ChainCatcher news, according to Beosin Alert monitoring and early warning, as of September 25, the total loss in the Web3 sector due to hacker attacks, phishing scams, and project Rug Pulls in Q3 2024 has reached $730 million. Among them, there were 23 major attack incidents, with a total loss of approximately $430 million; 3 project Rug Pull incidents, with a total loss of about $4.24 million; and total losses from phishing scams amounting to approximately $295 million.In terms of the types of attacked projects, the highest losses were incurred by CEX, with 3 attacks on CEX causing approximately $297 million in losses, accounting for about 40.6% of all attack losses.In terms of losses by chain, Ethereum remains the chain with the highest loss amount and the most attack incidents. 21 attacks and phishing incidents on Ethereum caused losses of $348 million, accounting for about 47.6% of the total losses.Regarding attack methods, there were 5 private key leakage incidents in Q3, resulting in losses of $305 million, accounting for about 41.7% of the total attack losses, making it the most prevalent type of attack.In terms of the flow of funds, only about $16.9 million of the stolen funds have been frozen or recovered. The vast majority (approximately 78.9%) of the stolen funds are still stored in the attackers' on-chain addresses.Compared to the same period in 2023, the total losses due to hacker attacks, phishing scams, and project Rug Pulls in Q3 2024 have slightly decreased to $730 million (the figure for Q3 2023 was $889 million). Factors such as the decline in cryptocurrency prices in Q3 2024 have had some impact on the reduction of the total amount, but overall, the situation in the Web3 security sector remains grim. Among the more than twenty attack incidents in Q3, 18 were still due to contract vulnerabilities, suggesting that project parties should seek professional security companies for audits before going live.

ChainCatcher news, according to monitoring by blockchain security audit company Beosin Alert, the total loss from various security incidents in May 2024 increased compared to April. In May 2024, there were over 27 typical security incidents, with a total loss of 154 million USD due to hacker attacks, phishing scams, and Rug Pulls, an increase of about 52.5% compared to April. Among them, attack incidents accounted for about 54.51 million USD, an increase of about 3.7%; phishing scam incidents accounted for about 97.4 million USD, an increase of about 754%; and Rug Pull incidents accounted for about 2.04 million USD, a decrease of about 94.5%.This month, there were 2 hacker attack incidents with losses exceeding 10 million USD: the gaming platform Gala Games lost 22.5 million USD due to private key leakage, and Sonne Finance lost 20 million USD due to a contract vulnerability. This month saw a significant increase in phishing scams, with multiple phishing incidents resulting in losses exceeding 1 million USD, including one address poisoning scam with a loss of 72 million USD. The number of crypto crime cases continued to rise this month, with several cases involving amounts exceeding 100 million USD.

ChainCatcher news, according to Beosin Alert monitoring and early warning, the total loss in the Web3 sector due to hacker attacks, phishing scams, and project Rug Pulls reached 778 million USD in the first quarter of 2024. Among them, there were 39 major attack incidents with a total loss of approximately 617 million USD; 43 project Rug Pull incidents with a total loss of about 75.5 million USD; and phishing scams with a total loss of approximately 86.24 million USD.The total loss in the first quarter of 2024 was about 778 million USD, a year-on-year increase of approximately 126% and a quarter-on-quarter increase of about 72%. The losses from hacker attacks were higher than any quarter in 2023. The total loss in February reached 422 million USD, making it the month with the highest loss in the first quarter of 2024.In terms of the types of attacked projects, gaming platforms have become the project type with the highest loss amount for the first time. Six attacks on Web3 gaming platforms caused a total loss of 365 million USD, accounting for 59% of all attack losses. In terms of loss amounts across chains, Ethereum remains the chain with the highest loss amount and the most attack incidents. Eighteen attack incidents on Ethereum resulted in a loss of 342 million USD, accounting for 55.4% of the total loss.In terms of attack methods, there were 13 private key leakage incidents this quarter, resulting in losses of 458 million USD, which accounted for 74.3% of the total attack losses, making it the highest proportion attack type. According to Beosin KYT anti-money laundering analysis platform monitoring, in terms of fund flow, most of the stolen assets this quarter were frozen and recovered. Approximately 303 million USD (49.2%) of the stolen funds were frozen, and 79.45 million USD (12.9%) of the stolen funds were recovered. In terms of audit status, the proportion of audited project parties among the attacked projects has increased.

ChainCatcher news, according to monitoring by the blockchain security audit company Beosin's KYT anti-money laundering analysis platform, the loss amount from various security incidents significantly increased in February 2024 compared to January. In February 2024, there were more than 19 typical security incidents, with total losses due to hacker attacks, phishing scams, and Rug Pulls reaching $422 million, an increase of about 102% compared to January. Among these, attack incidents accounted for approximately $347 million, an increase of about 110%; phishing scam incidents were about $16.08 million, a decrease of about 52%; and Rug Pull incidents were approximately $59.38 million, an increase of about 440%.The largest attack incident in February was the attack on the crypto gaming platform PlayDapp due to private key leakage, resulting in a loss of $290 million, making it the highest loss security incident of the year so far. Other incidents with losses exceeding ten million dollars include: the centralized exchange FixedFloat being attacked, resulting in a loss of $26.1 million; Axie Infinity co-founder Jihoz.ron’s personal address losing about $10 million due to private key leakage. Additionally, the Hong Kong exchange Bitforex is suspected of experiencing a Rug Pull, with $56.5 million anomalously flowing out of its hot wallet.

ChainCatcher news reports that, according to monitoring by the blockchain security auditing company Beosin's EagleEye platform, as of December 25, 2023, the total losses in the Web3 sector due to hacker attacks, phishing scams, and project Rug Pulls reached $2.02 billion. Among them, there were 191 attack incidents with total losses of approximately $1.397 billion; 267 project Rug Pull incidents with total losses of about $388 million; and phishing scams with total losses of approximately $238 million.In 2023, hacker attacks, phishing scams, and project Rug Pull incidents saw a significant decline compared to 2022, with a total amount decrease of 53.9%. Among them, hacker attacks had the largest decline, dropping from $3.6 billion in 2022 to $1.397 billion in 2023, a decrease of about 61.2%. Phishing scam losses decreased by 33.2% compared to 2022, and Rug Pull losses decreased by 8.8%.In 2023, there were 4 attack incidents with losses exceeding $100 million, and 17 attack incidents with losses ranging from $10 million to $100 million. The top 10 security incidents had a total loss amount of approximately $1 billion, accounting for 71.5% of the total loss amount from annual attack incidents.The types of projects attacked in 2023 were more diverse compared to 2022, including DeFi, CEX, DEX, public chains, cross-chain bridges, wallets, payment platforms, gambling platforms, crypto brokers, infrastructure, password managers, development tools, MEV bots, TG bots, and more. DeFi was the project type with the highest frequency of attacks and loss amounts, with 130 DeFi attacks causing a total loss of approximately $408 million.In 2023, the types of public chains attacked were more frequent, with multiple security incidents involving theft across multiple chains. Ethereum remained the public chain with the highest loss amount, with 71 attack incidents on Ethereum causing losses of $766 million, accounting for 54.9% of the total losses for the year.In terms of attack methods, 30 private key leakage incidents caused approximately $627 million in losses, accounting for 44.9% of the total losses, making it the most damaging attack method. Exploitation of contract vulnerabilities was the most frequent attack method, with 99 out of 191 attack incidents stemming from contract vulnerabilities, accounting for 51.8%. Approximately $295 million of stolen funds were recovered throughout the year, accounting for about 21.1%, showing a significant improvement compared to 2022. About $330 million of stolen funds were transferred to mixers, accounting for 23.6% of the total stolen funds.In contrast to the significant decline in on-chain hacker attacks, phishing scams, and project Rug Pull amounts, the off-chain crypto crime data saw a substantial increase in 2023. In 2023, the global crypto industry crime amount reached an astonishing $65.688 billion, up approximately 377% from $13.76 billion in 2022. The top three types of crimes by amount involved were online gambling, money laundering, and fraud.

ChainCatcher news, according to the monitoring by Beosin's EagleEye security risk monitoring, early warning, and blocking platform, in November 2023, the loss amount from various security incidents significantly increased compared to October. The total loss caused by hacker attacks, phishing scams, and Rug Pulls reached 356.53 million USD, approximately 6.9 times the total loss in October. Among these, attack incidents accounted for about 335.63 million USD, phishing scams for about 14.6 million USD, and Rug Pull incidents for about 6.3 million USD.In November, there were two security incidents involving stolen funds exceeding 100 million USD: the cryptocurrency exchange Poloniex was hacked for about 126 million USD; HTX and its related cross-chain bridge HECO Bridge were hacked for about 110 million USD. These two security incidents (both under projects of Sun Yuchen) accounted for 66% of this month's hacker attack losses. This month, phishing incidents increased compared to last month, with multiple single addresses being phished for over 1 million USD. Additionally, this month saw a significant rise in global cryptocurrency crime cases, with several cases involving over 100 million USD, including various types such as fraud and money laundering.

ChainCatcher news, according to the monitoring of the Beosin EagleEye security risk monitoring, early warning, and blocking platform under the blockchain security audit company Beosin, the loss amount of various security incidents in October 2023 significantly decreased compared to September. In October, there were more than 23 typical security incidents, with a total loss amount of 51.61 million USD due to hacker attacks, phishing scams, and Rug Pulls, a decrease of approximately 85.6% compared to September. Among them, attack incidents accounted for about 28.33 million USD, Rug Pull incidents for about 12.02 million USD, and phishing scam incidents for about 11.26 million USD.The major security incidents in October included: the theft of approximately 7 million USD from the Fantom Foundation wallet; the theft of approximately 6 million USD from the Philippine cryptocurrency exchange Coins.ph; and the theft of approximately 4.4 million USD from the password management tool LastPass. All three incidents were due to private key leaks. In October, there were also multiple Rug Pull incidents exceeding one million USD, and users are advised to pay attention to security precautions.

ChainCatcher news, according to Beosin Alert monitoring, the deployer address of Magnate Finance is related to the previous Rug Pull incidents of Solfire and Kokomo Finance. On January 23, 2022, Solfire experienced a Rug Pull that stole 4.8 million dollars; on March 27, 2023, Kokomo Finance experienced a Rug Pull that stole 5.5 million dollars. The scammer has stolen a total of 16.7 million dollars.

ChainCatcher news, according to CoinDesk, a new report from blockchain security company De.Fi shows that in May 2023, losses due to rug pulls and scams exceeded $54 million. This amount is about half of the $101.5 million loss in April, indicating that users and developers have taken better security measures. However, no people or funds were recovered in May, while $2.2 million was recovered in April. Ten BNB Chain ecosystem projects were attacked, resulting in losses of over $37 million, while projects on Ethereum were attacked the least, just slightly above $2 million. Among the top 10 cases, Fintoch suffered the highest loss of $31.7 million due to a smart contract vulnerability. Due to a rug pull, Jimbo Protocol on Arbitrum lost $7.5 million, and Deus Finance on BNB Chain lost $6.2 million due to a smart contract vulnerability.There were 12 rug pull incidents with a total loss of $37 million, 9 vulnerability attacks caused losses of $8.8 million, 5 flash loan attacks caused losses of $8.9 million, and there were 2 exit scams with a loss of $177,000. (source link)