Cryptocurrency

Wolf of Wall Street

Euler

Exactly Protocol

<div class="finbold">
 <p class="paragraph">2023 marked a pivotal moment in the security dynamics of Web3, highlighting advancements in resilience alongside enduring challenges.&nbsp;</p>
 <div></div>
 <p class="paragraph">Despite this, the Web3 sector continued to experience cyber<a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>s, resulting in losses surpassing $1.7 <a rel="noopener noreferrer nofollow" title="billion" href="https://thebittimes.com/tag/billion.html">billion</a> in 2023, encompassing around 453 <a rel="noopener noreferrer nofollow" title="report" href="https://thebittimes.com/tag/report.html">report</a>ed incidents, according to a <a rel="noopener noreferrer nofollow" title="report" href="https://thebittimes.com/tag/report.html">report</a> from <em>Salus</em> shared with Finbold on January 2.&nbsp;</p>
 <p class="paragraph">These incidents, despite being less than the figures recorded in 2022, revealed diverse threats, emphasizing the imperative for ongoing vigilance within the Web3 community.</p>
 <h2 class="wp-block-heading" id="h-decline-in-losses-but-bigger-individual-ones">Decline in losses, but bigger individual ones</h2>
 <p class="paragraph">Although 2023 saw significantly reduced overall losses, prominent exploits garnered attention. September witnessed the highest loss, with $360 million, followed by a $350 million loss in November and $303 million in July, highlighting ongoing threats against bridges and DeFi protocols.</p>
 <div class="not-prose relative overflow-auto scrollbar-hide mb-8 mt-8">
  <div class="relative w-full flex gap-6 snap-x snap-mandatory overflow-x-auto">
   <div class="max-w-[300px]">
    <div class="py-0 first:pt-0 last:pb-0">
     <div class="flex gap-x-4">
      <div class="shrink-0  w-24"><img data-src="https://cdn.thebittimes.com/images/2024/01/02/0e3fd775a86cfc0641a00e855c589df0.webp" alt class=" w-full rounded-md lazy">
      </div>
      <div>
       Cryptocurrency 
       <h3 class="font-bold leading-6 " id="machine-learning-algorithm-sets-xrp-price-for-january-31-2024">Machine learning algorithm sets XRP price for January 31, 2024</h3>
       <div class="sm:flex gap-x-3 mt-2">
       </div>
      </div>
     </div>
    </div>
   </div>
   <div class="max-w-[300px]">
    <div class="py-0 first:pt-0 last:pb-0">
     <div class="flex gap-x-4">
      <div class="shrink-0  w-24"><img data-src="https://cdn.thebittimes.com/images/2024/01/02/dd8de8492aa538900e5312b391be18ad.webp" alt class=" w-full rounded-md lazy">
      </div>
      <div>
       Stocks 
       <h3 class="font-bold leading-6 " id="revealed-elon-musk-s-investment-portfolio-in-2023">Revealed: Elon Musk's investment portfolio in 2023</h3>
       <div class="sm:flex gap-x-3 mt-2">
       </div>
      </div>
     </div>
    </div>
   </div>
   <div class="max-w-[300px]">
    <div class="py-0 first:pt-0 last:pb-0">
     <div class="flex gap-x-4">
      <div class="shrink-0  w-24"><img data-src="https://cdn.thebittimes.com/images/2024/01/02/58f4acf5e34446fd0cc4942e06547ceb.webp" alt class=" w-full rounded-md lazy">
      </div>
      <div>
       Stocks 
       <h3 class="font-bold leading-6 " id="wolf-of-wall-street-j-belfort-s-market-predictions-for-2024">Wolf of Wall Street J. Belfort’s market predictions for 2024</h3>
       <div class="sm:flex gap-x-3 mt-2">
       </div>
      </div>
     </div>
    </div>
   </div>
   <div class="max-w-[300px]">
    <div class="py-0 first:pt-0 last:pb-0">
     <div class="flex gap-x-4">
      <div class="shrink-0  w-24"><img data-src="https://cdn.thebittimes.com/images/2024/01/02/630c05d78db46c3413563f89568e726f.webp" alt class=" w-full rounded-md lazy">
      </div>
      <div>
       Cryptocurrency 
       <h3 class="font-bold leading-6 " id="expert-bitcoin-s-parabolic-rally-could-begin-if-this-resistance-is-breached">Expert: Bitcoin's parabolic rally could begin if this resistance is breached</h3>
       <div class="sm:flex gap-x-3 mt-2">
       </div>
      </div>
     </div>
    </div>
   </div>
   <div class="max-w-[300px]">
    <div class="py-0 first:pt-0 last:pb-0">
     <div class="flex gap-x-4">
      <div class="shrink-0  w-24"><img data-src="https://cdn.thebittimes.com/images/2024/01/02/fdd90fd843a9510255c95187b3717d4b.webp" alt class=" w-full rounded-md lazy">
      </div>
      <div>
       Cryptocurrency 
       <h3 class="font-bold leading-6 " id="top-3-cryptocurrencies-of-2023-with-the-biggest-gains-of-the-year">Top 3 cryptocurrencies of 2023 with the biggest gains of the year</h3>
       <div class="sm:flex gap-x-3 mt-2">
       </div>
      </div>
     </div>
    </div>
   </div>
  </div>
 </div>
 <div class="mb-4 bg-slate-50 rounded-md layout-adjustment">
  <div id="finbold.com_middle" style="min-width: 300px; min-height: 250px;">
  </div>
 </div>
 <p class="paragraph">A detailed analysis of monthly losses unveils an interesting pattern. While September, November, and July experienced the most substantial losses, October and December witnessed a noteworthy decline, suggesting a growing emphasis on security awareness and implementing robust safeguards.</p>
 <figure class="wp-block-image size-large"><img decoding="async" loading="lazy" width="1024" height="576" src="https://cdn.thebittimes.com/images/2024/01/02/889f9c86f40e562622da09483ab29d65.webp" alt="Monthly losses in 2023.  Source: Salus
" class="wp-image-146642" srcset="https://cdn.thebittimes.com/images/2024/01/02/889f9c86f40e562622da09483ab29d65.webp 1024w, https://cdn.thebittimes.com/images/2024/01/02/889f9c86f40e562622da09483ab29d65.webp 300w, https://cdn.thebittimes.com/images/2024/01/02/889f9c86f40e562622da09483ab29d65.webp 768w, https://cdn.thebittimes.com/images/2024/01/02/889f9c86f40e562622da09483ab29d65.webp 1280w" sizes="(max-width: 1024px) 100vw, 1024px">
  <figcaption class="wp-element-caption">
   Monthly losses in 2023. Source: Salus
  </figcaption>
 </figure>
 <h2 class="wp-block-heading" id="biggest-hacks-in-2023-in-the-web3-industry">Biggest hacks in 2023 in the Web3 industry</h2>
 <p class="paragraph">In 2023, the top 10 cyber incidents, accounting for nearly 70% of the year’s total losses of approximately $1.2 billion, exposed a common vulnerability: access control issues, particularly private key thefts. These incidents were prevalent in the latter half of the year, with the Lazarus Group playing a significant role in multiple breaches.</p>
 <p class="paragraph">Mixin Network faced a substantial breach, resulting in a $200 million loss, highlighting concerns about cloud service providers’ security. Euler Finance suffered a $197 million loss due to a vulnerability in the donateToReserves function, emphasizing the importance of rigorous smart contract auditing in DeFi protocols.</p>
 <figure class="wp-block-image size-large"><img decoding="async" loading="lazy" width="1024" height="576" src="https://cdn.thebittimes.com/images/2024/01/02/2f854469abbbb4c52570ec430107b101.webp" alt="Biggest hacks in 2023 by timeline. Source: Salus
" class="wp-image-146643" srcset="https://cdn.thebittimes.com/images/2024/01/02/2f854469abbbb4c52570ec430107b101.webp 1024w, https://cdn.thebittimes.com/images/2024/01/02/2f854469abbbb4c52570ec430107b101.webp 300w, https://cdn.thebittimes.com/images/2024/01/02/2f854469abbbb4c52570ec430107b101.webp 768w, https://cdn.thebittimes.com/images/2024/01/02/2f854469abbbb4c52570ec430107b101.webp 1280w" sizes="(max-width: 1024px) 100vw, 1024px">
  <figcaption class="wp-element-caption">
   Biggest hacks in 2023 by timeline. Source: Salus
  </figcaption>
 </figure>
 <p class="paragraph">Multichain witnessed an abnormal movement of lockup assets, raising questions about its security practices. Poloniex fell victim to a hack by the Lazarus Group, resulting in a $126 million loss and prompting enhanced security measures. BonqDAO, Atomic Wallet, and HECO Bridge also experienced significant losses due to attacks exploiting various vulnerabilities.</p>
 <p class="paragraph">Curve faced a $69.3 million loss due to a 0-day compiler bug, highlighting risks associated with language-specific vulnerabilities. AlphaPo lost $60 million to a sophisticated phishing attack, while CoinEx suffered a $54.3 million loss due to a compromised hot wallet private key.</p>
 <h2 class="wp-block-heading" id="types-of-attacks-that-brought-the-biggest-losses">Types of attacks that brought the biggest losses</h2>
 <p class="paragraph">Furthermore, the report highlighted various threats, such as ‘exit scams,’ constituting 12.24% of attacks, resulting in a $208 million loss across 276 incidents. Notable cases involve projects promising high returns that abruptly disappeared with investors‘ funds.&nbsp;</p>
 <p class="paragraph">Access control issues constituted 39.18% of <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>s, resulting in a $666 million loss across 29 incidents. Noteworthy vulnerabilities were exploited in Multichain, Poloniex, and Atomic Wallet.&nbsp;</p>
 <p class="paragraph">Phishing accounted for 3.98% of attacks, resulting in a $67.6 million loss across 13 incidents. The Lazarus Group’s attack on AlphaPo exemplified evolving phishing techniques.&nbsp;</p>
 <figure class="wp-block-image size-large"><img decoding="async" loading="lazy" width="1024" height="576" src="https://cdn.thebittimes.com/images/2024/01/02/e266d6db57b445f17a34adb5e98c7f13.webp" alt="Attack types variety. Source: Salus
" class="wp-image-146644" srcset="https://cdn.thebittimes.com/images/2024/01/02/e266d6db57b445f17a34adb5e98c7f13.webp 1024w, https://cdn.thebittimes.com/images/2024/01/02/e266d6db57b445f17a34adb5e98c7f13.webp 300w, https://cdn.thebittimes.com/images/2024/01/02/e266d6db57b445f17a34adb5e98c7f13.webp 768w, https://cdn.thebittimes.com/images/2024/01/02/e266d6db57b445f17a34adb5e98c7f13.webp 1280w" sizes="(max-width: 1024px) 100vw, 1024px">
  <figcaption class="wp-element-caption">
   Attack types variety. Source: Salus
  </figcaption>
 </figure>
 <p class="paragraph">Flash loan attacks constituted 16.12% of incidents, resulting in a $274 million loss across 37 cases. Precision flash loan attacks targeted Euler Finance, KyberSwap, and Yearn Finance.&nbsp;</p>
 <p class="paragraph">Reentrancy vulnerabilities, contributing to 4.35% of attacks, led to a $74 million loss in 15 incidents, notably highlighted by the Vyper bug and the Exactly Protocol exploit.&nbsp;</p>
 <p class="paragraph">Oracle issues constituted 7.88% of attacks, causing a $134 million loss in 7 incidents, exemplified by the BonqDAO attack manipulating token prices. Other vulnerabilities accounted for 16.47% of attacks, resulting in a $280 million loss across 76 incidents.&nbsp;</p>
 <h2 class="wp-block-heading" id="2024-a-year-of-increased-cybersecurity">2024, a year of increased cybersecurity</h2>
 <p class="paragraph">As 2023 concluded, reduced overall losses highlight the need for improved security measures, especially with concentrated losses in the top 10 hacks. Safeguarding the Web3 ecosystem demands a comprehensive approach due to diverse vulnerabilities.&nbsp;</p>
 <p class="paragraph">Given emerging infiltration methods like Lazarus Group <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>s, rigorous auditing and heightened awareness of Web3 penetration testing are crucial. Users and stakeholders are urged to prioritize platforms and services that fulfill functional needs while adhering to the highest security standards for a secure Web3 future.</p>
 <p class="paragraph"></p>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/web3-loses-1-7-billion-from-hacker-attacks-in-2023-says-salus-report-tbt75331.html">https://thebittimes.com/web3-loses-1-7-billion-from-hacker-attacks-in-2023-says-salus-report-tbt75331.html</a></p>

Web3 loses $1.7 billion from hacker attacks in 2023, says Salus report

Table of Contents

TheBitTimes

Andre artikler udgivet 2. jan. 2024

Analyst: FTX Legal Battle Set to Extend Over Years in $8 Billion Creditor Fight

The Most Powerful Generative AI Text Tools of 2024

ETF Deadline is Approaching and SEC Got Engaged with Paperwork

Jim Cramer, Whatever He Said Turns Out the Opposite, Speaks About Bitcoin: "BTC Bulls Were Right!"

Bitcoin’s Price Surges to $45,000 Amidst ETF Approval Speculation!

Bitcoin up 7%, this BTC mining token also posts gains

Join our free newsletter for daily crypto updates!