security monthly report

OKLink Security Monthly Report: Zero major Rug Pull incidents in November, with total losses across the network amounting to approximately 203 million USD

OKLink released the November 2024 Security Report, which indicates that on-chain security incidents across the network have resulted in a total loss of approximately $203 million. Phishing scams alone accounted for 64.80% of the total losses, amounting to about $131 million, with no significant Rug Pull incidents reported. REKT incidents accounted for 22.06% of the losses, totaling approximately $45 million.On November 13, a user copied an incorrect address from contaminated transaction history, resulting in a loss of $129 million. An hour later, the attacker returned all the assets. On November 15, the v1 liquidity pool contract of the Aptos ecosystem project Thala was attacked due to a security vulnerability, causing a loss of $25.5 million. Subsequently, Thala negotiated with the attacker to recover all user assets through a $300,000 bounty.OKLink reminds everyone to carefully verify the receiving address when performing on-chain operations. Some users have lost over $100 million by copying incorrect addresses from contaminated transaction records. It is essential to double-check the recipient's address when conducting on-chain operations and avoid the habit of directly copying addresses from transaction records or chat logs. Additionally, learn to use Web3 on-chain tools to mitigate risks. OKLink provides tools for on-chain address queries, token authorization checks, and large transfer monitoring, ensuring on-chain security and keeping you informed of market trends, helping you overcome on-chain anxiety.

OKLink Security Monthly Report: In October, the total losses across the network amounted to approximately $181 million, an increase of 38.9% month-on-month

ChainCatcher news, OKLink released the October 2024 security monthly report, stating that the cumulative losses from on-chain security incidents across the network amount to approximately $181 million. Losses from phishing scams account for 23.94% of the total losses, totaling about $43.53 million. REKT incidents account for 35.92% of the losses, totaling about $65.32 million.On October 11, a user on Blast lost 15,079 fwDETH after signing a phishing "permit" signature, worth approximately $35 million. On October 16, multiple multi-signature wallets of Radiant Capital were attacked, with the attacker injecting malware into hardware wallets, compromising several developers' hardware wallets. The attack process was so covert that the front end of the Gnosis Safe multi-signature wallet displayed legitimate transaction data, while the back end was simultaneously signing and executing tampered transactions, ultimately leading to losses of about $58 million.In this month's security incidents, the methods of attack are constantly evolving. OKLink reminds users to be particularly vigilant against phishing attacks involving "permit" and "approve" authorizations on social platforms, as these types of attacks have occurred frequently this month. When performing on-chain operations, it is essential to carefully verify the receiving address and not to easily trust the addresses in transaction records, as they may have been replaced by hackers. For multi-signature wallets, it is crucial to strictly protect the security of private keys, and when handling emails related to crypto assets, carefully verify the sender's identity and the authenticity of the content, and learn to use Web3 on-chain tools to mitigate risks.

OKLink Security Monthly Report: In July, the total losses across the network amounted to approximately $290 million, with losses due to private key leaks accounting for 88.31% of the total losses

ChainCatcher news, OKLink released the July 2024 security report, stating that the cumulative losses from on-chain security incidents across the network amount to approximately $290 million. Losses due to private key leaks account for 88.31% of the total losses, phishing incidents account for 3.03%, REKT incidents account for 7.33%, and RugPull incidents account for 1.31%.On July 18, the private key of the WazirX exchange's multi-signature wallet was leaked, resulting in a loss of approximately $235 million, making it the largest security incident in July. On July 16, the LiFi Protocol cross-chain bridge aggregation protocol was attacked, leading to a loss of about $10 million. The attacker exploited a vulnerability that allowed arbitrary calls to steal assets authorized by users of this contract.In addition, there were a total of 14 incidents of scams and phishing on official social media, resulting in losses of approximately $3.89 million, a decrease of 81.34% compared to June. OKLink reminds users not to disclose your private keys or mnemonic phrases to anyone, not to click on unverified links, and to learn how to use Web3 on-chain tools to mitigate risks. This is an important line of defense in protecting yourself in the Web3 world.

OKLink Security Monthly Report: In June, the total losses across the network amounted to approximately $210 million, with losses from phishing scams decreasing by 75.69% month-on-month

ChainCatcher news, OKLink released the June 2024 security monthly report, which indicates that the cumulative losses from on-chain security incidents across the network amount to approximately $210 million. Among these, phishing incidents account for 9.91% of the losses, REKT incidents account for 20.83%, and RugPull incidents account for 3.53%.The largest security incident in terms of REKT losses occurred on June 10, when UwU Lend was attacked, resulting in losses of approximately $22.7 million. The attacker exploited a vulnerability in the contract related to oracle price manipulation, causing losses of about $19 million, and on June 13, they attacked again by taking advantage of the project's governance operation errors, profiting $3.7 million.In addition, there were a total of 31 incidents of scams and phishing on official social media, primarily concentrated on X, Discord, and various phishing websites. OKLink reminds users not to click on unverified links, not to disclose your private keys or seed phrases to anyone, and to maintain a skeptical attitude towards projects that promise abnormally high returns. Before investing, be sure to conduct thorough research on the project and the team. Security awareness is your strongest shield in the Web3 world.

OKLink May Security Monthly Report: In May, the total losses across the network amounted to approximately $140 million, with losses from phishing incidents exceeding half, accounting for 60.08%

ChainCatcher news, OKLink released the May 2024 security report, which indicates that the total losses from on-chain security incidents across the network in May amount to approximately $140 million. Among these, phishing incidents account for 60.08% of the losses, REKT incidents account for 16.89%, and RugPull incidents account for 1.37%.The largest security incident this month in terms of REKT losses was the attack on Sonne Finance, resulting in losses of approximately $20 million. The reason was that the protocol added a new VELO market through voting, but the project team failed to add initial funds to the VELO market in a timely manner, allowing hackers to exploit a classic rounding issue to manipulate the collateral rate of the VELO market for profit.In addition, there were a total of 27 incidents of scams and phishing attacks on official social media, primarily concentrated on X, Discord, and various phishing websites. The losses from security incidents this month increased by 27.27% compared to the previous month. OKLink reminds users to pay attention to the protection of personal information, never disclose your private keys or mnemonic phrases, and avoid storing them simply through screenshots. Furthermore, when transferring funds, be sure to carefully verify the recipient's address, and confirm its accuracy when copying directly from transaction records or chat logs. Security awareness is the strongest shield in the Web3 world.

OKLink April Security Monthly Report: The total loss across the network in April was approximately $110 million, a decrease of 42.11% compared to March

ChainCatcher news, OKLink released the April 2024 Security Monthly Report, which indicates that the total losses from on-chain security incidents in April across the network amounted to approximately $110 million. Among these, phishing incidents accounted for 7.67% of the losses, REKT incidents accounted for 43.90%, and RugPull incidents accounted for 44.07%.It is reported that the largest security incident resulting in REKT losses this month was the attack on Hedgey Finance, which resulted in losses of approximately $44 million due to a vulnerability in the contract that lacked validation of user inputs, leading to the theft of assets from the contract; the largest security incident resulting in RugPull losses was the RugPull incident at the crypto gambling platform ZKasino, causing losses of approximately $33 million.In addition, there were a total of 32 incidents of scams and phishing attacks on official social media, primarily concentrated on channels such as X, Discord, and various phishing websites. OKLink reminds users to avoid disclosing their private keys or recovery phrases to anyone, and not to store them in screenshot form. Furthermore, it is essential to exercise caution when downloading software to prevent devices from being compromised by malware, which could lead to the leakage of private keys or recovery phrases. Security awareness is the strongest shield in the Web3 world.
ChainCatcher Building the Web3 world with innovators