2024

Crystal

Phantom

MistTrack, the investigative arm of cybersecurity firm SlowMist, has identified private key leaks as the leading cause behind crypto thefts in the second quarter of 2024. 
According to a <a href="https://slowmist.medium.com/slowmist-2024-q2-misttrack-stolen-funds-analysis-a95a893cf125" target="_blank" rel="">June 2 report</a>, the leaks resulted from malpractices such as storing private keys on cloud storage services such as Google Docs.&nbsp; 
Further the report warned that sending sensitive information via messaging platforms like WeChat also poses risks despite these platforms employing security measures such as end-to-end encryption. 
“These actions, which seem to enhance information security, actually greatly increase the risk of information theft.” 
Hackers allegedly use “credential stuffing,” to gain access to victims’ sensitive information. This involves using leaked account credentials found online to log in to cloud storage and other services used by the victim. 
“If successful, they can easily find and steal crypto-related information,” the report added.&nbsp;&nbsp; 
In addition, MistTrack warned of other deceptive tactics employed by attackers, such as posing as customer service agents and sending phishing links to victims via platforms like Discord. 
As such, it urged users not to disclose their private keys or mnemonic phrases under any circumstances. 
Fake wallets that mimic popular cryptocurrency wallet applications were also flagged as a leading cause of private key leaks. These sorts of applications are mostly prevalent on third-party sites, which users often prefer due to geographical constraints and other reasons. 
 You might also like: <a href="https://crypto.news/crypto-industry-lost-572-7-million-to-hacks-and-scams-in-q2/"> Crypto industry lost $572.7m to hacks and scams in Q2 </a> 
SlowMist highlighted apkcombo, a Google Play Store alternative, which offered the imToken crypto wallet. While there is an actual imToken app, the imToken 24.9.11 version available on apkcombo was “non-existent” and designed to steal a user’s private keys when interacted with. 
“The advanced nature and professional level of these phishing activities far exceed our expectations.” 
However, such applications aren’t just available on third-party sites. Last week, crypto.news <a href="https://crypto.news/fake-phantom-wallet-breaches-apples-app-store-draining-crypto-assets/">reported a similar incident</a> where a fake Phantom wallet managed to bypass Apple’s app store security measures and drained crypto assets from anyone who imported their private keys into the app. 
Other causes of crypto theft involved <a href="https://crypto.news/slowmist-reports-80-of-x-comments-related-to-phishing-software/">phishing links on social media platforms</a> and fraudulent schemes. 
Honeypot scams were the most common fraud scheme in Q2 2024. This involves creating bogus cryptocurrency projects with promising use cases to lure in investors. However, once an investor invests, they are unable to sell their holdings. 
Most honeypot incidents reportedly occurred on the Binance Smart Chain (BSC), the report added. 
Crypto scams and hacks have <a href="https://crypto.news/crypto-hacks-wiped-out-nearly-20b-from-industry-crystal-intelligence-estimates/">wiped off approximately $20 billion</a> worth of assets between 2011 and March 2024. June 2024 alone saw hackers <a href="https://crypto.news/report-hackers-stole-176-2m-in-crypto-in-june/">steal $176.2 million worth of assets</a> from crypto platforms. 
 Read more: <a href="https://crypto.news/crypto-hacks-wiped-out-nearly-20b-from-industry-crystal-intelligence-estimates/"> Crypto hacks wiped out nearly $20b from industry, Crystal Intelligence estimates </a>

SlowMist flags private key leaks as leading cause of crypto hacks in Q2 2024

crypto.news

Other articles published on Jul 3, 2024

Indian crypto exchange CoinDCX expands in MENA with BitOasis acquisition

Bitcoin firm Bitfarms mines 189 BTC in June – Why is this important?

The Crypto in Turmoil: A Black Day for the Market

DeFi Protocol Pendle’s TVL Drops 40% In A Week, What’s Behind the Exodus?

Daily Market Review: BTC, ETH, CFX, PYTH, ADA

E Money Network launches $2 MILLION RWA Grant Program to spearhead RWA ecosystem

Join our free newsletter for daily crypto updates!