Jul 12, 2022 at 01:17CertiK, a leading security-focused ranking platform to analyze and monitor blockchain protocols and DeFi projects, recorded 36 major attacks on Web3 in June, with a total loss of about $394.7 million. The company also released a list of the most affected projects. We chose five of the most worthwhile.
- At the top of the list is Arda, which offers simple applications on the blockchain platform Elrond. Hacker attacks led to the loss of $127.7 million.
- On June 6, “suspicious activities on the Maiar DEX” happened, after which there was a theft of EGLD of $113 million.
- In late June, a hacker exploited layer-1 blockchain network Harmony Protocol’s Horizon bridge and stole $97 million worth of tokens.
- At the start of last month, $27.6 million of Optimism tokens were stolen after Wintermute sent the wrong wallet address. The money was supposed to be stored in a multi-signature wallet owned by Wintermute. Still, the address Wintermute provided was the wallet address on Ethereum (instead of the address on Optimism). The attacker managed to drain all the funds to his new Optimism wallet. He then cashed in one million of the stolen OP tokens in Ethereum and transferred those funds to an unknown address via Tornado Cash, a tool that allows sending and receiving funds from an encrypted source.
- Pokémon rip-off NFT project The Animoon turned out to be a $6.3 million fraud. The team claimed to have signed a non-disclosure agreement (NDA) with Pokémon partners TopDeck, announced a play-to-earn (P2E) NFT game, promised Animoon comics, Netflix secret project, and guaranteed that 15 Legendary cards would generate $2,500 every month for the rest of their life. The game never came out; the developers changed the legendary prizes from $2,500 a month to a percentage of game revenue. In the end, the project team disappeared, deleting their accounts from everywhere.
We recorded 36 major attacks for the month of June, with a total loss of ~$394.7M
Stay Vigilant! pic.twitter.com/Hz5L6g5KvU
— CertiK Alert (@CertiKAlert) July 11, 2022
Also, CertiK audited over 3700 projects in Q2 2022 and reported a loss of more than $2 billion to hacks and scams since the start of the year. CertiK’s report shows that 27 flash credit attacks lost $308 million in the second quarter of 20 (more than the $14 million lost to attacks in the same category in the first quarter of this year).
9
