2024

DeFi

when

Tornado Cash

Tornado

November saw just 50 instances of hacks and exploits targeting apps and protocols. Certik noted both the number of hacks and the crypto stolen declined for the second month in a row.&nbsp; 
Hacks and exploits have been on the decline since September. November’s result shows a total of 50 successful attacks with an estimated value of $65M. Data by Certik shows a two-month streak of declining attacks, despite the record market value of crypto assets. November was also the second-slowest month when it came to direct crypto hacks.&nbsp; 
<h3 id="hacks-decline-in-november-2024-compared-to-november-2023">Hacks decline in November 2024 compared to November 2023</h3> 
Certik’s estimate for November is the most conservative, based on its methodology. The Web3 auditing firm tracks big exploits against DeFi, protocols, and enterprise wallets.&nbsp; 
Certik also excludes decentralized and trading attacks, including sandwich attacks, flash loan trades, and rug pulls. Other estimates that include a wider selection of hacks tally up the losses to $71M or even up to $85M. The result for November 2024 is still smaller compared to November 2023, where a total of $343M was lost, based on <a href="https://assets.ctfassets.net/t3wqy70tc3bv/5dTC8oeUNH5vdahpW0phvN/da7b943a587e8019daeea6774c20b130/Immunefi_Crypto_Losses_In_November_2023.pdf" rel="nofollow noopener" target="_blank">estimates</a> by ImmuneFi.&nbsp; 
November 2023 was a notable month, with a <a href="https://x.com/ICCryptoidn/status/1727617451171721301" rel="nofollow" target="_blank">$118M hack</a> against the Poloniex exchange. In comparison, November 2024 shows a slowdown of big exploits and a turn toward small DEX and DeFi protocols.&nbsp; 
November also saw an acceleration of attacks directed at personal wallets through malicious links, supply chain attacks, or social phishing. According to ScamSniffer data, 9,208 victims were affected in small-scale exploits against personal wallets. A total of $9.3M were lost.&nbsp; 
<h3 id="span-style-font-weight-400-hacks-slow-down-on-track-to-remain-below-2023-levels-span">Hacks slow down, on track to remain below 2023 levels</h3> 
Hacks and exploits on a year-to-date basis make up to $1.49B in a total of 209 notable incidents, with the most activity around mid-2024. For now, the year’s exploits are smaller compared to 2023 with a total of $1.7B. Peak activity for crypto exploits happened in 2022 when hackers took hold of more than $3.7B.&nbsp; 
Besides the bear market, one of the factors was a slowdown of the <a href="https://dune.com/queries/3463688/5822100" rel="nofollow noopener" target="_blank">Lazarus Group</a> activity, at least based on the usage of TornadoCash. The other reason is an attempt to shift exploits to the Solana ecosystem, while Ethereum is still the biggest target for exploits.&nbsp; 
<figure id="attachment_623998" aria-describedby="caption-attachment-623998" style="width: 100%" class="wp-caption alignnone">
 <img loading="lazy" decoding="async" class="wp-image-623998 size-full" src="https://www.cryptopolitan.com/wp-content/uploads/2024/12/TornadoDec62024.png" alt="Tornado Cash deposits slowed down since the sanctions verdict in 2022." width="915" height="381" srcset="https://www.cryptopolitan.com/wp-content/uploads/2024/12/TornadoDec62024.png 915w, https://www.cryptopolitan.com/wp-content/uploads/2024/12/TornadoDec62024-300x125.png 300w, https://www.cryptopolitan.com/wp-content/uploads/2024/12/TornadoDec62024-768x320.png 768w" sizes="(max-width: 915px) 100vw, 915px">
 <figcaption id="caption-attachment-623998" class="wp-caption-text">
 Tornado Cash deposits slowed down since the sanctions verdict in 2022. | Source: <a href="https://dune.com/queries/2372880/3890569" rel="nofollow noopener" target="_blank">Dune Analytics</a>
 </figcaption>
</figure> 
Activity on Tornado Cash fell off a cliff in 2022, after the OFAC sanctions verdict. Even after the verdict was overturned in 2022, the mixer did not regain its original <a href="https://dune.com/queries/2372880/3890569" rel="nofollow noopener" target="_blank">volume</a>. TornadoCash remains the most widely used for Ethereum-based ERC-20 assets. TornadoCash, however, remains key to mixing funds, with recent <a href="https://x.com/MistTrack_io/status/1864832238178697463" rel="nofollow" target="_blank">deposits</a> from the DEXX hack getting sent in test transactions.&nbsp; 
<h3 id="span-style-font-weight-400-hacks-become-more-detailed-and-creative-span">Hacks become more detailed and creative</h3> 
The biggest hack for November was DEXX, which exposed thousands of Solana wallets and led to a loss of $30M. The DEXX hack exposed <a href="https://www.cryptopolitan.com/8620-solana-wallets-linked-to-the-dexx-hack/">8,620 Solana wallets</a> as a result of social engineering to steal private keys.&nbsp; 
Thala Labs was the second-biggest hack in November, for a total of $25.5M. The exploit was white-hatted, later allowing the platform to recover its funds after deducting a $300K bug bounty. 
Gifto was a questionable hack, where new tokens were printed and sold on exchanges. Polter Finance lost $12M in an Oracle exploit, while Delta Prime erased $4.8M in a contract exploit. MetaWin was another mid-range hack, where a smart contract allowed for oversized withdrawals. The betting platform lost $4M from its permissionless withdrawal contract. The smallest hack was <a href="https://www-cryptopolitan-com.webpkgcache.com/doc/-/s/www.cryptopolitan.com/xt-com-crypto-loses-1m-usdt-in-hack/">XT Exchange</a>, losing between $1M and $1.7M from compromised wallets.&nbsp; 
Certik, whose main task is private contract audits, noted November arrived with multiple exploits based on flawed logic. Audits do not always guarantee a contract will not be exploited, but a total lack of audits may be an easy target for hackers.&nbsp; 
At the same time, bridge hacks and exploits have almost disappeared, as projects rarely use bridge activity and have siloed their liquidity. 
Land a High-Paying Web3 Job in 90 Days: <a href="https://www.cryptopolitan.com/crypto-career-launchpad-waitlist/?utm_source=cryptopolitan&amp;utm_medium=banner&amp;utm_campaign=ccl-waitlist-2" target="_blank">The Ultimate Roadmap</a>

Hacks decline for the second month running, but still results in $65M in crypto losses

Table of Contents

Cryptopolitan_News

Other articles published on Dec 6, 2024

Raoul Pal Shares Positive Insights on Solana and Ethereum

$TICS Presale Raises $4.6M While NEAR Staking Rewards Grow and Arbitrum Hits $20 Billion TVL

GameStop, AMC stocks surge after cryptic Roaring Kitty post

Singapore Gulf Bank Plans $50M Fundraising for Stablecoin Payments Acquisition

XRP Wild Ride: Traders Brace as Bitcoin Dominance Looms Over Market

🚀 DeFi.app Raises $2M in Seed Funding at $100M Valuation: A Leap Toward Simplifying Decentralized...

Join our free newsletter for daily crypto updates!