted in a total loss of approximately $203 million. Phishing scams alone accounted for 64.80% of the total losses, amounting to about $131 million, with no significant Rug Pull incidents reported. REKT incidents accounted for 22.06% of the losses, totaling approximately $45 million.On November 13, a user copied an incorrect address from contaminated transaction history, resulting in a loss of $129 million. An hour later, the attacker returned all the assets. On November 15, the v1 liquidity pool contract of the Aptos ecosystem project Thala was attacked due to a security vulnerability, causing a loss of $25.5 million. Subsequently, Thala negotiated with the attacker to recover all user assets through a $300,000 bounty.OKLink reminds everyone to carefully verify the receiving address when performing on-chain operations. Some users have lost over $100 million by copying incorrect addresses from contaminated transaction records. It is essential to double-check the recipient's address when conducting on-chain operations and avoid the habit of directly copying addresses from transaction records or chat logs. Additionally, learn to use Web3 on-chain tools to mitigate risks. OKLink provides tools for on-chain address queries, token authorization checks, and large transfer monitoring, ensuring on-chain security and keeping you informed of market trends, helping you overcome on-chain anxiety.

OKLink Security Monthly Report: In October, the total losses across the network amounted to approximately $181 million, an increase of 38.9% month-on-month

ChainCatcher news, OKLink released the October 2024 security monthly report, stating that the cumulative losses from on-chain security incidents across the network amount to approximately $181 million. Losses from phishing scams account for 23.94% of the total losses, totaling about $43.53 million. REKT incidents account for 35.92% of the losses, totaling about $65.32 million.On October 11, a user on Blast lost 15,079 fwDETH after signing a phishing "permit" signature, worth approximately $35 million. On October 16, multiple multi-signature wallets of Radiant Capital were attacked, with the attacker injecting malware into hardware wallets, compromising several developers' hardware wallets. The attack process was so covert that the front end of the Gnosis Safe multi-signature wallet displayed legitimate transaction data, while the back end was simultaneously signing and executing tampered transactions, ultimately leading to losses of about $58 million.In this month's security incidents, the methods of attack are constantly evolving. OKLink reminds users to be particularly vigilant against phishing attacks involving "permit" and "approve" authorizations on social platforms, as these types of attacks have occurred frequently this month. When performing on-chain operations, it is essential to carefully verify the receiving address and not to easily trust the addresses in transaction records, as they may have been replaced by hackers. For multi-signature wallets, it is crucial to strictly protect the security of private keys, and when handling emails related to crypto assets, carefully verify the sender's identity and the authenticity of the content, and learn to use Web3 on-chain tools to mitigate risks.
ChainCatcher Building the Web3 world with innovators