Summary:
Crypto hackers stole $1.4 billion in the first half of 2024, double the amount stolen in the same period of 2023.
The surge in crypto heists coincides with a rise in the value of cryptocurrencies.
Private key and seed phrase compromises remain a top attack vector.
Centralized finance platforms have become a new target for hackers.
Info stealers are key tools used by hackers to steal access to crypto wallets.
Crypto platforms need to strengthen their security measures, while users need to be vigilant against scams.
Crypto Heists Surge: Hackers Net $1.4 Billion in First Half of 2024
Cryptocurrency-targeting hackers have doubled their loot in the first half of 2024, stealing $1.4 billion in crypto, compared to $657 million in the same period last year. This surge coincides with a rise in the value of various cryptocurrencies, including Bitcoin, Ether, and Solana.
Private key and seed phrase compromises remain a primary attack vector, alongside smart contract exploits and flash loan attacks. While thefts from hacks and exploits are down from 2022, the median value of cryptocurrency stolen in any single attack has increased by 150%.
Centralized finance platforms have become a new target for hackers, with 70% of losses in the second quarter of 2024 traced to these platforms. Two of the largest heists this year involved DMM Bitcoin, losing over 4,500 bitcoins, and BtcTurk, losing $55 million.
Info stealers are a key tool for hackers, stealing session cookies and saved passwords from browsers to bypass multifactor authentication and access crypto wallets. This stolen information can be sold on cybercrime markets or used to launch crypto heists.
Crypto platforms need to strengthen their defenses with multi-layered security measures, including regular security audits, robust encryption, multi-signature wallets, and secure coding practices. They also need to educate employees about security and have strong incident response plans in place.
Crypto users need to be vigilant against phishing attacks and other scams. They should also implement strong security measures to protect their private keys and seed phrases.
Comments