Crypto Hackers Nabbed $409M in Q3: Immunefi

Election 2024 coverage presented by
Hackers stole $409 million worth of cryptocurrency in the third quarter, and an additional $3 million was lost to fraud, according to a report by Immunefi.
The figure is 40% less than in third-quarter 2023, the bug bounty platform said.
The amount of capital locked on decentralized finance (DeFi) protocols represents an “unparalleled and attractive opportunity for blackhat hackers,” Immunefi said. There is currently $87.2 billion in total value locked (TVL) across DeFi, according to DefiLlama.
Most the quarter’s losses came from hacks of crypto exchanges, with India’s WazirX losing $235 million and Singapore’s BingX $52 million. The report said 32 other hacks accounted for 32% of total losses.
“We’re seeing a higher number of incidents targeting DeFi, while CeFi experiences fewer incidents but often with more severe consequences, with hundreds of millions in stolen funds in a single exploit,” said Mitchell Amador, founder and CEO of ImmuneFi.
“In CeFi, the biggest infrastructural issue is private key management, which is essential to maintaining the self-custody of crypto assets but is not typically subject to security audits. It requires rigorous key management policies, practices, and emergency plans.”
WazirX lost funds after hackers compromised the exchange’s private keys. The exchange halted withdrawals and froze trading on July 18, and is now seeking a moratorium from Singapore’s courts to give it time to restructure.
The Ethereum blockchain was the most common target for hackers, with 15 incidents of theft reported compared with eight on BNB Chain and two on Base.
There were also two incidents of funds being recovered after being stolen. Ronin Network recouped $10 million from a $12 million hack and ShezmuTech clawed back all $4.9 million that was taken.
Edited by Sheldon Reback.
Disclosure
Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.
Oliver Knight is a CoinDesk reporter based between London and Lisbon. He does not own any crypto.