Hacken Web3 2024 年安全报告：访问泄露导致加密货币损失高达 78%

Hacken 的 Web3 安全报告还披露，DeFi 黑客损失减少了 40%，而 CeFi 黑客损失增加了 2 倍。

Web3 Security Report 2024: Access Breaches Account for 78% of Crypto Losses

2024 年 Web3 安全报告：访问违规造成了 78% 的加密货币损失

Prominent blockchain security platform Hacken has recently released its security report covering 2024. The report points out that the crypto sector saw 78% (nearly $1.7B) of the overall losses in 2024 due to access breaches, excluding phishing, denoting the requirement for better operational security and key management.

知名区块链安全平台 Hacken 最近发布了涵盖 2024 年的安全报告。报告指出，加密行业 2024 年整体损失的 78%（近 $1.7B）是由于访问违规（不包括网络钓鱼）造成的，这表明需要更好的运营安全和密钥管理。

Key Takeaways from Hacken’s Web3 Security Report

Hacken 的 Web3 安全报告的主要要点

Access breaches were responsible for the majority of the crypto losses in 2024, reaching up to 78%, excluding phishing. This amounts to nearly $1.7B out of the total crypto losses.

2024 年，访问违规是造成大部分加密货币损失的原因，达到 78%（不包括网络钓鱼）。这相当于加密货币总损失的近 $1.7B。

DeFi hacks saw a 40% decrease in losses compared to the previous year, while CeFi hacks increased by 2x.

与上一年相比，DeFi 黑客攻击造成的损失减少了 40%，而 CeFi 黑客攻击造成的损失增加了 2 倍。

Metaverse and gaming entities accounted for 18% of the losses, but bridge hacks plunged by 94% since 2022.

元界和游戏实体占损失的 18%，但自 2022 年以来，桥接黑客攻击暴跌了 94%。

Solana remained the main spot platform experiencing rug pulls, which were largely powered by memecoin projects.

Solana 仍然是经历拉动的主要现货平台，这主要是由模因币项目推动的。

Hacken’s Web3 security report also discloses a 40% decrease in DeFi hack losses while a 2x increase in CeFi hack losses. Moreover, metaverse and gaming entities accounted for 18% of the losses but bridge hacks plunged by 94% since 2022. The report asserted highlights Solana as the main spot platform experiencing rug pulls, powered by memecoin projects.

Hacken 的 Web3 安全报告还披露，DeFi 黑客损失减少了 40%，而 CeFi 黑客损失增加了 2 倍。此外，Metaverse 和游戏实体占损失的 18%，但自 2022 年以来，桥接黑客攻击暴跌了 94%。报告称，Solana 是由 memecoin 项目支持的主要现货平台，正在经历拉动。

Access Breaches Dominate Crypto Losses of 2024 with an Enormous 78%

2024 年加密货币损失中，访问漏洞占主导地位，高达 78%

In its Web3 Security Report for 2024, Hacken revealed that the year witnessed a staggering $1.7B in access breaches. These hacks reportedly account for up to 78% of the total crypto losses over the entire year. This signifies a sheer increase from $1B recorded in the previous year. On the other hand, the smart contract exploits added only 14% of the cumulative losses, emphasizing the unauthorized access as a dominant threat.

Hacken 在其 2024 年 Web3 安全报告中透露，这一年的访问泄露事件达到了惊人的 1.7B 美元。据报道，这些黑客攻击占全年加密货币损失总额的 78%。这意味着比去年记录的 10 亿美元有了大幅增长。另一方面，智能合约漏洞仅增加了累计损失的 14%，凸显了未经授权的访问是主要威胁。

CeFi Hacks $500M in Cumulative Losses Losses

CeFi 被黑客攻击累计损失 5 亿美元

Additionally, the centralized finance sector recorded more than $500M in overall losses. Access control weaknesses played a major role in the respective hacks with WazirX and CMM Exchange as the top centralized exchanges going through these incidents. However, in the world of decentralized finance, the Radiant Capital served as the chief example with a $55M in an incident that impacted up to 10,000 victims because of endless token approvals. Moreover, BNB Chain and Arbitrum are also witnessing new victims.

此外，中心化金融部门的总体损失超过 5 亿美元。访问控制弱点在 WazirX 和 CMM Exchange 的黑客攻击中发挥了重要作用，这两家交易所是经历这些事件的顶级中心化交易所。然而，在去中心化金融领域，Radiant Capital 是主要的例子，由于代币审批无休止，该事件影响了多达 10,000 名受害者，损失了 5500 万美元。此外，BNB Chain和Arbitrum也出现了新的受害者。

PlayDapp, DMM Exchange, WazirX, and Radiant Capital Experience the Key Exploits during 2024

PlayDapp、DMM Exchange、WazirX 和 Radiant Capital 体验 2024 年的关键成果

During the Q1 of 2024, the PlayDapp hack solely accounted for 29% of the total hacks because of access breaches. It incurred losses of $290M with 1.8B $PLA tokens that the exploiters minted with unauthorized access. In the 2nd quarter, DMM Exchange went through a loss of $305M, denoting 40% of the cumulative Q2 hacks as the hacker transferred 4502.9 $BTC to an anonymous wallet.

2024 年第一季度，PlayDapp 黑客攻击仅占因访问泄露导致的黑客攻击总数的 29%。攻击者通过未经授权的访问铸造了 1.8B $PLA 代币，造成了 2.9 亿美元的损失。第二季度，DMM Exchange 遭受了 3.05 亿美元的损失，相当于第二季度累计黑客攻击的 40%，因为黑客将 4502.9 美元的 BTC 转移到匿名钱包。

The 3rd quarter was marked by the hack of WarizX Exchange which accounted for almost 42.8% of the total Q3 hacks with 230M in losses. Following that, Radiant Capital saw a $55M exploit resulting from a security breach. This amount indicates 19.5% of the overall Q4 losses.

第三季度的主要事件是 WarizX Exchange 的黑客攻击，占第三季度黑客攻击总数的近 42.8%，损失达 2.3 亿美元。此后，Radiant Capital 因安全漏洞而遭受了 5500 万美元的损失。这一数额占第四季度整体亏损的 19.5%。

DeFi Projects Need to Implement Secure Key Generation and Multi-Signature Schemes

DeFi项目需要实施安全密钥生成和多重签名方案

According to Hacken, the above-mentioned incidents emphasize the requirement for ensuring the protected generation of cryptographic keys. It also highlights the need for the implementation of encrypted storage along with restricted primary key access. Furthermore, the report also recommends multi-signature schemes in addition to distributed management of keys. With these controls, the DeFi entities can reportedly prevent or minimize the security concerns.

Hacken表示，上述事件强调了确保加密密钥的受保护生成的要求。它还强调了实施加密存储以及限制主密钥访问的必要性。此外，除了密钥的分布式管理之外，该报告还推荐了多重签名方案。据报道，通过这些控制措施，DeFi 实体可以防止或最大程度地减少安全问题。