CertiK verified on September 30 that a total of roughly $332 million had been lost during the month of September due to different hacks, scams, and exploits.
#CertiKStatsAlert 🚨
— CertiK Alert (@CertiKAlert) September 30, 2023
Combining all the incidents in September we’ve confirmed ~$332M lost to exploits, hacks and scams.
Exit scams were ~$1.9M
Flash loans were ~$0.4M
Exploits were ~$329.8M
See more details below 👇 pic.twitter.com/DMFN9LWU8V
According to CertiK, September 2023 has become the month with the highest number of crypto-related exploits. There were many different kinds of incidents in the crypto space in September. Flash loans caused losses of about $400,000, while exit scams caused losses of about $1.9 million. However, exploits accounted for the largest portion of the month’s total, with losses of about $329.8 million.
The September 23 Mixin Network attack was one noteworthy incident. Due to a breach at its cloud service provider, the decentralized cross-chain transfer protocol based in Hong Kong experienced a significant breach that cost $200 million.
On September 12, CoinEx, a cryptocurrency exchange, suffered a suspected attack after a significant outflow from four of its hot wallets. This was another significant event. The hot wallets lost more than $53.1 million as a result of this breach.
In addition, an attack on stake.com on September 4 cost the company $41 million. Several cryptocurrencies totaling that sum were received by an account during this incident and then dispersed to several addresses.
September Records Several Crypto Incidents, Contributing to Yearly Losses of Over $1.34 Billion
In the crypto world, September also saw a number of other significant events. A $24.2 million loss was caused by a phishing incident, and HTX Global lost $7.9 million. Entrepreneur Mark Cuban also disclosed a $900,000 personal loss for the month.
Losses on digital assets reached $45 million in August, for a total of $997 million so far this year. Notably, with $285.8 million stolen, July was the second-highest month for exploit losses. This raises the total amount of money lost to hacks, scams, and exploits in 2023 to an astounding $1.34 billion.
The total losses from hacks, phishing scams, and rug pulls in Web3 reached $889.26 million in Q3 2023.
— Beosin Alert (@BeosinAlert) September 27, 2023
Losses in Q3 even exceeded the combined sum of the first two quarters ($330 million in Q1 and $333 million in Q2).
Read the full pdf version of Q3 2023 Global Web3 Security… https://t.co/aoPWOrRBeZ pic.twitter.com/5f3uYpG27e
Furthermore, according to a BeosinAlert report, losses in the Web3 industry from phishing scams, rug pulls, and hacks totaled an alarming $889.26 million in Q3 2023. Compared to the combined losses from the first two quarters, which were $330 million in Q1 and $333 million in Q2, this quarterly amount is higher.
Lazarus Group, Linked to North Korea, Blamed for Multiple High-Value Crypto Attacks in 2023
According to reports, the majority of recent crypto-related attacks in 2023, such as the CoinEx exchange hack and the stake.com attack, were carried out by the North Korean hacker collective Lazarus Group. The $620 million theft from Sky Mavis’ Ronin Bridge, the $100 million theft from Harmony’s Horizon Bridge, and the $100 million theft from Atomic Wallet are among the other attacks that have been linked to the group.
The US government estimates that cybercrime and crypto theft provide about half of North Korea’s funding for its missile program. Research into how a country like North Korea is so skilled at cybercrime and crypto-related activities is still ongoing.
Data from Dune Analytics suggests that the group currently holds approximately $45.6 million in crypto assets. Additionally, a report from institutional crypto platform provider 21.co reveals that wallets linked to the Lazarus Group contain around 1,600 Bitcoin, 10,810 Ether (ETH), and 64,490 Binance Coin (BNB), totaling $47 million in cryptocurrency. This data was compiled from a Dune Analytics dashboard tracking 295 wallets identified by the US government as belonging to the Lazarus Group.
Notably, the amount of crypto held by the group has decreased from the $86 million it held on September 6, shortly after the Stake.com hack in which Lazarus was implicated.
Leave a Reply