Crypto hacking losses decline in Q1 2024 — Immunefi

The cryptocurrency industry saw a 23% decline in losses due to hacking and scams in the first quarter of 2024 compared to 2023, according to a March 28 research report by blockchain security firm Immunefi.
According to the report, the total amount lost to hacking and fraud incidents in Q1 of 2024 amounted to approximately $336.3 million, down from $437.5 million in the same quarter of 2023.
The report identifies 46 hacking incidents and 15 cases of fraudulent activities.




With nearly $100 billion of total value locked in Web3 protocols, decentralized finance (DeFi) platforms remain a significant target for hackers, accounting for all of the exploits identified by Immunefi in Q1, compared to zero for centralized finance platforms.

Two projects accounted for the bulk of the losses, totaling $144.5 million, or 43% of the overall amount. The largest attack, amounting to $81.7 million, targeted the cross-chain bridge protocol Orbit Bridge on New Year’s Eve. January saw the highest monthly losses in Q1, totaling $133 million.
Mitchell Amador, CEO of Immunefi, highlighted the susceptibility of DeFi platforms to private key breaches, highlighting the pressing need for enhanced security measures across code and protocol infrastructure.


The second-largest attack involved a $62 million exploit on Blast-based nonfungible token game Munchables. However, funds were recovered within 24 hours, as the hacker surrendered the private keys to the wallet containing Munchables’ assets. 
Overall, $73.9 million (22%) of the stolen funds from seven exploits in Q1 were retrieved. The number of attacks decreased by 17.6%, from 74 in Q1 2023 to 61 in 2024.
Hacks accounted for 95.6% ($321.6 million) of losses across 46 incidents, while fraud, scams and rug pulls accounted for 4.4% ($14.7 million) in 15 incidents. Ethereum was the most targeted chain ahead of the BNB Chain, with both networks accounting for 73% of total losses combined.
Ethereum had the highest number of attacks, with 33 incidents, accounting for 51% of the losses. BNB Chain experienced 12 attacks, representing 22% of the exploited funds. Other incidents were identified on Arbitrum, Solana, Optimism, Bitcoin, Blast, Polygon, Conflux Network and Base.