DeFi

Ronin

Rare

Skyward Finance

Crypto hacks are ongoing and have expanded in Q2, 2024, as the bull market returns. On average, even a small hack may affect a project deeply.&nbsp; 
ImmuneFi, one of the widely used platforms for bug bounties, counted $509M in hacks and hacks during <a href="https://downloads.ctfassets.net/t3wqy70tc3bv/25QlpTkJpMp7GrMm8w8FAU/6b646726535fc1def965ae12fee6a9a0/Immunefi_Crypto_Losses_in_Q2_2024.pdf" rel="nofollow noopener" target="_blank">Q2</a> of 2024. Hacks vary wildly, from hundreds of millions of dollars in value for the largest bridge exploits to rug pulls that have an effect on a personal level.&nbsp; 
After analyzing hacks from the 2021-2023 period, ImmuneFi noted that the repercussions may be very serious for some projects and networks. The period coincides with some of the biggest exploits, including those against bridges on Ronin, BNB Chain, and Wormhole.&nbsp;&nbsp; 
During the 2022 bear market, there were only 134 hacks counted by ImmuneFi, of which a handful were the most high-profile cases in crypto history. In 2023, as the markets showed signs of recovery, a total of 247 exploits happened.&nbsp; 
The exact count of crypto hacks is uncertain, as some researchers also count DeFi rug pulls and personal wallet attacks, while ImmuneFi mostly focuses on attacks against protocols. In its recent research, only about 100 hand-picked exploits were used to derive the trend patterns. 
<h3 id="span-style-font-weight-400-hacks-affect-native-crypto-tokens-for-the-long-term-span">Hacks affect native crypto tokens for the long term</h3> 
On average, a hacked protocol loses more than $16M. If there is a native token, its market price is slashed by up to 52% and stays depressed for up to six months. Some L2 platforms may lose credibility, and DeFi products may disappear, causing them to be unable to recover from the theft. The pattern of losses for the highest-profile hacks is similar to that of the token price chart. 
<figure id="attachment_579943" aria-describedby="caption-attachment-579943" style="width: 100%" class="wp-caption alignnone">
 <img loading="lazy" decoding="async" class="wp-image-579943 size-full" src="https://www.cryptopolitan.com/wp-content/uploads/2024/08/HacksAugust272024.png" alt="Average crypto hack has larger, unexpected costs in the long term" width="1164" height="396" srcset="https://www.cryptopolitan.com/wp-content/uploads/2024/08/HacksAugust272024.png 1164w, https://www.cryptopolitan.com/wp-content/uploads/2024/08/HacksAugust272024-300x102.png 300w, https://www.cryptopolitan.com/wp-content/uploads/2024/08/HacksAugust272024-768x261.png 768w" sizes="(max-width: 1164px) 100vw, 1164px">
 <figcaption id="caption-attachment-579943" class="wp-caption-text">
 Major hacks and their sustained price declines (Source: ImmuneFi).
 </figcaption>
</figure> 
Within the first days of a hack, a protocol token often survives with limited losses. Some token prices even rise, while others limit the loss to 10%. However, within six months, on average, all hacked projects continue to reel, never recovering to pre-hack levels. The <a href="https://stats.immunefi.com/" rel="nofollow noopener" target="_blank">full loss of 52%</a> often arrives at the end of the six-month period.&nbsp; 
The tokens most <a href="https://assets.ctfassets.net/t3wqy70tc3bv/JXPEJELdcOnqTDf1r55oT/ae994320f2a70ec785a7b7eaf41bf89b/Immunefi_Hacks___Token_Prices_Report.pdf" rel="nofollow noopener" target="_blank">affected</a> belong to small-scale protocols, where in the case of Impermax Finance the loss expanded to 99.6% immediately after the hack. Projects like Skyward Finance also erased all value, despite the relatively smaller hack of $3.2M.&nbsp; 
<h3 id="span-style-font-weight-400-smaller-protocols-are-often-destroyed-by-exploits-span">Smaller protocols are often destroyed by exploits</h3> 
Smaller protocols, especially in DeFi, are often vulnerable enough to be completely destroyed. At the same time, big platform tokens like BNB, and even ETH and SOL are largely unaffected by the hacks and exploits on their respective networks. In the case of SOL, even daily token rug pulls are seen as beneficial to the overall network value, and are not considered a threat. 
Due to the exploration period by ImmuneFi, some of the price loss effects may be exacerbated by the bear market. Other factors may also put downward pressure on a token. ImmuneFi’s model suggests a rather predictable price slide after each attack. 
ImmuneFi notes that the repercussions of a hacker attack are often much deeper compared to the actual sums stolen. Rare hacks compromise all assets on a platform, as in the case of the Wormhole or Ronin bridges. Exploits of financial operations are the costliest as they spread contagion across DeFi. ImmuneFi also noted that BNB Chain has lost some of its reputation due to repeated exploits.&nbsp; 
According to ImmuneFi, 35% of all hacks are on Ethereum, though the influence and size of the platform help to avoid reputational damage. BNB Chain, despite its smaller traffic, was the venue for 23% of all exploits due to hosting riskier projects. The biggest hack so far belongs to the Ronin chain, where losses exceeded $600M.&nbsp; 
Hacks are especially damaging to crypto startups with small teams, often coming with accusations of an inside job and reputational damage. Developers may also spend time discovering the hack, slowing down <a href="https://x.com/MitchellAmador/status/1828110931718758690" rel="nofollow" target="_blank">product</a> roadmaps by three to four months. Additionally, hacked addresses are public and often the initial event regains visibility as the hacker launders or mixes the funds.&nbsp; 
Auditing the protocols is also a mixed bag of success. Out of 211 recorded <a href="https://rekt.news/leaderboard/" rel="nofollow noopener" target="_blank">exploits</a> in the past few years, 85 lacked any type of audit. The rest had some type of security on their smart contracts yet still missed a vulnerability. Additionally, <a href="https://x.com/zachxbt/status/1824047425822310580" rel="nofollow" target="_blank">research</a> by ZachXBT shows malicious code may be added after the fact, especially by teams that inadvertently hire a hacker. 
Cryptopolitan reporting by Hristina Vasileva

Average crypto hack has larger, unexpected costs in the long term

Table of Contents

Cryptopolitan_News

Other articles published on Aug 27, 2024

Pawfury ($PAW) Review ⭐⭐⭐⭐⭐: 5 Key Questions Answered!

Cardano Fails to Breach Above the Resistance: Has the Inverse ADA Price Rally Back to $0.3 Begun?

SEC charges brothers in $61 million crypto investment scheme

Donald Trump Announces New Crypto Project "The DeFiant Ones," Aims to Serve Unbanked Communities

New Solana Memecoin Pepe Loves Trump (PEPETRUM) Will Surge 16,000% Ahead of Exchange Listings, As...

Vitalik Buterin Ethereum (ETH) Backing Gives Timely Boost to Price. Solana (SOL) Regains Green St...

Join our free newsletter for daily crypto updates!