New data from cybersecurity firm Hacken reveals that $1.7 billion worth of crypto assets were lost through the theft of private keys in 2024. In its 2024 Web3 Security Report, Hacken says that the theft of private crypto keys remains the most “significant” threat to crypto investors. According to Hacken, the number of smart contract […]
The post Nearly $1,700,000,000 in Crypto Lost Through Private Keys Theft As Access Control Exploits Becomes Major Threat appeared first on The Daily Hodl.
Losses to crypto phishing scams fell 53% in November, but the Christmas holiday shopping season presents new opportunities for hackers.
Cybersecurity experts have warned that crypto phishing attacks are anticipated to spike in December as scammers aim to capitalize on the Christmas holiday shopping season.
In November, over 9,200 cryptocurrency investors collectively lost $9.3 million to phishing scams, according to a Dec. 3 post from Scam Sniffer, a platform that monitors crypto scams.
“$9,380,000 stolen. 9,208 victims. November saw one victim lose $661,000 in stETH within minutes — and that’s just the tip of the iceberg,” the platform reported.
The government of North Korea (DPRK) has reportedly employed various hacking groups, most notably the Lazarus Group, to seal crypto in recent years.
Hackers with ties to the North Korean government have reportedly expanded social engineering scams designed to steal cryptocurrencies by infiltrating “hundreds” of large, multinational information technology firms.
According to an article from TechCrunch, researchers at the Cyberwarcon cybersecurity conference identified two North Korean hacker groups called “Sapphire Sleet” and “Ruby Sleet.”
Sapphire Sleet targeted individuals through fraudulent employment schemes by posing as legitimate recruiters and luring unsuspecting victims into interviews or other offers of employment. The hackers would then infect the users’ computers with malware disguised as picture-document files (PDFs) or malicious links at some point during the interview process.
Blockaid scanned over 180 million transactions of Backpack's users between June and September, detecting more than 71,000 malicious activities on the Solana network.
Backpack Wallet has identified malicious actors targeting more than 5% of its users engaging with the Solana network. Over 71,000 malicious transactions were detected between June and September 2024, avoiding $26.6 million in potential losses for users.
The transactions were identified through a partnership with security firm Blockaid, which scanned over 180 million transactions from Backpack’s users on Solana during the period.
“Our stats reflect the threats to end-users, meaning that these refer to malicious dApps, scam transactions, and harmful contracts,” Blockaid CEO Ido Ben-Natan told Cointelegraph.
According to Ben-Natan, users on the Solana ecosystem are being disproportionately targeted by scammers and attackers — mostly due to the growing activity of memecoin traders. “A lot of these attacks are usually coming from the same actors that populate the EVM threat landscape,” he said. The CEO added:
According to cybersecurity firm Recorded Future, North Korean hacker groups have stolen approximately $3 billion in funds since 2017.
BlueNoroff, the infamous North Korean hacker group responsible for a string of phishing and cybersecurity attacks since 2019, is targeting crypto firms with a new malware that attacks MacOS computers.
According to a report from SentinelLabs, the malware operation nicknamed “Hidden Risk” is spread through PDF files in multiple stages. The threat actors use fake news headlines and legitimate crypto market research to lure in unsuspecting individuals and companies.
Once the user downloads the PDF file, a seemingly legitimate decoy PDF is downloaded and opened, while the malware downloads as a separate file on the MacOS desktop in the background.
WazirX founder Nischal Shetty also announced the upcoming introduction of staking services to the centralized cryptocurrency exchange.
Nischal Shetty, the founder of the popular Indian crypto exchange WazirX, announced the company is expanding operations and exploring building a separate decentralized exchange (DEX) that will operate alongside the company's current centralized service.
According to Shetty, the decision to launch a DEX is a response to the July 2024 WazirX hack — which drained the exchange of approximately $235 million in user funds — and should help eliminate the counter-party risk inherent in centralized platforms. The WazirX founder asserted:
The WazirX founder also revealed plans to launch a corresponding DEX token to pay for fees on the platform and provide an instrument for governance.
The Financial Industry Regulatory Authority has released a report highlighting the potential benefits and risks of the metaverse for the securities industry. The report emphasizes the importance of addressing challenges identified to ensure the responsible and ethical development of metaverse applications. Firms Must Weigh Challenges in Metaverse Adoption While the metaverse is said to provide […]
Attackers of Radiant Capital compromised the devices of at least three core developers through a malware injection, the company confirmed.
Radiant Capital has disclosed a post-mortem for the Oct. 16 attack that resulted in the theft of over $50 million in digital assets from the BNB Chain and Arbitrum networks. According to Radiant, the attacker compromised the devices of three of its long-standing developers.
Hackers were able to compromise the devices through a “sophisticated malware injection” used to sign malicious transactions.
“The devices were compromised in such a way that the front-end of Safe{Wallet} (f.k.a. Gnosis Safe) displayed legitimate transaction data while malicious transactions were signed and executed in the background,” the Radiant team explained in a blog post.
According to cybersecurity firm Hacken, financial losses from crypto hacks topped $440 million in the third quarter of 2024.
Researchers at the Checkmarx cybersecurity firm sounded the alarm on a dangerous form of malware uploaded to the Python Package Index (PyPI) — a platform for Python developers to download and share code — that steals private keys, mnemonic phrases, and other sensitive user data.
According to the firm, the malware was automatically uploaded by a suspicious user in several different software packages meant to mimic decoding applications for popular wallets like MetaMask, Atomic, TronLink, Ronin, and other industry staples.
The malware was cleverly embedded within parts of the software packages. This allowed the malicious software to go largely undetected due to what appeared to be harmless code.
According to PeckShieldAlert, losses from crypto hacks and exploits accounted for over $120 million in losses during September 2024.
The United States government filed two legal complaints on October 4, 2024, to begin seizing more than $2.67 million in digital assets stolen by the North Korean Lazarus hacking group.
According to the legal filings, the US government seeks to recover approximately $1.7 million in Tether (USDT) stolen by the organization in the 2022 Deribit hack — which left the options exchange drained of $28 million.
Once the hackers successfully breached a Deribit hot wallet, they passed the funds through the Tornado Cash mixer and several Ethereum (ETH) addresses in an attempt to avoid detection.
