Top

Cryptocurrency Losses Surge to $686 Million in Q3

Policy & Regulation·October 04, 2023, 12:43 AM

The cryptocurrency industry has witnessed a turbulent third quarter, with losses surging to $686 million. This unsettling development marks the worst quarter of the year, contributing to $1.4 billion in total losses year-to-date.

Photo by GuerrillaBuzz on Unsplash

 

Immunefi report

These alarming statistics have been unveiled in a report by Singapore-headquartered blockchain security firm Immunefi. According to the report, the number of crypto hacking incidents skyrocketed by 153% year-over-year in the third quarter, with 76 separate incidents recorded.

This stands in stark contrast to the same period in 2022, which saw a mere 30 hacking incidents. Furthermore, the losses resulting from these incidents witnessed a 60% increase, surging from approximately $429 million in Q3 2022 to the current level of $685 million. This marks the highest loss recorded for the year.

 

Devastating hacks

Of these incidents, two major hacks targeting Mixin Network and Multichain were particularly devastating, accounting for nearly half of the total losses in the quarter at $326 million. The Mixin Network hack, attributed to North Korean-sponsored hackers known as the Lazarus Group, underscores the involvement of state-backed actors in crypto-related cybercrimes.

The Lazarus Group’s fingerprints were also found in major hacks of cryptocurrency exchanges, including CoinEx, Alphapo, and Stake, as well as digital payments firm CoinsPaid. Web3 projects based in Japan have been particularly hard hit by the hacker group’s activities. The group was responsible for losses exceeding $200 million.

An overwhelming majority of the total Q3 losses, approximately 97%, were attributed to hacking incidents, while frauds and scams constituted a mere 3%. Decentralized finance (DeFi) protocols bore the brunt of the damage, with nearly $500 million lost, compared to over $185 million stolen from centralized exchanges and services. This highlights the vulnerability of DeFi platforms and the intricacies of smart contract code that underlie many of these applications.

Among the targeted blockchains, Ethereum, BNB Chain, and Coinbase-incubated Base blockchain were the most prominent, with Ethereum being hit by 35 out of 82 chain losses. These platforms were singled out due to the substantial funds they held and the high level of activity on their networks.

 

Greater recovery efforts

Though the situation may appear bleak, there is a glimmer of hope in the form of recovery efforts. Immunefi reports an 8.9% recovery rate, with $61.2 million of stolen funds successfully reclaimed in six cases. Notably, Mixin Network recently introduced a $20 million “bug bounty” in a bid to incentivize the return of stolen funds, underscoring the cryptocurrency industry’s unwavering determination to combat these challenges.

Immunefi itself has played a pivotal role in mitigating crypto-related risks, disbursing over $80 million in bounties and safeguarding more than $25 billion in user funds across various protocols. The company’s recent launch of on-chain vaults represents a significant step toward decentralizing its bug bounty platform, further fortifying security within the crypto ecosystem.

More to Read
View All
Web3 & Enterprise·

Jun 06, 2023

Zodia Custody and Blockdaemon Partner on Institutional Staking

Zodia Custody and Blockdaemon Partner on Institutional StakingLondon-based cryptocurrency storage provider Zodia Custody, a portfolio company of Japan’s SBI Holdings, has entered into a partnership with blockchain infrastructure provider Blockdaemon relative to crypto staking.Photo by Traxer on UnsplashInstitutional interestBlockdaemon announced the crypto staking collaboration, tailored to institutional clients, on Twitter on Tuesday. This move comes as institutional interest in staking, the process of contributing digital assets to support blockchain networks and earning rewards, continues to surge.Following the Ethereum network’s Shapella upgrade on April 12, the amount of ether (ETH) staked increased by an impressive 4.4 million, reaching a total of 22.58 million ETH (equivalent to $42 billion) as of May 23. This remarkable growth in staked assets reflects the growing confidence in the Ethereum network and the potential for substantial returns.First bank-owned custodianZodia Custody is a subsidiary of the well-known multinational bank Standard Chartered and backed by prominent institutions such as Northern Trust alongside SBI Holdings. It claims the title of being the first bank-owned custodian to provide staking services exclusively to institutional clients. This collaboration enables Zodia Custody to leverage Blockdaemon’s infrastructure to deliver secure and efficient staking solutions, catering to the specific needs of institutional investors.Blockdaemon has been at the forefront of facilitating seamless integration between traditional financial institutions and the emerging crypto industry. Earlier this year, the company introduced a wallet service targeted at the institutions and crypto custodians. The wallet assists clients in managing their assets securely, eliminating the need for third-party storage solutions. By partnering with Zodia Custody, Blockdaemon expands its portfolio of services, capitalizing on the rising demand for staking among institutional investors.The firm’s CEO and Founder, Konstantin Richter, stated that the partnership with Zodia “allows stronger security, automation and simplification of the process to participate in staking, truly accelerating Web3 innovation.”LMAX collaborationEarlier this month Zodia partnered with digital asset trade execution specialist LMAX Digital to provide a combination of institutional-grade trading infrastructure and custody services to crypto asset manager, Coinshares.Institutional investors, traditionally cautious about entering the crypto ecosystem, are now becoming more proactive in engaging with digital assets. Staking, with its potential for consistent and predictable returns, has emerged as an appealing opportunity. By participating in staking, institutions not only contribute to the efficient functioning of blockchain networks but also enjoy the rewards associated with validating transactions and securing the network.The partnership between Zodia Custody and Blockdaemon exemplifies the industry’s efforts to bridge the gap between traditional finance and the rapidly evolving world of cryptocurrencies. As more institutional clients seek exposure to digital assets, it becomes essential to provide them with secure and reliable solutions tailored to their specific requirements.With demand for staking services continuing to rise, institutional players are recognizing the value of taking a more active part in the crypto ecosystem. With Zodia Custody and Blockdaemon leading the way, the opportunities for institutional clients to engage in staking and reap the rewards are set to expand, further fueling the growth of the entire crypto industry.

news
Policy & Regulation·

Jan 20, 2024

Regulator lifts investment cap for real estate-backed tokens in Thailand

The Securities and Exchange Commission (SEC) in Thailand has made a significant adjustment to the rules governing digital token investments. The SEC has decided to eliminate the investment ceiling previously imposed on retail investors participating in initial coin offerings (ICOs) tied to real estate and infrastructure.Photo by Colton Duke on UnsplashFostering digital economy growth and developmentThe announcement, specifying the revised criteria, was officially published in the Royal Gazette, with the measure taking effect on Tuesday. This move allows retail investors greater access to ICOs involving tokens backed by real estate or linked to real estate revenues. The SEC emphasized that, in addition to ensuring appropriate investor protection, its role extends to encouraging the utilization of technology and innovation in fundraising. The objective is to foster sustainable growth in the capital market and support the development of the digital economy. Prior to this adjustment, retail investors faced a restriction of a 300,000 baht ($8,450) investment limit per offering concerning digital tokens backed by infrastructure or real estate. The SEC's decision to remove this limitation aligns with the goal of managing product risks effectively while promoting a more inclusive environment for retail investors in the realm of digital token investments. Facilitating custodial walletsFurthermore, the SEC is currently undertaking a review of criteria to facilitate the establishment of custodial wallet provider businesses for digital asset operators with common major shareholders. This initiative aims to enhance the regulatory framework and provide guidelines for businesses involved in digital asset storage. Custodial wallets will be permitted in Thailand if operated by publicly traded companies with experience in digital asset storage. All Thai citizens will have a touch point with digital wallets shortly under a government program, a $14 billion digital handout scheme, which has been approved to distribute digital currency to the public through digital wallets. DASP approvalsAs part of its supervisory role, the SEC will also be responsible for granting permissions to digital asset service providers (DASPs) to expand into new business lines. Digital asset operators seeking to diversify their operations are required to obtain approval from the SEC before proceeding. This measure is intended to ensure the effective oversight of such businesses and maintain the credibility of the digital asset industry by preventing illegal operations. It’s likely no coincidence that tokenized real estate is being embraced in Thailand, given the background of Thailand’s recently installed Prime Minister, Srettha Thavisin. In 2021, Thavisin’s company played a role in funding crypto-friendly investment management firm XSpring Capital to the tune of $225 million. His firm also introduced a real estate-backed ICO in conjunction with XSpring. While Thailand’s SEC is moving forward with tokenized real estate, it doesn’t feel the same way about exchange-traded funds (ETFs). In the wake of the recent approval of spot bitcoin ETFs in the United States, the Thai SEC responded by stating that it currently has no plans to allow asset managers to launch similar products within the Thai market. 

news
Web3 & Enterprise·

Jan 18, 2024

Socket's Bungee resumes operations following exploit

Socket, a cross-chain infrastructure protocol, and its interoperability bridging platform, Bungee, have restarted operations following a temporary pause prompted by an exploit that led to the apparent theft of $3.3 million.Photo by Anna Tarazevich on PexelsSecurity incidentTaking to the company’s Discord, Socket team hospitality lead Taylor Melvin clarified that it had “experienced a security incident which affected wallets with infinite approvals to Socket contracts.” The incident, which occurred on Tuesday, involved an unknown attacker draining millions worth of stablecoins and other tokens from the Bungee bridging aggregator. The attackers targeted wallets with infinite approvals to Socket contracts, exploiting authorizations for blockchain-based tools that allow applications to access tokens in a user's wallet. Security researcher "@speekaway" was the first to flag the exploit on Tuesday. The attacker's wallet, connected to the exploit, held nearly $3 million in ether (ETH) and $300,000 worth of other tokens. By 2:47 p.m. ET, the attack seemed to have ceased, with the researcher recommending users to revoke approvals for Socket to safeguard their assets. Pausing contractsIn response to the security breach, Socket announced the pause of affected contracts on Tuesday at 3:15 p.m. ET. The project's team promptly identified and addressed the issue, taking swift action to mitigate the exploit's impact. @speekaway chimed back in once contracts had been paused, writing:”Think this pause fixed it, very likely no more attacks are possible. So if you are currently freaking out about revoking you can probably relax.” Normal service returnsAs Socket paused activity during the incident, preventing further propagation of the attack, developers worked to fix the issue. Early Wednesday, Socket developers announced that the problem had been resolved, and normal activities had resumed. The team also stated that plans for compensation were in progress. Cross-chain bridges, like Socket's Bungee, facilitate token transfers between different blockchains but remain susceptible to exploitation. Blockchain security and data analytics company PeckShield confirmed that at least $3.3 million had been lost, highlighting the need for enhanced security measures in the rapidly evolving blockchain ecosystem. The exploit involved the exploitation of a recently added route, which has since been disabled. The attacker targeted users who had over-approved Socket, draining funds up to the limit of their approval. This incident follows the $81 million hack of Orbit Chain, a cross-chain bridge connecting Ethereum to other networks, earlier in January. Cross-chain tools' complexity contributes to the frequency of such attacks, emphasizing the importance of understanding the security measures in place when utilizing these bridges. In a message to CoinDesk, Sergey Nazarov, co-founder of Chainlink, emphasized the need for users to scrutinize the security of their chosen bridge, considering the various levels of cross-chain security. With the complexities involved, users are encouraged to be vigilant and informed about the security spectrum of the bridges they employ. Socket was founded by Indian duo Rishabh Khurana and Vaibhav Chellani. In September, the company raised $5 million, with funding coming from Framework Ventures and Coinbase Ventures. 

news
Loading