In September, the crypto industry lost $120.23 million due to over 20 attacks carried out by hackers, according to data from PeckShield. Among the incidents was the theft of 12,083 spWETH, valued at $32.4 million, which occurred due to a user signing a malicious transaction. However, this amount is not included in the total statistics.

#PeckShieldAlert September 2024 saw 20+ hacks in the crypto space, leading to ~$120.23 million in losses. (Note: The $32.4 million worth of $spWETH drained in a Permit signature #phishing is not included)#Top 10 Hacks in September 2024:#BingX: $44 million#Penpie: $27 million… pic.twitter.com/t2YuvIds6u
— PeckShieldAlert (@PeckShieldAlert) October 1, 2024

The three largest attacks accounted for more than 77% of the total losses. Notable incidents include:

DeltaPrime — $5.98 million
Truflation — $5.6 million
Shezmu — $4.9 million (part of the funds were returned)
Onyx — $3.8 million
BananaGun — $3 million
Bedrock — $1.75 million
CUT — $1.4 million

Use of Tornado Cash and Its Consequences

Experts from PeckShield noted that the hackers behind the attacks on Penpie and DeltaPrime used the crypto mixer Tornado Cash to launder large sums in Ethereum. This allowed the criminals to obscure the origin of the stolen assets, complicating their tracking.

Losses in Q3

According to Immunefi, in Q3 2023, the crypto industry suffered over $413 million in losses due to hacks and fraud. Major incidents included attacks on: