ChainCatcher news, according to DL News, Cozy Finance's latest research shows that less than 50% of DeFi projects that have been hacked survive. Cozy surveyed 64 projects that had at least $1 million in user deposits at the time of the hack, and found that 39% of the projects (i.e., 25 projects) successfully survived.The report points out that many DeFi founders are pessimistic about hacking attacks. Although they strive to implement the best security measures to prevent attacks, they often believe that once hacked, the project may come to an end. However, the research indicates that the likelihood of project survival is greater than expected.

According to ChainCatcher, a report from the security firm stated that in October 2024, there were a total of 20 hacker attacks in the cryptocurrency sector, resulting in losses of approximately $88.47 million. The top 5 hacker attacks include:RadiantCapital: $53 million (bridged to Ethereum);U.S. government seized funds: $20 million (returned);Eigenlayer: $5.7 million (money laundering transferred to HitBTC, Bybit);TapiocaFoundation: $4.7 million (BNBChain);SUNRAYFINANCE: $2.86 million (BNBChain).

ChainCatcher news, according to CoinDesk, a dozen cryptocurrency companies unknowingly employed IT workers from the Democratic People's Republic of Korea (DPRK), including established blockchain projects such as Injective, ZeroLend, Fantom, Sushi, Yearn Finance, and Cosmos Hub. These workers used fake IDs, successfully passed interviews, cleared background checks, and provided real work experience.In the United States and other countries that sanction North Korea, hiring North Korean workers is illegal, and multiple companies that employed North Korean IT staff subsequently suffered hacking attacks. Noted blockchain developer Zaki Manian stated, "Everyone is trying to filter these people out." He inadvertently hired two North Korean IT workers to help develop the Cosmos Hub blockchain in 2021.U.S. authorities have recently intensified warnings that North Korean IT workers are infiltrating tech companies and using the proceeds to fund nuclear weapons programs. An investigation revealed that North Korean job seekers are particularly aggressive and frequent in targeting cryptocurrency companies—successfully passing interviews, clearing background checks, and even showcasing impressive code contribution histories on the open-source software repository GitHub.

ChainCatcher news, according to Beosin Alert monitoring and early warning, as of September 25, the total loss in the Web3 sector due to hacker attacks, phishing scams, and project Rug Pulls in Q3 2024 has reached $730 million. Among them, there were 23 major attack incidents, with a total loss of approximately $430 million; 3 project Rug Pull incidents, with a total loss of about $4.24 million; and total losses from phishing scams amounting to approximately $295 million.In terms of the types of attacked projects, the highest losses were incurred by CEX, with 3 attacks on CEX causing approximately $297 million in losses, accounting for about 40.6% of all attack losses.In terms of losses by chain, Ethereum remains the chain with the highest loss amount and the most attack incidents. 21 attacks and phishing incidents on Ethereum caused losses of $348 million, accounting for about 47.6% of the total losses.Regarding attack methods, there were 5 private key leakage incidents in Q3, resulting in losses of $305 million, accounting for about 41.7% of the total attack losses, making it the most prevalent type of attack.In terms of the flow of funds, only about $16.9 million of the stolen funds have been frozen or recovered. The vast majority (approximately 78.9%) of the stolen funds are still stored in the attackers' on-chain addresses.Compared to the same period in 2023, the total losses due to hacker attacks, phishing scams, and project Rug Pulls in Q3 2024 have slightly decreased to $730 million (the figure for Q3 2023 was $889 million). Factors such as the decline in cryptocurrency prices in Q3 2024 have had some impact on the reduction of the total amount, but overall, the situation in the Web3 security sector remains grim. Among the more than twenty attack incidents in Q3, 18 were still due to contract vulnerabilities, suggesting that project parties should seek professional security companies for audits before going live.

ChainCatcher news, according to CoinDesk, a report from blockchain security company Halborn shows that although the amount stolen in 2023 has decreased, decentralized finance (DeFi) hacking remains a major threat to the industry.The report summarizes the 100 largest DeFi hacking incidents that occurred between 2016 and 2023, with a total amount reaching $7.4 billion, most of which took place on Ethereum, Binance Smart Chain, and Polygon. While on-chain hacks (including smart contract exploits, price manipulation, and governance attacks) are the most common, off-chain attacks such as private key theft account for 29% of total attacks and 34.6% of stolen funds. In 2023, off-chain attacks accounted for 56.5% of total attacks and 57.5% of the stolen amount.The report adds that only 21% of the hacked protocols used multi-signature wallets. Most on-chain attacks occurred on unaudited protocols, and the lack of proper input validation or confirmation in protocols is a major reason for losses due to smart contract exploits. Cross-chain bridges remain a primary attack vector for malicious actors.

ChainCatcher news, according to monitoring by blockchain security audit company Beosin Alert, shows that in July 2024, the loss amount from various security incidents significantly increased compared to June. In July 2024, there were over 20 typical security incidents, with total losses from hacker attacks, phishing scams, and Rug Pulls reaching $286 million, an increase of approximately 56.3% compared to June.Among these, attack incidents accounted for about $271 million, an increase of approximately 92.2%; phishing scam incidents accounted for about $12.1 million, a decrease of approximately 67.6%; and Rug Pull incidents accounted for about $3.58 million, a decrease of approximately 13.1%.The largest hacking incident in July came from the Indian exchange WazirX, with losses of about $230 million, accounting for 85% of the total amount from attack incidents that month. The second largest attack incident was LI.FI, which lost about $11.6 million due to a contract vulnerability. This month also saw multiple phishing scams and rug pull incidents exceeding one million dollars, and users need to remain vigilant.

ChainCatcher news, according to The Block, based on the latest report from the Web3 vulnerability bounty and security service platform Immunefi, the crypto industry has suffered losses of over $1.19 billion this year to date due to 149 hacking and fraud incidents.The total amount so far this year has increased by 16.3% compared to the same period in 2023, when the losses were $1.02 billion.

ChainCatcher news, the decentralized AI network Bittensor officially announced that its community participants experienced a serious security attack on July 2. The Bittensor Foundation has taken urgent action to block further fund outflows and has launched an in-depth investigation into the attack.The attack originated from a malicious program disguised as a legitimate Bittensor package in the PyPi package manager version 6.12.2. When users downloaded this package and decrypted their cold wallet keys, the decrypted bytecode was sent to the attacker's remote server, resulting in stolen funds. The users primarily affected were those who downloaded the Bittensor PyPi package and performed transactions, staking, delegation, and other operations between May 22 and 29. The Bittensor Foundation has removed the malicious package from PyPi and conducted a comprehensive review of the code, finding no other vulnerabilities at this time.To mitigate losses, the Bittensor Foundation has placed validation nodes behind a firewall and activated a security mode on Subtensor. The Bittensor blockchain has paused all transactions and will not resume normal operations until the vulnerabilities are fixed. The foundation is working with trading platforms to attempt to recover the stolen funds.The Bittensor Foundation stated that it will learn from this incident, improve the package verification process, increase the frequency of external audits, and enhance security standards and monitoring levels. The foundation urges users to transfer their funds to new wallets as soon as possible and to upgrade to the latest version of the Bittensor package.

According to ChainCatcher news, monitoring and early warning from Beosin Alert shows that in the first half of 2024, the total losses in the Web3 field due to hacker attacks, phishing scams, and project rug pulls reached 1.54 billion USD. Among them, there were 78 major attack incidents, with 43 stemming from contract vulnerabilities, resulting in total losses of approximately 1.193 billion USD; there were 64 project rug pull incidents, with total losses of about 119 million USD; and phishing scams accounted for total losses of approximately 232 million USD.In the first half of 2024, there were 3 security incidents with losses exceeding 100 million USD. The total loss in May reached 450 million USD, making it the month with the highest losses in the first half of 2024.In terms of the types of attacked projects, the highest losses were from CEX, with 4 attacks on CEX causing approximately 392 million USD in losses, accounting for 32.8% of all attack losses.Regarding losses by chain, Ethereum remains the chain with the highest losses and the most attack incidents. 32 attack incidents on Ethereum resulted in losses of 470 million USD, accounting for 39.4% of the total losses.In terms of attack methods, there were a total of 22 private key leakage incidents in the first half of the year, causing losses of 894 million USD, which accounted for about 75% of the total attack losses, making it the most prevalent attack type.In terms of fund flow, approximately 470 million USD (39.3%) of the stolen funds were frozen or recovered. This proportion has significantly increased compared to 2023.

ChainCatcher news, according to Certik data, in June, the Web3 sector lost approximately $198.3 million due to exploits, hacking attacks, and scams, making it the second highest monthly loss in 2024. Additionally, $1.3 million was refunded in security incidents.Among these, exit scams accounted for losses of about $4.8 million, flash loan losses were approximately $23.5 million, and exploit losses were around $171.3 million.

ChainCatcher news, according to monitoring by blockchain security audit company Beosin Alert, the total loss from various security incidents in May 2024 increased compared to April. In May 2024, there were over 27 typical security incidents, with a total loss of 154 million USD due to hacker attacks, phishing scams, and Rug Pulls, an increase of about 52.5% compared to April. Among them, attack incidents accounted for about 54.51 million USD, an increase of about 3.7%; phishing scam incidents accounted for about 97.4 million USD, an increase of about 754%; and Rug Pull incidents accounted for about 2.04 million USD, a decrease of about 94.5%.This month, there were 2 hacker attack incidents with losses exceeding 10 million USD: the gaming platform Gala Games lost 22.5 million USD due to private key leakage, and Sonne Finance lost 20 million USD due to a contract vulnerability. This month saw a significant increase in phishing scams, with multiple phishing incidents resulting in losses exceeding 1 million USD, including one address poisoning scam with a loss of 72 million USD. The number of crypto crime cases continued to rise this month, with several cases involving amounts exceeding 100 million USD.

ChainCatcher news, according to The Block, Bitcoin non-profit organization Brink co-founder Mike Schmidt stated that the FBI issued a subpoena requesting personal information of attendees from the 2022 Bitcoin Core developers' activities. It is alleged that the FBI's subpoena is related to Bitcoin developer Luke Dashjr's claim that approximately 216 BTC were stolen from him during a hacking incident. Mike stated that he is unaware of any details regarding the investigation and does not know whether the subpoena targets specific suspects or is for general information collected during the investigation.It is reported that Mike has provided the FBI with the attendees' first and last names, GitHub usernames, and email addresses. Mike also mentioned that the FBI requested him not to disclose the subpoena for a year; however, the non-disclosure period for the subpoena recently expired.Bitcoin Core developer Luke Dashjr claimed that he lost over 200 BTC due to a Pretty Good Privacy (PGP) key leak incident on December 31, 2022, with estimated losses at around $3.3 million at that time. At current market value, 200 BTC is worth over $14 million.

ChainCatcher news, according to a report released by Immunefi, as of now, the cryptocurrency industry has lost $336.3 million in the first quarter due to hacks and scams. DeFi remains the primary target for hackers, accounting for 100% of the vulnerabilities identified by Immunefi in the first quarter, while centralized (CeFi) platforms reported zero vulnerabilities. Most of the losses were caused by just two projects, namely $81.7 million from Orbit Bridge and $62 million from Munchables.However, the number of attacks decreased from 74 in the first quarter of 2023 to 61 in the first quarter of this year, a month-on-month decrease of 17.6%. Compared to the $437.5 million loss in the same period last year, the $336.3 million loss recorded this year represents a 23.1% decrease.

ChainCatcher news, according to monitoring by Shield, hackers launched 21 attacks in February 2024, stealing approximately $360 million, an increase of 97.6% compared to January 2024. Additionally, about 1.8% of the stolen funds have been returned, totaling approximately $6.7 million.

ChainCatcher news, according to monitoring by the blockchain security audit company Beosin's KYT anti-money laundering analysis platform, the loss amount from various security incidents significantly increased in February 2024 compared to January. In February 2024, there were more than 19 typical security incidents, with total losses due to hacker attacks, phishing scams, and Rug Pulls reaching $422 million, an increase of about 102% compared to January. Among these, attack incidents accounted for approximately $347 million, an increase of about 110%; phishing scam incidents were about $16.08 million, a decrease of about 52%; and Rug Pull incidents were approximately $59.38 million, an increase of about 440%.The largest attack incident in February was the attack on the crypto gaming platform PlayDapp due to private key leakage, resulting in a loss of $290 million, making it the highest loss security incident of the year so far. Other incidents with losses exceeding ten million dollars include: the centralized exchange FixedFloat being attacked, resulting in a loss of $26.1 million; Axie Infinity co-founder Jihoz.ron’s personal address losing about $10 million due to private key leakage. Additionally, the Hong Kong exchange Bitforex is suspected of experiencing a Rug Pull, with $56.5 million anomalously flowing out of its hot wallet.