Phishing Scams Led to $46M Loss from Over 10K Crypto Addresses in September

As a seasoned crypto investor with a decade of experience navigating the wild west that is the digital asset market, I can’t help but feel a mix of frustration and hope when reading these latest reports on phishing scams and security threats.


The widespread use of web3 protocols and digital assets has encountered a significant hurdle due to advanced security risks, primarily associated with phishing schemes and vulnerabilities in inadequately constructed smart contracts.

Based on a recent study by Scam Sniffer, a staggering sum of over $46.6 million was taken from approximately 10,805 individuals just in the month of September.

As a researcher, I’ve uncovered that the vast majority, approximately $44.69 million, of the pilfered funds were obtained via phishing tactics. Conversely, a relatively smaller proportion, roughly $2 million, of the traced stolen funds was diverted from victims through the manipulation of their digital addresses, known as address poisoning.

In September, the vast proportion of stolen cryptocurrencies was attributed to the Ethereum network. Specifically, at the end of the month, an Ethereum user fell victim to a permit phishing scam, losing 12,083 spWETH, equivalent to around $32.5 million.

Another Ethereum user lost about $1 million after copying the wrong addresses from a contaminated history.

Consequently, over 127 million dollars were taken from numerous victims during the third quarter, with approximately 11,000 victims each month on average.

⚠️ Crypto Phishing Alert – September Findings

By the third quarter of 2024, the total phishing-related losses amounted to approximately 127 million dollars, averaging around 11,000 victims per month. Notably, two large-scale victims suffered losses worth about 87 million dollars. 💸📊

🧵 [1/8]

— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) October 4, 2024

Rising Phishing Attacks Hinder Mainstream Adoption of Crypto Assets

Beyond the many instances of phishing attacks in recent times, cryptocurrency exchanges that were breached during the third quarter also resulted in a significant number of users losing their digital assets. These stolen funds were often laundered using mixing services like Tornado Cash.

To give you an example, back in mid-July, it was revealed that the multisignature wallet of the Indian cryptocurrency exchange, WazirX, had been compromised. This unfortunate incident resulted in over $230 million worth of user assets being stolen from the platform.

The individual who exploited WazirX has already cleaned most of the stolen funds using Tornado Cash, leaving no realistic possibility for affected users to be compensated.

The frequent misuse of user assets within the cryptocurrency market has deterred many potential users from further investing in the digital world. Moreover, it’s worth noting that recovery options for stolen funds are less prevalent in blockchain systems as compared to conventional banking.

Although crypto users may initially be unaware, they’re increasingly recognizing the deceptive practices behind crypto phishing scams, often linked to platforms that mimic Elon Musk’s X platform.

Furthermore, many web3 protocols now incorporate robust security features to provide optimal protection for user assets.

In the end, it’s important for crypto users to educate themselves about typical phishing situations to safeguard their assets effectively.

Bigger Picture

The crypto market has grown to more than $2.2 trillion in valuation, mostly fueled by mainstream adoption by institutional investors and favoring regulatory reforms. The entrance of institutional funds into the crypto space will significantly help to improve overall security, especially in multi-chain smart contracts.

Based on blockchain information, large investors primarily from U.S. Bitcoin Exchange-Traded Funds (ETFs) have increased their pace of Bitcoin purchases as a means to protect against inflation and geopolitical instability. This trend suggests that the cryptocurrency market may keep expanding at an accelerated rate, regardless of potential cyber threats like phishing attacks. The benefits ultimately outweigh the risks over a long period.

Read More

2024-10-04 17:10