Odaily Planet Daily News: Security agency SlowMist recently released its "2024 Annual Report on Blockchain Security and Anti Money Laundering", which states:
According to the SlowMist Hacked archive, there were a total of 410 security incidents in 2024, resulting in losses of up to 2.013 billion US dollars. Compared to 2023 (464 cases, with a loss of approximately 2.486 billion US dollars), the loss decreased by 19.02% year-on-year.
DeFi remains the most frequently attacked domain. In 2024, there were a total of 339 DeFi security incidents, accounting for 82.68% of the total security incidents, resulting in a loss of up to 1.029 billion US dollars. Compared to 2023 (282 incidents, with a loss of approximately 773 million US dollars), the loss increased by 33.12% year-on-year.
From an ecological perspective, Ethereum suffered the highest loss, reaching $465 million. Next is BSC, which amounts to 87.35 million US dollars.
From the perspective of the cause of the incident, contract vulnerabilities led to the highest number of security incidents, reaching 99, resulting in losses of approximately 214 million US dollars. Next is the security incident caused by the account being hacked.
The top 10 security attack incidents with losses in 2024 and the amounts involved include: DMM Bitcoin ($305 million), PlayDapp ($290 million) WazirX ($230 million), BtcTurk ($90 million), Munchables ($62.5 million), Radiant Capital ($50 million), BingX ($45 million) Hedge Finance ($44.7 million), Penpie ($27.35 million), FixeFloat ($26.1 million).
In 2024, there were 58 Rug Pull incidents, resulting in losses of approximately $106 million. Among them, ZKSync suffered the highest ecological losses, reaching 36.95 million US dollars, while BSC experienced the most runaway incidents, with 28 incidents.
In 2024, wallet phishing attacks caused approximately $494 million in losses, a year-on-year increase of 67%. Although the number of victims only increased by 3.7% (reaching 332000 addresses), the single attack losses significantly increased, with the maximum single stolen amount reaching 55.48 million US dollars.
In addition, according to statistics, the annual attack activity is divided into three stages: the first quarter suffered the heaviest losses, reaching $187 million, with 175000 victims. The highest loss was in March, at $75 million. The total losses in the second and third quarters amounted to $257 million, with the number of victims dropping to 90000. The fourth quarter loss decreased to $51 million and the number of victims decreased to 30000, indicating an improvement in safety. Throughout the year, there were 30 cases exceeding $1 million, resulting in a total loss of $171 million. On average, each victim lost $5.7 million, with the largest single theft amounting to $55.48 million.
The report also provides a detailed introduction to specific fraud methods, anti money laundering, and regulatory situations; According to statistics, out of 410 security incidents, a total of 24 incidents resulted in the full or partial recovery of lost funds after being attacked. According to disclosed data, approximately $166 million was returned, accounting for 8.25% of the total security losses (approximately $2.013 billion).
