Future

Axie Infinity

Cryptocurrencies have become a permanent fixture in the global financial landscape. Crypto near-instant settlements via blockchain technology has revolutionized payments and value exchange in ways that were only imaginations before now. However, this innovation has come at a cost.&nbsp;
Malicious actors are increasingly targeting crypto projects and platforms to capitalize on the popularity and value of cryptocurrencies and exploit their vulnerabilities for personal gain. Also, they are deploying sophisticated tactics, sometimes combined, to inflict maximum damage on their victims.
<img loading="lazy" decoding="async" class="aligncenter size-full wp-image-12173" src="https://defi-planet.com/wp-content/uploads/2023/12/Image-for-header.jpg" alt="" width="1200" height="677" srcset="https://defi-planet.com/wp-content/uploads/2023/12/Image-for-header.jpg 1200w, https://defi-planet.com/wp-content/uploads/2023/12/Image-for-header-300x169.jpg 300w, https://defi-planet.com/wp-content/uploads/2023/12/Image-for-header-1024x578.jpg 1024w, https://defi-planet.com/wp-content/uploads/2023/12/Image-for-header-768x433.jpg 768w, https://defi-planet.com/wp-content/uploads/2023/12/Image-for-header-640x360.jpg 640w, https://defi-planet.com/wp-content/uploads/2023/12/Image-for-header-600x339.jpg 600w, https://defi-planet.com/wp-content/uploads/2023/12/Image-for-header-750x423.jpg 750w, https://defi-planet.com/wp-content/uploads/2023/12/Image-for-header-1140x643.jpg 1140w" sizes="(max-width: 1200px) 100vw, 1200px">
In 2022, the <a style="color: #0000ff;" href="https://www.theverge.com/2022/7/6/23196713/axie-infinity-ronin-blockchain-hack-phishing-linkedin-job-offer" rel="noopener noreferrer nofollow">Axie Infinity</a> project reportedly lost billions of dollars in <a style="color: #0000ff;" href="https://www.theverge.com/2022/7/6/23196713/axie-infinity-ronin-blockchain-hack-phishing-linkedin-job-offer" rel="noopener noreferrer nofollow">the Ronin Bridge attack</a>, which was perpetuated via a phishing attack on the project’s employees. More recently,&nbsp; <a style="color: #0000ff;" href="https://www.coindesk.com/business/2023/09/11/691k-stolen-as-hackers-take-over-vitalik-buterins-x-account/" rel="noopener noreferrer nofollow">attackers breached Ethereum co-founder Vitalik Buterin’s X (formerly Twitter) account via a sim swap attack </a>and promoted a false NFT. <a style="color: #0000ff;" href="https://www.coindesk.com/business/2023/09/11/691k-stolen-as-hackers-take-over-vitalik-buterins-x-account/" rel="noopener noreferrer nofollow">Victims suffered losses exceeding $691,000</a>.
Crypto exchanges, which serve as central transaction points, are not left out; in fact, they are hotspots for attacks and lucrative targets for hackers. Recently, <a style="color: #0000ff;" href="https://www.cnbc.com/2023/11/23/htx-heco-chain-crypto-hack-115-million-stolen-so-far.html" rel="noopener noreferrer nofollow">HTX (formerly Huobi) was hacked, resulting in the theft of approximately $30 million worth of cryptocurrencies from its exchange wallet</a>, following a similar incident with Poloniex, which suffered a hack draining over $100 million in different cryptocurrencies.
This evolution of crypto hacks has highlighted the urgent need for improved security measures in this dynamic and fast-paced environment. However, to implement adequate security measures, it is crucial to understand the motives behind these actions.
<h2 id="span-style-font-weight-400-crypto-hacks-under-the-microscope-span">Crypto Hacks Under the Microscope</h2>
While there have been instances of “white hat” hackers who aim to spur security fixes by exposing vulnerabilities, most crypto hacks and thefts target personal gain. For example, in November 2023, when <a style="color: #0000ff;" href="https://www.coindesk.com/tech/2023/11/23/kyberswap-dex-hacked-for-48-million-attacker-teases-negotiations/" rel="noopener noreferrer nofollow">Kyberswap, a DEX aggregator, fell victim to exploitation across multiple blockchains, resulting in the theft of $46 million</a>, the hacker demanded complete executive control over the project as a condition for returning the stolen funds. As of December 5, the case is ongoing, and the hacker is dissatisfied with the offered 10% of the $47 million and is not content with the monetary compensation alone.
<figure id="attachment_12174" aria-describedby="caption-attachment-12174" style="width: 100%" class="wp-caption aligncenter"><img loading="lazy" decoding="async" class="size-full wp-image-12174" src="https://defi-planet.com/wp-content/uploads/2023/12/602302ea0903371b2fb71ffa-screen20shot202021-02-0920at204465320pm.png" alt="The 2023 Crypto Crime Report by Chainalysis" width="1560" height="790" srcset="https://defi-planet.com/wp-content/uploads/2023/12/602302ea0903371b2fb71ffa-screen20shot202021-02-0920at204465320pm.png 1560w, https://defi-planet.com/wp-content/uploads/2023/12/602302ea0903371b2fb71ffa-screen20shot202021-02-0920at204465320pm-300x152.png 300w, https://defi-planet.com/wp-content/uploads/2023/12/602302ea0903371b2fb71ffa-screen20shot202021-02-0920at204465320pm-1024x519.png 1024w, https://defi-planet.com/wp-content/uploads/2023/12/602302ea0903371b2fb71ffa-screen20shot202021-02-0920at204465320pm-768x389.png 768w, https://defi-planet.com/wp-content/uploads/2023/12/602302ea0903371b2fb71ffa-screen20shot202021-02-0920at204465320pm-1536x778.png 1536w, https://defi-planet.com/wp-content/uploads/2023/12/602302ea0903371b2fb71ffa-screen20shot202021-02-0920at204465320pm-1320x668.png 1320w, https://defi-planet.com/wp-content/uploads/2023/12/602302ea0903371b2fb71ffa-screen20shot202021-02-0920at204465320pm-600x304.png 600w, https://defi-planet.com/wp-content/uploads/2023/12/602302ea0903371b2fb71ffa-screen20shot202021-02-0920at204465320pm-750x380.png 750w, https://defi-planet.com/wp-content/uploads/2023/12/602302ea0903371b2fb71ffa-screen20shot202021-02-0920at204465320pm-1140x577.png 1140w" sizes="(max-width: 1560px) 100vw, 1560px">
 <figcaption id="caption-attachment-12174" class="wp-caption-text">
 Source: The 2023 Crypto Crime Report by Chainalysis
 </figcaption>
</figure>
Crypto hacks may also involve state interests. The Lazarus group is believed to have <a href="https://www.wsj.com/articles/how-north-koreas-hacker-army-stole-3-billion-in-crypto-funding-nuclear-program-d6fe8782" rel="noopener noreferrer nofollow">stolen approximately $3 billion in crypto assets over the past six years</a>, with around $1.7 billion stolen in 2022 alone. <a style="color: #0000ff;" href="https://www.chainalysis.com/blog/2022-biggest-year-ever-for-crypto-hacking/" rel="noopener noreferrer nofollow">The 2023 Crypto Crime Report by Chainalysis</a> reveals that $1.1 billion of this sum resulted from DeFi protocol hacks. <a style="color: #0000ff;" href="https://coinnounce.com/lazarus-north-korean-hacker-group/#:~:text=Lazarus%20is%20a%20hacking%20group%20sponsored%20by%20the,history%2C%20stealing%20%2481%20million%20from%20Bangladesh%27s%20central%20bank." rel="noopener noreferrer nofollow">The group’s connection with North Korean authorities</a> highlights the possibility of state-sponsored backing for crypto hacks.
<img loading="lazy" decoding="async" class="aligncenter size-full wp-image-12177" src="https://defi-planet.com/wp-content/uploads/2023/12/The-cryptosassets-stolen-from-FTX-1.jpg" alt="The cryptosassets stolen from FTX" width="1920" height="1080" srcset="https://defi-planet.com/wp-content/uploads/2023/12/The-cryptosassets-stolen-from-FTX-1.jpg 1920w, https://defi-planet.com/wp-content/uploads/2023/12/The-cryptosassets-stolen-from-FTX-1-300x169.jpg 300w, https://defi-planet.com/wp-content/uploads/2023/12/The-cryptosassets-stolen-from-FTX-1-1024x576.jpg 1024w, https://defi-planet.com/wp-content/uploads/2023/12/The-cryptosassets-stolen-from-FTX-1-768x432.jpg 768w, https://defi-planet.com/wp-content/uploads/2023/12/The-cryptosassets-stolen-from-FTX-1-1536x864.jpg 1536w, https://defi-planet.com/wp-content/uploads/2023/12/The-cryptosassets-stolen-from-FTX-1-640x360.jpg 640w, https://defi-planet.com/wp-content/uploads/2023/12/The-cryptosassets-stolen-from-FTX-1-1320x743.jpg 1320w, https://defi-planet.com/wp-content/uploads/2023/12/The-cryptosassets-stolen-from-FTX-1-600x338.jpg 600w, https://defi-planet.com/wp-content/uploads/2023/12/The-cryptosassets-stolen-from-FTX-1-750x422.jpg 750w, https://defi-planet.com/wp-content/uploads/2023/12/The-cryptosassets-stolen-from-FTX-1-1140x641.jpg 1140w" sizes="(max-width: 1920px) 100vw, 1920px">
Lastly, FTX was hacked on the day it filed for bankruptcy, November 12, 2022, losing about<a style="color: #0000ff;" href="https://www.cnbc.com/2023/01/17/ftx-says-415-million-of-crypto-was-hacked.html" rel="noopener noreferrer nofollow"> $420 million</a>. The breach was triggered by a swift transfer of the now-bankrupt exchange’s assets to various storage types following its bankruptcy declaration. While the exact motive remains unknown, there are suspicions of insider liquidation. Interestingly, despite the significant loss, this particular hack did not receive adequate attention, maybe due to the strong backlash surrounding FTX’s business fundamentals.
To summarize, there are various motives behind crypto hacks, ranging from personal gain to state and insider interests. Understanding this allows for a better conception of the vulnerabilities in the cryptocurrency landscape and the work required to improve the user and builder experience in this field.
<h2 id="span-style-font-weight-400-how-can-we-mitigate-this-growing-risk-span">How Can We Mitigate This Growing Risk</h2>
Cryptocurrency platforms and projects are responsible for ensuring their primary product/platform code is meticulously designed and security is prioritized in all codes and systems. In an industry that values the ethos of ‘ship fast and break things,’ developers must recognize that swift deployment carries the risk of substantial losses if things go awry. Therefore, underscoring careful design and constructing with security in mind is imperative for establishing a resilient system that safeguards user funds.
Although code audits by entities like Hacken, OpenZeppelin, and PeckShield are commonplace in the crypto space, they haven’t completely thwarted malicious activities due to their treatment as one-time endeavours. Crypto firms must acknowledge the persistent efforts of hackers and should consistently engage reputable third-party audit firms to ensure ongoing scrutiny. Plus, the results of these audits should be shared with the community to divulge issues and their resolutions.
In addition to engaging third-party systems for scrutiny, projects should implement systems actively monitoring transactions for anomalies and suspicious activities, potentially automating responses to reduce reliance on human intervention. Early detection of unusually large transactions or multiple transactions to the same address in a short period serves as an initial sign of an attack. Automating responses based on such events can expedite the mitigation process, limiting potential damage in hours or minutes rather than days or weeks.
Beyond monitoring for potential attacks, it is also essential to have a response plan in place. To create a response system, project developers need to map out possible ways an attack could occur and ways to react in such scenarios. While this is not a fail-safe method, it does the project on some level of preparedness helps to recover faster in the case of a breach. Swift responses, even in the event of fund losses, are essential for preventing further losses and building trust in the protocol’s team.
On another note, users are also responsible for safeguarding their investments. Crypto is meant to be decentralized; thus, using these centralized platforms comes with a huge risk that the users must abide by, even though they may be lucrative for activities like lending and staking.&nbsp; The best advice for crypto users is to use <a style="color: #0000ff;" href="https://defi-planet.com/2022/04/what-are-custodial-and-non-custodial-crypto-wallets/" rel="noopener noreferrer nofollow">non-custodial wallets</a> and <a style="color: #0000ff;" href="https://defi-planet.com/2023/11/top-10-cold-storage-options-for-crypto-investors-in-2023/" rel="noopener noreferrer nofollow">cold storage option</a>s. Though it means their assets are fully in their care, it minimises the avenues through which attackers can access crypto investments.
A crypto investor must also be aware of the tactics used by scammers and the latest trends in their attacks. Understanding how phishing, malware, and clicking on random links can result in investment losses can help make informed decisions when confronted with such situations.
While there’s no universal solution, a combination of recurring audits, active security and operational monitoring, automated incident response systems, and user proactiveness can significantly mitigate this growing risk of asset loss via crypto hacks. Industry-wide adoption of these measures can relegate most of these widespread security incidents to stories of the past.
<h2 id="span-style-font-weight-400-final-thoughts-span">Final Thoughts</h2>
Given the decentralized nature of crypto services, the industry requires a proactive, real-time security approach. Robust security options and operational monitoring of system inter-relationships and the network state are vital for fostering trust and encouraging more people to adopt the technology.&nbsp;
More than just the technological tweaking, a widespread security-first mindset can also act as a deterrent for attackers, as they know that immediate detection awaits them. This form of community-led security monitoring efforts incentivizes vigilance and provides transparency into protocol operational health, ensuring overall ecosystem security.
&nbsp;
Disclaimer: This piece is intended solely for informational purposes and should not be considered trading or investment advice. Nothing herein should be construed as financial, legal, or tax advice. Trading or investing in cryptocurrencies carries a considerable risk of financial loss. Always conduct due diligence.
If you want to read more news articles like this, visit <a style="color: #0000ff;" href="https://defi-planet.com/" rel="noopener noreferrer nofollow">DeFi Planet</a> and follow us on <a style="color: #0000ff;" href="https://twitter.com/PlanetDefi" rel="noopener noreferrer nofollow">Twitter</a>, <a style="color: #0000ff;" href="https://www.linkedin.com/company/defi-planet/" rel="noopener noreferrer nofollow">LinkedIn</a>, <a style="color: #0000ff;" href="https://www.facebook.com/DeFi-Planet-129907662611402" rel="noopener noreferrer nofollow">Facebook</a>, <a style="color: #0000ff;" href="https://www.instagram.com/defi.planet/" rel="noopener noreferrer nofollow">Instagram</a>, and <a href="https://coinmarketcap.com/community/profile/DeFiPlanet/" rel="noopener noreferrer nofollow">CoinMarketCap Community</a>.
The post <a rel="noopener noreferrer nofollow" href="https://defi-planet.com/2023/12/how-to-tackle-crypto-hacks-for-a-safer-blockchain-future/">How to Tackle Crypto Hacks for a Safer Blockchain Future</a> appeared first on <a rel="noopener noreferrer nofollow" href="https://defi-planet.com">DeFi Planet</a>.

How to Tackle Crypto Hacks for a Safer Blockchain Future

Table of Contents

DeFi Planet

Other articles published on Dec 19, 2023

Ark Invest buys $25.7m in Block shares, offloads $28m in GBTC

New Development in Binance Investigation: US Court Approves Agreement Between CFTC and Binance!

Ethereum: Here's How to Be a Millionaire When ETH Hits $3,000

Montenegro Court Nullifies Terra Founder Do Kwon’s Extradition Decision

Shiba Inu (SHIB) Holder Metrics Signal Resilience and Growth Amidst Price Surge

REV3AL Announces Launch of R3AL AUDIT: Their Smart Contract Audit Service Amidst Strong Market De...

Join our free newsletter for daily crypto updates!