In September, the crypto industry lost $120.23 million due to over 20 attacks carried out by hackers, according to data from PeckShield. Among the incidents was the theft of 12,083 spWETH, valued at $32.4 million, which occurred due to a user signing a malicious transaction. However, this amount is not included in the total statistics.
#PeckShieldAlert September 2024 saw 20+ hacks in the crypto space, leading to ~$120.23 million in losses. (Note: The $32.4 million worth of $spWETH drained in a Permit signature #phishing is not included)#Top 10 Hacks in September 2024:#BingX: $44 million#Penpie: $27 million… pic.twitter.com/t2YuvIds6u
— PeckShieldAlert (@PeckShieldAlert) October 1, 2024
The three largest attacks accounted for more than 77% of the total losses. Notable incidents include:
- DeltaPrime — $5.98 million
- Truflation — $5.6 million
- Shezmu — $4.9 million (part of the funds were returned)
- Onyx — $3.8 million
- BananaGun — $3 million
- Bedrock — $1.75 million
- CUT — $1.4 million
Use of Tornado Cash and Its Consequences
Experts from PeckShield noted that the hackers behind the attacks on Penpie and DeltaPrime used the crypto mixer Tornado Cash to launder large sums in Ethereum. This allowed the criminals to obscure the origin of the stolen assets, complicating their tracking.
Losses in Q3
According to Immunefi, in Q3 2023, the crypto industry suffered over $413 million in losses due to hacks and fraud. Major incidents included attacks on:
- BingX Exchange — $44 million
- DeFi Protocol Penpie — $27 million
- Indodax Platform — $22 million
This surge in hacker attacks highlights the need for enhanced security measures on decentralized platforms and exchanges.