DeFi

Axie Infinity

Crypto users and projects must keep their heads on a swivel going into the next bull market, watching out for untrustworthy exchanges, unsecured decentralized finance (DeFi) protocols and ever-evolving phishing scams.&nbsp;
In January, hackers launched 30 attacks and made off with over $182.5 million in stolen funds, marking a year-on-year increase of 771% from January 2023 and a nearly 84% <a href="https://twitter.com/PeckShieldAlert/status/1741852326305100283" target="_blank" rel="noopener nofollow">bump</a> from December, <a href="https://twitter.com/PeckShieldAlert/status/1752942242766242149" target="_blank" rel="noopener nofollow">according</a> to data from PeckShield.
February also shaped up to be a record month for exploiters with over $380 million stolen — over double that of January. At least $290 million alone was <a href="https://cointelegraph.com/news/playdapp-exploit-continues-4th-day-losses-reaching-290-million">pilfered from PlayDapp</a>, along with $26 million <a href="https://cointelegraph.com/news/fixed-float-confirms-26m-exploit-bitcoin-ether">from FixedFloat</a> and <a href="https://cointelegraph.com/news/axie-infinity-co-founder-wallet-hack">$9.7 million from</a> Axie Infinity co-founder Jeff Zirlin.
<blockquote class="twitter-tweet">
 <a href="https://twitter.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw">#PeckShieldAlert</a> Hackers stole ~$360.83m across over 21 attacks in February 2024, marking a MoM increase of 97.6% compared to January 2024. Additionally, ~1.8% of the stolen funds have been returned, totaling ~$6.7 million <a href="https://t.co/MCykceNun5">pic.twitter.com/MCykceNun5</a>— PeckShieldAlert (@PeckShieldAlert) <a href="https://twitter.com/PeckShieldAlert/status/1763551699015491666?ref_src=twsrc%5Etfw">March 1, 2024</a>
</blockquote> 
“Education is the first line of defense in keeping crypto safe,” Chainalysis cybercrime research lead Eric Jardine told Cointelegraph. “For users, awareness is always important.”
Jardine said crypto protocols typically have wide-open transparency due to their open-source development. Great for users wanting to audit the code but also opens opportunities for bad actors who can “analyze the scripts for vulnerabilities and plan exploits well in advance.”
“Research about the platforms and DeFi protocols before engaging with them,” Jardine said. “Understand their security features and strategy, and look for updates from the platform on how they are enhancing these.”
<h2 data-ct-non-breakable="true" id="check-then-check-again">Check, then check again</h2>
In 2023, <a href="https://cointelegraph.com/news/crypto-phishing-scams-2023-300-million-dollars-324k-victims-report">over 324,000 crypto</a> users were hit by phishing scams, with around $295 million lost, Scam Sniffer analysis shows.
The anti-scam platform told Cointelegraph that “social media has the most scam links,” noting that malicious websites are often linked in advertisements on these platforms.
Beosin security researcher Pan Tao warned that phishing attacks advertised on X disguised as Ethereum staking and token airdrops “have been frequent and effective recently.”
On Feb. 25, phishing attackers <a href="https://cointelegraph.com/news/microstrategy-x-account-hacked-phishing-scam">compromised the X account</a>&nbsp;of&nbsp;MicroStrategy and stole at least $440,000, draining wallets in a scam token airdrop.
The attacker <a href="https://twitter.com/WalkerAmerica/status/1761909218565898347" target="_blank" rel="noopener nofollow">reportedly</a> directed users to a look-alike website, microsfrategy.com.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-03/bc6fd01d-bc06-4bd9-909c-14f7f7329a54.jpeg" alt="" title="">
 <figcaption style="text-align: center;">
 A screenshot of the faked MicroStrategy website replaced the T in the firm’s name with an F. Source: X
 </figcaption>
</figure>
Scam Sniffer said users should always verify that the website URL is correct from multiple sources and understand what a contract does before they sign a transaction.
Meanwhile, Tao warned that drainer-as-a-service tools — such as those used in the fake airdrop — have become a “mature and convenient phishing tool,” and attackers are known to advertise scams on Google and X.
<h2 data-ct-non-breakable="true" id="having-safe-cex">Having safe CEX</h2>
Beosin’s Tao said that many new crypto users will buy their first digital assets on a centralized exchange (<a href="https://cointelegraph.com/learn/centralized-vs-decentralized-crypto-exchanges">CEX</a>) owned and operated by one entity.
At the same time, there have been “several CEX scams,” including the <a href="https://cointelegraph.com/news/sbf-sentencing-letters-highlight-efforts-recover-ftx-funds">theft of customer funds</a> by FTX and&nbsp;<a href="https://cointelegraph.com/news/jpex-scandal-taiwan-suspect-arrest">the alleged fraud by JPEX</a> on its users.
Tao suggested the criteria for choosing a secure, centralized exchange should start with ensuring it’s licensed “or at least publishes its proof of reserves periodically.”
It also must have “no withdrawal issues or high withdrawal fees” along with “timely customer support and clear responses.”
<h2 data-ct-non-breakable="true" id="guard-those-private-keys">Guard those private keys</h2>
DeFi protocols should ensure their security efforts cover vulnerabilities on and off the blockchain, Jardine said.
On-chain vulnerabilities — such as in smart contracts — “drove the majority of DeFi hacking activity in 2023,” Jardine noted.&nbsp;“This changed through the year with compromised private keys driving a larger share of hacks in the second half of the year,” he added.
Related: <a href="https://cointelegraph.com/news/zk-proofs-security-challenges-for-developers">ZK-proofs introduce security challenges for developers</a>
<blockquote data-ct-non-breakable="true">
 “The key takeaway for DeFi protocols is that their security efforts should cover more than just on-chain vulnerabilities and smart contracts, especially amid the rise in off-chain vulnerabilities.”
</blockquote>
Projects can create systems to monitor on-chain activity for potential vulnerabilities, Jardine suggested.
He noted some firms offer products that can alert and react to cyberattacks, helping secure third-party integrations and “communicate with customers who might be at risk.”
Jardine said Chainalysis has seen improved DeFi protocol security practices and highlighted losses from protocol hacks dropped about 64% year-on-year to $1.1 billion for 2023.
Magazine: <a href="https://cointelegraph.com/magazine/bitcoin-ogs-experts-how-to-protect-your-crypto/">How to protect your crypto in a volatile market — Bitcoin OGs and experts weigh in</a>

4 tips that’ll keep your crypto safe from hackers this bull market

Table of Contents

Cointelegraph

Other articles published on Mar 3, 2024

Dogecoin (DOGE) Bullish Run Ended Abruptly: Reasons

Breaking: BlackRock Bitcoin ETF Overtakes the Largest Silver Trust with $10B AuM

Botany Manor Puzzle Game Joins Xbox Game Pass Lineup

Solana Trader Turns in 33,000% Profit on SOL With Dogwifhat (WIF) Epic Rally: Details

Bitcoin dan Ethereum Melonjak 20 Persen, Token Furrever (FURR) Pilihan Menarik Tahun 2024?

Expert Crypto Analyst Peter Brandt Offers March Market Insights

Join our free newsletter for daily crypto updates!