OKLink Security Monthly Report

OKLink Security Monthly Report: In October, the total losses across the network amounted to approximately $181 million, an increase of 38.9% month-on-month

ChainCatcher news, OKLink released the October 2024 security monthly report, stating that the cumulative losses from on-chain security incidents across the network amount to approximately $181 million. Losses from phishing scams account for 23.94% of the total losses, totaling about $43.53 million. REKT incidents account for 35.92% of the losses, totaling about $65.32 million.On October 11, a user on Blast lost 15,079 fwDETH after signing a phishing "permit" signature, worth approximately $35 million. On October 16, multiple multi-signature wallets of Radiant Capital were attacked, with the attacker injecting malware into hardware wallets, compromising several developers' hardware wallets. The attack process was so covert that the front end of the Gnosis Safe multi-signature wallet displayed legitimate transaction data, while the back end was simultaneously signing and executing tampered transactions, ultimately leading to losses of about $58 million.In this month's security incidents, the methods of attack are constantly evolving. OKLink reminds users to be particularly vigilant against phishing attacks involving "permit" and "approve" authorizations on social platforms, as these types of attacks have occurred frequently this month. When performing on-chain operations, it is essential to carefully verify the receiving address and not to easily trust the addresses in transaction records, as they may have been replaced by hackers. For multi-signature wallets, it is crucial to strictly protect the security of private keys, and when handling emails related to crypto assets, carefully verify the sender's identity and the authenticity of the content, and learn to use Web3 on-chain tools to mitigate risks.

OKLink Security Monthly Report: In July, the total losses across the network amounted to approximately $290 million, with losses due to private key leaks accounting for 88.31% of the total losses

ChainCatcher news, OKLink released the July 2024 security report, stating that the cumulative losses from on-chain security incidents across the network amount to approximately $290 million. Losses due to private key leaks account for 88.31% of the total losses, phishing incidents account for 3.03%, REKT incidents account for 7.33%, and RugPull incidents account for 1.31%.On July 18, the private key of the WazirX exchange's multi-signature wallet was leaked, resulting in a loss of approximately $235 million, making it the largest security incident in July. On July 16, the LiFi Protocol cross-chain bridge aggregation protocol was attacked, leading to a loss of about $10 million. The attacker exploited a vulnerability that allowed arbitrary calls to steal assets authorized by users of this contract.In addition, there were a total of 14 incidents of scams and phishing on official social media, resulting in losses of approximately $3.89 million, a decrease of 81.34% compared to June. OKLink reminds users not to disclose your private keys or mnemonic phrases to anyone, not to click on unverified links, and to learn how to use Web3 on-chain tools to mitigate risks. This is an important line of defense in protecting yourself in the Web3 world.

OKLink Security Monthly Report: In June, the total losses across the network amounted to approximately $210 million, with losses from phishing scams decreasing by 75.69% month-on-month

ChainCatcher news, OKLink released the June 2024 security monthly report, which indicates that the cumulative losses from on-chain security incidents across the network amount to approximately $210 million. Among these, phishing incidents account for 9.91% of the losses, REKT incidents account for 20.83%, and RugPull incidents account for 3.53%.The largest security incident in terms of REKT losses occurred on June 10, when UwU Lend was attacked, resulting in losses of approximately $22.7 million. The attacker exploited a vulnerability in the contract related to oracle price manipulation, causing losses of about $19 million, and on June 13, they attacked again by taking advantage of the project's governance operation errors, profiting $3.7 million.In addition, there were a total of 31 incidents of scams and phishing on official social media, primarily concentrated on X, Discord, and various phishing websites. OKLink reminds users not to click on unverified links, not to disclose your private keys or seed phrases to anyone, and to maintain a skeptical attitude towards projects that promise abnormally high returns. Before investing, be sure to conduct thorough research on the project and the team. Security awareness is your strongest shield in the Web3 world.
ChainCatcher Building the Web3 world with innovators