As a seasoned analyst with years of experience in the digital asset ecosystem, I find myself alarmed yet unsurprised by the surge in access control vulnerabilities in 2024. This trend underscores the need for continuous vigilance and improvement in security practices across the board.

The staggering figures presented in Hacken’s report serve as a stark reminder of the ever-evolving threats facing our industry, particularly in the CeFi, DeFi, and gaming/metaverse sectors. It seems that while we may have made strides in some areas, such as DeFi losses decreasing, other aspects, like gaming/metaverse security, are still grappling with significant challenges.

One can’t help but chuckle at the irony: as we race towards a future filled with virtual worlds and decentralized finance, it seems we’re still tripping over our shoelaces in terms of basic cybersecurity. But hey, that’s progress for you!

In all seriousness though, it’s crucial that businesses heed Hacken’s advice and prioritize advanced multisig management, automated incident response, and adherence to the Cryptocurrency Security Standard (CCSS). Let’s not let our excitement about the potential of Web3 blind us to its pitfalls. After all, a secure future is a sustainable one!

In 2024, it was found that access control vulnerabilities were the primary source of crypto losses, responsible for a staggering 75% of all damages across DeFi, CeFi, and gaming/metaverse industries, apart from phishing incidents.

As a crypto investor, I’ve noticed that Hacken’s latest report reveals a substantial jump in cybersecurity incidents, with unauthorized access and private key theft accounting for a staggering 50% of all losses, amounting to a whopping $1.7 billion in 2023 – more than double the previous year’s figures. Interestingly, exploits targeting smart contract vulnerabilities only contributed 14% to these total losses, indicating a relatively smaller impact compared to unauthorized access incidents.

Access Control Exploits Surge in 2024

2024 saw a widespread occurrence of access control attacks across all Web3 sectors, including CeFi, DeFi, and gaming/metaverse projects. Notably, incidents at DMM Exchange and WazirX in CeFi led to combined losses surpassing half a billion dollars. The DeFi sector experienced similar issues with breached smart contract management, as demonstrated by the Radiant Capital hack that resulted in $55 million in damages.

In the realm of video games and virtual worlds, a substantial setback occurred, as evidenced by the $290 million hack on PlayDapp. Essentially, this incident involved the breach of private keys, which was due to lax key management, deceptive tactics (social engineering), and insecure backup systems.

To protect against such risks, Hacken recommends that businesses adopt sophisticated multi-signature management systems, set up automated responses to incidents, and follow the Cryptocurrency Security Standard (CCSS) for improved private key security and minimizing operational weaknesses within the Web3 environment.

DeFi Losses Drop But Gaming and Metaverse Still Struggling

2024 witnessed a significant decrease of around 40% in total losses in the DeFi sector compared to the previous year (2023). The losses related to DeFi in 2023 amounted to approximately $787 million, but in 2024, these figures dropped significantly. This substantial reduction can largely be credited to enhanced security measures that have been implemented across the sector, with particular focus on decentralized bridges.

2024 saw advancements in cross-chain functionality within DeFi, significantly strengthening its defense against bridge exploits. Since bridges have traditionally been high on hackers’ hit lists, the significant decrease in losses – from $338 million in 2023 to only $114 million in 2024 – underscored the increasing efficiency of newly implemented security measures.

The report emphasized tools such as Multi-Party Computation (MPC) and Zero-Knowledge (ZK) encryption as vital for bridge creators, enhancing security and minimizing the intensity of potential attacks. These innovations have noticeably decreased the occurrence and gravity of attacks aimed at cross-chain bridges.

2024 saw a different story unfold in the gaming and metaverse industries, as they reported substantial financial setbacks totaling approximately $389 million. This amounted to nearly 20% of all crypto hacks that year. A considerable proportion of these losses were due to weaknesses in access control systems.

Approximately 80% of the total gaming and metaverse hacks for the year amounted to $358 million, primarily due to three significant events. This substantial percentage underscores the challenges these projects face in maintaining secure access management, especially on emerging platforms like Blast. Unfortunately, Blast also experienced several instances of rug pulls.

Read More

2024-12-29 23:15