Crypto lost to exploits, scams, hits $1.5B in February with Bybit hack: CertiK

Losses to crypto scams, exploits and hacks totaled astir $1.53 cardinal successful February, with the $1.4 cardinal Bybit hack accounting for the lion’s stock of losses, said blockchain information steadfast CertiK.

The Feb. 21 onslaught connected Bybit by North Korea’s Lazarus Group was the largest crypto hack ever, much than doubling the $650 cardinal Ronin span hack successful March 2022, “which was besides conducted by Lazarus,” CertiK said successful a Feb. 28 X post.

February’s mislaid crypto magnitude is simply a astir 1,500% leap from the $98 cardinal recorded by CertiK successful January. However, excluding Bybit’s losses, the remaining crypto losses past period totaled implicit $126 million, inactive a 28.5% jump.

Bybit had the largest nonaccomplishment successful February, followed by stablecoin outgo steadfast Infini and past the decentralized wealth lending protocol ZkLend. Source: CertiK

Bybit said that the attackers took power of a retention wallet. The FBI later confirmed manufacture reports that North Korea was down the onslaught and had started to person the stolen crypto and disperse it “across thousands of addresses connected aggregate blockchains.”

CertiK added that the 2nd astir important incidental of the month was the Feb. 24 hack connected stablecoin outgo steadfast Infini that stole $49 million.

In a Feb. 27 report, CertiK said a cardinal wallet utilized successful the onslaught had antecedently been progressive successful processing Infini contracts and had retained admin rights utilized to redeem each Vault tokens.

“The exploit highlights a large vulnerability, demonstrating however admin privileges tin go a azygous constituent of failure,” CertiK’s study reads. “One cardinal facet of blockchain information is knowing however to support your backstage keys.”

The Infini squad did connection the hacker a accidental to clasp onto 20% of the stolen loot if the remainder was returned, on with a warrant that the hacker wouldn’t look immoderate ineligible consequences.

There was a 48-hour deadline, which has agelong since passed, and according to Etherscan, the wallet utilized by the hacker inactive has a equilibrium of implicit 17,000 Ether (ETH) worthy $43 million.

Source: Infini

No nationalist announcement has been made connected whether the hacker plans to judge the connection and instrumentality immoderate funds.

Related: Bybit hackers resume laundering activities, moving different 62,200 ETH

Decentralized wealth lending protocol ZkLend suffered the third-largest exploit for February, erstwhile it mislaid $10 cardinal to hackers connected Feb. 12.

Overall, CertiK says the apical class for losses successful February was wallet compromises, followed by codification vulnerabilities, which resulted successful $20 cardinal successful losses, and past phishing, which saw hackers bargain $1.8 million.

Losses to crypto scams, exploits and hacks were declining successful the last days of 2024, with December registering the smallest magnitude stolen astatine $28.6 million, compared to $63.8 cardinal successful November and $115.8 cardinal successful October.

Magazine: SCB tips $500K BTC, SEC delays Ether ETF options, and more: Hodler’s Digest, Feb. 23 –March. 1