<p><img src="https://miro.medium.com/v2/resize:fit:700/0*NVa1y_oUC4jjV-U4" /></p><h2 id="header-0"><strong>1. Background</strong></h2><p>According to CoinMarketCap, the global cryptocurrency market cap reached approximately $2.34 trillion by June 30, 2024, highlighting robust growth. However, this development comes with increasingly severe blockchain security challenges. As blockchain applications expand, attackers have become more sophisticated, exploiting system vulnerabilities and causing significant losses.</p><p>This report focuses on two key areas: blockchain ecosystem security and anti-money laundering (AML) measures, offering a comprehensive understanding of current and future security risks in the blockchain sector.</p><h2 id="header-1">2. Blockchain Security Landscape</h2><h3 id="2-1-overview-of-blockchain-security-incidents">2.1 Overview of Blockchain Security Incidents</h3><p>Statistics from the SlowMist Hacked Database show 223 recorded security incidents in the first half of 2024, resulting in $1.43 billion in losses. This marks a 55.43% increase compared to the first half of 2023, which saw 185 incidents with approximately $920 million in losses. (Note: This report does not include personal or unreported losses.)</p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*p8cWZsrUEaYFhDdf" /></p><p>From an ecosystem perspective, Ethereum experienced the highest losses, reaching $400 million. This was followed by Arbitrum with approximately $72.46 million in losses, and Blast with around $70 million. Additionally, BSC had the most security incidents, totaling 57, with losses of about $32.12 million.</p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*j_Yycnfe0sQ3ZK2k" /></p><p>From an industry perspective, DeFi was the most frequently attacked area in the first half of 2024, with 158 incidents accounting for 70.85% of the total and $659 million in losses. This marks a 37.29% increase compared to the first half of 2023, which had 111 incidents and $480 million in losses. Security incidents on trading platforms resulted in $524 million in losses, with the DMM Bitcoin incident alone accounting for $305 million, making it the largest security incident of the first half of 2024.</p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*aam-d4q-SDrgjONJ" /></p><p>Two incidents in the first half of 2024 had losses exceeding $100 million. Below are the top 10 security incidents by loss for this period:</p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*hqAVPYykUiDY9U0G" /></p><p>Contract vulnerabilities were the most common cause of security incidents, with 56 incidents resulting in losses of about $104 million. This was followed by incidents caused by rug pulls, totaling 50 incidents.</p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*4AcKCNQsiPgSXj3z" /></p><h3 id="2-2-phishing-stealing-techniques">2.2 Phishing/Stealing Techniques</h3><p>This section highlights some phishing and stealing techniques disclosed by SlowMist in the first half of 2024:</p><ul><li>Same prefix and suffix phishing</li><li>Malicious extensions</li><li>Malicious Trojan programs</li><li>Malicious bookmark phishing</li><li>Signature authorization phishing</li></ul><h2 id="header-2">3. Anti-Money Laundering Landscape</h2><h3 id="3-1-aml-and-regulatory-developments">3.1 AML and Regulatory Developments</h3><p>This section focuses on significant AML and regulatory developments in the cryptocurrency field:</p><ul><li>Chinese Courts</li><li>Hong Kong</li><li>Singapore</li><li>U.S. Regulation</li><li>European Parliament</li><li>Middle East</li></ul><h3 id="3-2-aml-in-security-incidents">3.2 AML in Security Incidents</h3><p><strong>Frozen Funds Data</strong></p><ul><li>Tether: In the first half of 2024, 374 ETH addresses were blocked, freezing USDT-ERC20 assets on these addresses, making them non-transferable.</li><li>Circle: In the first half of 2024, 28 ETH addresses were blocked, freezing USDC-ERC20 funds on these addresses, making them non-transferable.</li></ul><p>With the strong support of our SlowMist InMist intelligence network part, we assisted our clients, partners, and public hacking incidents in freezing approximately $24.39 million in the first half of 2024.</p><p><strong>Recovered Funds Data</strong></p><p>In the first half of 2024, 16 incidents involved the full or partial recovery of stolen funds. Out of approximately $113 million stolen, nearly $98.64 million was returned, accounting for 87.3% of the total.</p><h3 id="3-3-hacker-group-profiles-and-dynamics">3.3 Hacker Group Profiles and Dynamics</h3><p>This section provides a detailed analysis of the methods used by hacker group Lazarus Group and phishing service Drainers.</p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*5jOCDMKNycb42Ng4" /></p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*qgAfneK2H9j95-a2" /></p><h3 id="3-4-money-laundering-tools">3.4 Money Laundering Tools</h3><p>This section provides a statistical analysis of the fund flow and direction of money laundering tools Tornado Cash and eXch.</p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*gXkGPRC1-VWfG_hV" /></p><p>(Tornado Cash: <a href="https://dune.com/misttrack/first-half-of-2024-stats%29" rel="noopener noreferrer nofollow">https://dune.com/misttrack/first-half-of-2024-stats)</a></p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*waLelcPR7Bot_jxL" /></p><p>(Tornado Cash: <a href="https://dune.com/misttrack/first-half-of-2024-stats%29" rel="noopener noreferrer nofollow">https://dune.com/misttrack/first-half-of-2024-stats)</a></p><h2 id="header-3">4. Conclusion</h2><p>We hope this report provides an in-depth analysis of the current state of security in the blockchain industry, helping readers gain a comprehensive understanding of the security and anti-money laundering landscape. Our aim is to contribute to a safer blockchain ecosystem.</p><p>We would like to thank all our ecosystem partners, including service clients, media partners, Black Handbook contributors, and SlowMist Zone partners. Your support strengthens our resolve to continuously improve and protect the blockchain space. We look forward to ongoing collaboration, working together to bring more light to the blockchain’s dark forest.</p><h3 id="strong-disclaimer-strong"><strong>Disclaimer</strong></h3><p>This report is based on our understanding of the blockchain industry, supported by data from the SlowMist Hacked Database and the MistTrack anti-money laundering tracking system. However, due to the anonymous nature of blockchain, we cannot guarantee the absolute accuracy of all data and cannot be held responsible for any errors, omissions, or losses resulting from the use of this report. Additionally, this report does not constitute any investment advice or serve as a basis for analysis.</p><p>If there are any omissions or deficiencies in this report, we welcome your feedback and corrections.</p><p>To read and share the full version, please visit: <a href="https://www.slowmist.com/report/first-half-of-the-2024-report%28EN%29.pdf" rel="noopener noreferrer nofollow">https://www.slowmist.com/report/first-half-of-the-2024-report(EN).pdf</a></p><h3 id="about-slowmist">About SlowMist</h3><p>At SlowMist, we pride ourselves on being a frontrunner in blockchain security, dedicating years to mastering threat intelligence. Our expertise is grounded in providing comprehensive security audits and advanced anti-money laundering tracking to a diverse clientele. We’ve established a robust network for threat intelligence collaboration, positioning ourselves as a key player in the global blockchain security landscape. We offer tailor-made security solutions that span from identifying threats to implementing effective defense mechanisms. This holistic approach has garnered the trust of numerous leading and recognized projects worldwide, including names like Huobi, OKX, Binance, imToken, Crypto.com, Amber Group, Klaytn, EOS, 1inch, PancakeSwap, TUSD, Alpaca Finance, MultiChain, and Cheers UP. Our mission is to ensure the blockchain ecosystem is not only innovative but also secure and reliable.</p><p>We offers a variety of services that include but are not limited to security audits, threat intelligence, defense deployment, security consultants, and other security-related services. We also offer AML (Anti-money laundering) solutions, Vulpush (Vulnerability monitoring) , SlowMist Hacked (Crypto hack archives), FireWall.x (Smart contract firewall) , Safe Staking and other SaaS products. We have partnerships with domestic and international firms such as Akamai, BitDefender, FireEye, RC², TianJi Partners, IPIP, etc.</p><p>By delivering a comprehensive security solution customized to individual projects, we can identify risks and prevent them from occurring. Our team was able to find and publish several high-risk blockchain security flaws. By doing so, we wish to help spread awareness and raise the security standards in the blockchain ecosystem.</p><p><strong>&#x1f4ac;<a href="https://www.slowmist.com/" rel="noopener noreferrer nofollow">Website</a> &#x1f426;<a href="https://twitter.com/SlowMist_Team" rel="noopener noreferrer nofollow">Twitter </a>⌨️<a href="https://github.com/slowmist/" rel="noopener noreferrer nofollow">GitHub</a></strong></p>

SlowMist | 2024 Mid-Year Blockchain Security and Anti-Money Laundering Report

Table of Contents

SlowMist

Other articles published on Jul 5, 2024

Will Bitcoin Stabilize After Summer? Gazmararian Weighs In

veCAKE Holders Eligible for PancakeSwap’s ZK Token Airdrop

Singapore’s security agency establishes guidelines for safe AI

Bitcoin Below $58,000: Are Whale Movements and Mt. Gox the Cause?

Liquidations, Government Dumps, and Mt. Gox Transfers: How Much More?

Major Cryptos Hit Yearly Lows As Bearish Condition Intensifies

Join our free newsletter for daily crypto updates!