Web3 losses from security breaches, phishing scams, and rug pulls soared to a staggering $890 million in Q3 2023.This figure represents more than double the combined losses of the preceding two quarters.Hackers and scammers predominantly favor private key compromises as their go-to method for fraud.Among the blockchain sectors, DeFi and Ethereum bore the brunt of attacks, with DeFi protocols suffering losses of $227 million in Q3 2023.Unfortunately, only $54.4 million in assets were successfully recovered during this quarter, accounting for just approximately 10% of the total stolen amount. Cryptocurrency Scams and Thefts on the Rise in 2023 The crypto world is no stranger to scams, theft, and wallet-draining schemes. Just recently, a hacker infiltrated Ethereum founder Vitalik Buterin's Twitter account, using a phishing link to siphon nearly $1 million in crypto and NFTs from unsuspecting victims. But the situation runs even deeper. According to a recent report from Beosin.com, the third quarter of 2023 witnessed a staggering total of scams and crypto/NFT thefts, amounting to nearly a billion dollars. Beosin, a web3 security and auditing firm, focuses on safeguarding crypto assets through multi-dimensional security assessments, smart contract scans, real-time risk tracking, and crypto address monitoring. Their findings are unsettling. Web3 and the crypto industry together lost approximately $890 million in Q3 2023 due to various security breaches, phishing scams, and rug pulls. What's astonishing is that this figure more than doubles the combined losses of the preceding two quarters. For context, Q1 2023 recorded losses of around $330 million, while Q2 2023 saw losses of about $333 million. In stark contrast, Q3 alone witnessed a staggering $889.26 million in total thefts. The question that arises is, why are hackers becoming increasingly active as the year progresses? Diving deeper, private key compromises emerged as the preferred method for hackers and scammers, resulting in losses of a jaw-dropping $223 million in Q3 alone. Notable incidents include CoinEx ($70 million), Alphapo ($60 million), Stake.com ($41.3 million), CoinsPaid ($37.3 million), and Polynetwork ($10.1 million). Cloud database attacks ranked second, with losses of $200 million, mainly attributable to the Mixin Network incident. Contract vulnerability exploits came third, with 22 smart contract hacks amounting to $93.27 million. In total, various hacks accounted for $540 million in losses, phishing scams claimed $66.15 million, and rug pulls netted scammers $280 million. Decentralized Finance (DeFi) emerged as the most targeted blockchain sector, while Ethereum, despite being a highly secure smart-contract-enabled platform, suffered significant attacks. Ethereum saw thefts of an astounding $227 million, making it the most attacked public blockchain. Mixin followed with a $200 million loss, and other notable blockchains like BNB, Tron, and Bitcoin also experienced attacks. Unfortunately, a significant portion of the stolen funds—approximately $360 million—remains in hacker-controlled addresses, with only $54.4 million (about 10% of the total) recovered in this quarter. The asset recovery rate also declined compared to the first half of the year. The Lazarus group from North Korea, responsible for stealing $208 million in this quarter, played a major role in these attacks, employing sophisticated money laundering tactics to conceal the stolen funds. As the blockchain space continues to evolve, cybersecurity remains a pressing concern. With the constant threat of cyberattacks and scams, vigilance and security-consciousness are imperative. #crypto2023 #cryptocurrency #crypto #defi #web3