New CertiK estimates suggest about $364 million was lost through crypto hacks, scams and exploits in April alone.
The cybersecurity firm says the vast majority of this total, $337 million, is related to phishing attacks.
And most of these illicit gains were generated from a single incident, after sophisticated social engineering tactics were used to steal 3,520 BTC from a wallet.
According to on-chain investigator ZachXBT, the funds were quickly laundered through at least six instant exchanges and swapped for Monero, causing XMR's price to surge by 50%.
On Wednesday, ZachXBT confirmed that the victim was "an elderly individual in the U.S." who had held onto the crypto since 2017.
Other notable incidents across April included a $7.5 million attack on the decentralized exchange KiloEX, which was linked to a "price oracle exploit."
A further $5.8 million was stolen from Loopscale, with over $5 million drained from an airdrop contract belonging to Ethereum scaling protocol ZKsync.
According to CertiK, all three of these crypto platforms have managed to recoup funds from white-hat hackers.
April's data is a marked jump from the $28.8 million in losses confirmed in March. But it pales in comparison to the record-breaking $1.5 billion stolen in February, when Bybit was targeted in an audacious hack by North Korean hacking outfit Lazarus Group.
CertiK's findings come days after its co-founder Ronghui Gu warned that the security challenges facing blockchain remain "severe," despite this technology becoming "critical global financial infrastructure" in recent years.
He noted that $1.67 billion was stolen by malicious actors between January and March—a quarter-on-quarter increase of 303%—with most attacks targeting the Ethereum ecosystem.
The cyber security firm says phishing attacks are still on the rise, meaning crypto businesses and investors must take extra care in verifying whether URLs and smart contracts are authentic before transfers are made.
Other top tips include utilizing cold storage that's disconnected from the internet, and not sharing information about crypto holdings on social media.
免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。
