2024

Bitcoin

when

While the first quarter of 2024 seemed “relatively typical” when it comes to hacks and exploits, Ronghui Gu, co-founder of blockchain security firm CertiK, said the complexity of private key compromises and phishing attacks raises concerns.
Gu told Cointelegraph that among the incidents in Q1, losses attributed to private key compromises increased significantly compared with the first quarter of 2023. 
In its quarterly&nbsp;“Hack3d” security report, CertiK highlighted that losses from this attack reached $239 million despite there being only 26 incidents. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-04/10d28df3-cdc9-444e-b9ff-ad51b81a4e97.jpg" alt="" title="">
 <figcaption style="text-align: center;">
 Chart showing the number of incidents and amount lost in Q1 2024. Source: CertiK
 </figcaption>
</figure>
Compared with the same time period in 2023, when losses were only around $18.8 million, Q1 2024 recorded a 1,171% increase in losses caused by compromised private keys. 
Along with the 26 private key compromises, the overall number of incidents attributed to phishing attacks reached 83, with total losses reaching $64 million. Gu said that the complexity of such attacks also raises concerns:
<blockquote data-ct-non-breakable="true">
 “The sophistication and success of phishing attacks have also reached alarming levels, with 18 phishing incidents, each causing over $1 million in losses.”
</blockquote>
Despite these two attack vectors being a constant risk for the Web3 space, Gu believes the crypto community is not entirely helpless. He said implementing multisig wallets and multiparty computation can greatly enhance security: 
<blockquote data-ct-non-breakable="true">
 “Private keys are the keystones of security in the blockchain world. Multisig wallets and multiparty computation can enhance security by distributing authorization power, thus mitigating the risk of single-point failures and unauthorized access.” 
</blockquote>
Gu explained that these techniques ensure no single entity holds complete control over the assets. This means that attackers must attack multiple parties to gain access to a project’s private keys. 
Related: <a href="https://cointelegraph.com/news/nearly-100m-recovered-march-hacks-peckshield">Nearly $100M recovered from hacks in March — PeckShield</a>
While the threats seem like a Web3 problem, Gu believes that countering targeted and advanced attacks requires incorporating both Web2 and Web3 security practices. 
This includes properly encrypting internal systems, implementing multifactor authentication and conducting regular security audits to address potential vulnerabilities. 
Gu also noted that educating employees is necessary to combat security attacks. “Educating team members on the latest phishing and social engineering tactics can significantly reduce the risk of compromises.” 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-04/842420aa-9350-42f9-8fd7-bdc0b7babc62.jpg" alt="" title="">
 <figcaption style="text-align: center;">
 Losses from Web3 security incidents by quarter. Source: CertiK&nbsp;
 </figcaption>
</figure>
When asked if the trends observed in the first quarter would carry over to the rest of the year, Gu predicted that a continuation is reasonable because of the recent market upswing. He explained that as the market grows, the incentive for cybercriminals to exploit vulnerabilities also increases. 
“This, combined with the escalating sophistication of attacks, suggests that we should not only expect the continuation of serious security incidents but also proactively prepare for the emergence of new, innovative attack vectors,” he added. 
Magazine: <a href="https://cointelegraph.com/magazine/ava-labs-web3-gaming-sucks-bitcoin-miner-fumb-games-web3-gamer/">‘Web3 Gaming sucks’ says Ava, 2M Bitcoin Miner players make 13c: Web3 Gamer</a>

Crypto phishing attacks reached ‘alarming levels’ — CertiK co-founder

Cointelegraph

Other articles published on Apr 3, 2024

The Analyst Who Was Successful in His Predictions Announced: "These Events Are More Important Tha...

Can BTC Hit $100,000 Before Bitcoin Halving?

JUST IN: Coinbase Announces It Will List a New Altcoin in Futures!

Bitcoin Price Drop Triggers Altcoin Market Decline

Dogecoin Price Prediction: Top Analyst Sees Parabolic 5,900% Pump For DOGE As The DOGE20 ICO Offe...

'Bitcoin Is King': Peter Brandt Unveils Epic New BTC Prediction

Join our free newsletter for daily crypto updates!