Invezz

October sees 20 crypto hacks with $88.4 million in losses, reports PeckShield

October sees 20 crypto hacks with $88.4 million in losses, reports PeckShield
Diya Poddar
Nov 02, 2024, 06:45 AM
  • Phishing scams accounted for $43.5 million in damages, with fwDETH tokens targeted.
  • Rug pulls cost investors $45.7 million, impacting lesser-known crypto projects.
  • US authorities successfully recovered $20 million in stolen funds after a major breach.

October saw continued challenges in the cryptocurrency sector, with hacker attacks and phishing scams resulting in $181 million in losses, according to a recent report by blockchain analytics firm PeckShield.

Although a drop from the $120 million seen in September, these incidents underscore ongoing security issues in digital assets.

Data indicates around two dozen incidents occurred, including large-scale breaches and scams.

Radiant Capital breach

The most significant breach in October involved Radiant Capital, which suffered $53 million in losses from multi-signature wallets connected to the Ethereum network.

Multi-signature wallets, which require multiple private keys to authorize transactions, were exploited in this case, exposing vulnerabilities that allowed hackers access to Radiant Capital’s assets.

This breach marks a considerable hit for the decentralized finance (DeFi) project, raising questions about security practices across DeFi platforms.

In a rare case of recovery, US authorities seized $20 million of illicit funds, returning the stolen assets to their rightful owners.

The seizure signals growing cooperation between law enforcement agencies and blockchain analytics firms, potentially increasing the chances of recovering stolen assets in future cases.

Rug pulls, and phishing scams contribute to October losses

Data from OKLink highlights that phishing scams remain a major threat, accounting for $43.5 million in losses.

Notably, $35 million in fwDETH (a token used on decentralized exchanges) was lost due to a phishing attack involving a “permit” signature, a fraudulent method used to bypass user consent requirements.

These scams continue to highlight the need for more robust user education and awareness in the cryptocurrency ecosystem.

Another significant contributor to October’s losses was private key leakage, which accounted for $7.2 million.

These incidents underscore a core vulnerability in the crypto landscape, as stolen private keys grant hackers unrestricted access to wallets.

Enhanced security measures, like hardware wallets and secure key management, are increasingly important for mitigating these risks.

“Rug pulls,” scams where developers abandon projects and abscond with investors’ funds, accounted for $45.7 million in October.

These incidents typically involve new tokens or DeFi projects that lack regulatory oversight.

The persistence of rug pulls signals a need for increased transparency and due diligence by investors before engaging with new crypto ventures.

While October’s $181 million in losses is substantial, it represents a 26% decrease from the $120 million recorded in September, when the crypto sector faced over 20 incidents.

The data suggests a partial improvement, with fewer high-profile cases compared to August, where total losses exceeded $300 million across fewer incidents.

Experts caution that this decline does not necessarily signal improved security across the board, as vulnerabilities remain in DeFi protocols, exchange security, and user awareness.