The New York Attorney General’s office has sued Cynthia and Eddy Petion over two allegedly fraudulent cryptocurrency pyramid schemes called AWS Mining and NovaTech. They particularly targeted victims of Haitian descent, promoting their schemes in Creole, leveraging their victims’ religion, and promising them “financial freedom” and “freedom from the plantation”.<p>In reality, the schemes were pyramid schemes in which investors earned crypto for recruiting others to buy in. NovaTech also used the funds from newer investors to pay out the supposed “returns” from the investment scheme, in a classic Ponzi fashion. From August 2019 – April 2023, victims deposited more than $1&nbsp;billion into NovaTech. Though it was described as a trading operation, only about $26&nbsp;million ever went into crypto trading.</p><p>In June 2022, the couple secretly sold their Florida house and moved to Panama, while continuing to pretend they were in the state. Speaking to another operator of the scheme, Cynthia Petion advised: “leave the country…they can’t serve you if they can’t find you lol.”</p>

“Attorney General James Sues Cryptocurrency Companies NovaTechFx and AWS Mining for Defrauding Investors of More Than $1 Billion”

NovaTech and AWS Mining crypto pyramid schemes

New York Attorney General sues over $1&nbsp;billion NovaTech and AWS Mining crypto pyramid schemes

A Japanese cryptocurrency exchange called DMM Bitcoin has announced that they suffered an "unauthorized leak" of 4,502.9&nbsp;bitcoin (~$308&nbsp;million) from a company <button class="define-target" id="wallet">wallet</button>. They've provided very little in additional details around how the loss occurred, or who may have been involved. They have taken some of their services offline as they investigate the incident.<p>The company claims it will replace the lost funds with help from other companies in their group.</p><p>This is one of the <a href="https://www.web3isgoinggreat.com/charts/top" target="_blank">largest cryptocurrency thefts in recent history</a>, rivaling the roughly <a href="https://www.web3isgoinggreat.com/?id=wormhole-bridge-hack" target="_blank">$320&nbsp;million theft from the Wormhole bridge</a> in February 2022 and the <a href="https://www.web3isgoinggreat.com/?id=ftx-claims-it-was-hacked" target="_blank">$477&nbsp;million theft from FTX</a> in November 2022.</p><p>The DMM hack was later attributed to a North Korean state-sponsored cybercrime group.</p>

"Japan's DMM Bitcoin says over $300 mln of cryptocurrency lost"

DMM Bitcoin loss

Japanese crypto exchange DMM Bitcoin loses $308&nbsp;million

Two people have been arrested in relation to a phishing scam that successfully stole more than 4,000 BTC priced at around $243&nbsp;million from a single individual. The victim was targeted with a phishing scam in which the attackers posed as Google support employees and convinced the victim to reset their two-factor authentication for their account on the Gemini cryptocurrency exchange.<p>The FBI raided a luxury home in Miami in connection to the theft, and arrested two men in their early twenties. Authorities worked with crypto investigators including zachxbt to trace the stolen funds.</p>

"Police Arrest Two People Related to $243M Crypto Heist Targeting Genesis Creditor"

Gemini phishing attack

Arrests made after $243&nbsp;million stolen from one individual in Gemini phishing attack

After a $230&nbsp;million "suspicious transfer", Indian cryptocurrency exchange WazirX has paused withdrawals and acknowledged that one of their <button class="define-target" id="multisig">multisignature</button> wallets was compromised. The attacker began selling off the tokens, causing the price of tokens like Shiba Inu to drop around 10%.<p>WazirX is the largest cryptocurrency exchange in India. The company was acquired by Binance in 2019, but the two companies re-separated in 2023 after a bizarre public dispute.</p><p>WazirX's June 2024 proof-of-reserves reported around $500&nbsp;million in total holdings, making the $235&nbsp;million theft a substantial portion of the assets held at the exchange.</p><p>Blockchain sleuth zachxbt observed that the theft had some of the hallmarks of the Lazarus Group, a North Korean hacking group that has perpetrated other 9-figure heists including the <a href="https://www.web3isgoinggreat.com/?id=axie-infinity-suffers-625-million-exploit" target="_blank">$625&nbsp;million <i>Axie Infinity</i> theft</a> in March 2022, and the <a href="https://www.web3isgoinggreat.com/?id=atomic-wallet-hacks-total-over-35-million" target="_blank">theft of more than $100&nbsp;million from Atomic Wallet users</a>. The US and South Korea both officially pinned the attack on North Korea later on.</p>

"India’s WazirX confirms security breach following a $230M ‘suspicious transfer’"

"WazirX Publishes June 2024 Proof of Reserves Report; Total Holdings Valued at Rs 4203 Cr."

WazirX hack

WazirX exchange hacked for $235&nbsp;million

Blockchain sleuth zachxbt noticed the strange movement of around 213&nbsp;million XRP, the native token for the Ripple project. These tokens were priced at around $112.5&nbsp;million at the time of the theft. He originally identified the source of funds as Ripple itself, though Ripple CEO Chris Larsen later went on Twitter to claim that the funds that were stolen had come from his personal wallets and not from wallets belonging to the Ripple project.<p>Larsen attempted to downplay the massive theft, claiming repeatedly that the theft did not represent a threat to Ripple itself, and trying to reassure people that Ripple wallets are still safe. However, fears over a threat to Ripple itself and the true separation between Larsen's wallets and those belonging to the Ripple project continued, and XRP dipped around 5% on the news.</p>

"Hackers steal $112 million of XRP Ripple cryptocurrency"

Chris Larsen XRP theft

$112.5&nbsp;million in XRP stolen from Ripple CEO Chris Larsen

Turkish authorities arrested Andreas Szakacs, also known as Emre Avci, for his role in the OmegaPro cryptocurrency Ponzi scheme. Victims were invited to make small investments in the "Omega Invest" application, which made quick returns. They were enticed to invest more and more, but when they attempted to withdraw funds, they discovered the money had been taken. Altogether, victims have claimed around $103&nbsp;million in losses.<p>The OmegaPro Ponzi scheme was reportedly linked to the OneCoin crypto Ponzi, whose operators stole at least $4&nbsp;billion from millions of victims since 2019. Multiple people associated with OneCoin have been arrested, <a href="https://www.web3isgoinggreat.com/?id=onecoin-cofounder-sentenced-to-prison" target="_blank">including its co-founder Karl Sebastian Greenwood</a>, but its "Cryptoqueen" co-founder <a href="https://www.web3isgoinggreat.com/?id=cryptoqueen-ruja-ignatova-added-to-europols-most-wanted-list-in-connection-to-onecoin-ponzi-scheme" target="_blank">Ruja Ignatova was one of Europol's most wanted fugitives</a> and remains the subject of an <a href="https://en.wikipedia.org/wiki/Interpol_notice" target="_blank">Interpol red notice</a>.</p>

"$4B cryptocurrency scammer caught in Istanbul"

OmegaPro founder arrested

OmegaPro founder arrested for allegedly running crypto Ponzi

A <button class="define-target" id="pig-butchering">pig-butchering</button> operation in Myanmar has scammed victims of more than $100&nbsp;million in <a href="https://www.web3isgoinggreat.com/?collection=tether" target="_blank">Tether</a> in less than two years, according to a report from Chainalysis and the anti-human trafficking organization <a href="https://en.wikipedia.org/wiki/International_Justice_Mission" target="_blank">International Justice Mission</a>.<p>Many of the workers for the romance scam group are themselves victims of human trafficking. The operation is based in a "compound" near Myanmar's border with Thailand, and researchers estimate that thousands of trafficked workers operate the scam from the "self-contained city".</p><p>The scam may put more pressure on Tether, whose role in human trafficking and high-volume romance scam operations has been scrutinized more heavily in recent months and years. Tether has frozen some assets belonging to romance scammers in the past, but remains the token of choice for many of these groups.</p>

"$100mn in crypto payments traced to Myanmar-based 'scammers'"

Myanmar-based pig-butchering scam

Myanmar-based romance scam operation pulls in $100&nbsp;million in less than two years

The Turkish cryptocurrency exchange BtcTurk has acknowledged that they suffered a hack that impacted ten <button class="define-target" id="hot-wallet">hot wallets</button> containing multiple cryptocurrencies. The exchange halted deposits and withdrawals while investigating, and said they are working with law enforcement.<p>It appears that assets notionally worth around $55&nbsp;million were stolen. Furthermore, the exploiter sold substantial amounts of some cryptocurrencies, including Luna Classic, causing major price movements in those tokens.</p><p>According to newly installed Binance CEO Richard Teng, Binance froze $5.3&nbsp;million of the stolen assets.</p>

BtcTurk exploit

BtcTurk exploited for at least $55&nbsp;million

Two people were charged in California for laundering money obtained from cryptocurrency and fiat "<button class="define-target" id="pig-butchering">pig butchering</button>" scams. After receiving the money from the investment scammers, the launderers then allegedly helped to obfuscate at least $73&nbsp;million in transactions by moving the money through Deltec Bank in The Bahamas and converting it into the Tether <button class="define-target" id="stablecoin">stablecoin</button>.<p>Deltec is a well-known bank in the cryptocurrency world, mostly for its ties to Tether and to FTX. In July 2023, <a href="https://www.web3isgoinggreat.com/?id=feds-seize-tens-of-millions-from-deltec-bank-in-connection-to-fake-crypto-investment-schemes" target="_blank">US authorities seized tens of millions from Deltec accounts</a> in connection to a cryptocurrency money laundering investigation. It's not clear if that was the same investigation.</p>

"Two Foreign Nationals Arrested for Laundering At Least $73M Through Shell Companies Tied to Cryptocurrency Investment Scams"

Crypto scam money launderers charged for laundering more than $73&nbsp;million through Deltec

An Ethereum <button class="define-target" id="wallet">wallet</button> was apparently drained of 1,155&nbsp;<button class="define-target" id="wrapped-token">wrapped</button> bitcoin (~$72.7&nbsp;million) when they transferred it to a malicious address that had been operating an <button class="define-target" id="address-poisoning">address poisoning</button> scheme.<p>Address poisoning is a scam tactic that takes advantage of crypto traders' tendencies to copy and paste wallet <button class="define-target" id="address">addresses</button> from their transaction histories, since the addresses are long strings of characters that are not practical to type from memory. By creating a new wallet address with identical start and/or ending character strings to addresses used by the victim, and spamming the victim with transactions from that similar address, scammers are sometimes able to get victims to erroneously copy the spoofed address for future transfers.</p><p>That's what appears to have happened in this case, when a victim transferred 1,155 wrapped bitcoin — tokens pegged to the bitcoin price meant for use on the Ethereum blockchain — to the malicious address.</p><p>The victim and the exploiter later reached an agreement for the return of most of the funds, with the exploiter keeping $7.2&nbsp;million as a "<button class="define-target" id="bug-bounty">bounty</button>".</p>

0x1E227 address poisoning

Wallet loses over $72&nbsp;million to address poisoning

Liquidators have been appointed for three cryptocurrency companies owned by Ash Balanian. DCA Capital, Digital Commodity Assets, and the Digital Commodity Assets Fund have all entered liquidation after investors raised red flags about the fund's management and licensure.<p>So far, losses are estimated to affect around 100 investors, who have up to AU$100&nbsp;million (US$65&nbsp;million) in claims.</p><p>Balanian had boasted of his career experience as a former NASA mission planner, and targeted his fund to wealthy investors with a minimum initial deposit of AU$50,000 (~US$33,000).</p>

"Up to $150 million at risk as two Australian bitcoin schemes go bust"

DCA Fund collapse

Australian DCA Fund collapses with up to $65&nbsp;million owed to creditors

The "Munchables" crypto game explains: "Schnibbles grow on every realm across the Munchable's world. Each realm has their own unique and distinctive schniblet, and the Munchables react differently based on their compatibility to the schniblets fed to them. When creating an account for the Munchables, you must choose the location of your snuggery." Right then.<p>Things went awry in the land of the schnibbles and snuggeries when an attacker siphoned around 17,400&nbsp;ETH ($62.5&nbsp;million). Various descriptions of the attack circulated, with blockchain sleuth zachxbt attributing it to a recently hired developer, and crypto developer 0xQuit claiming the theft appeared to have been "planned since deploy".</p><p>Some began discussing the possibility that the Blast layer-2 blockchain might forcibly roll back the chain to "undo" the hack. Some have argued this is contra to the crypto ethos or would set a bad precedent, while others have argued that as a blockchain focused more on gaming and experimentation and less on decentralization and other facets of crypto ideology, it would be a reasonable step.</p><p>Some hours after the attack, the exploiter was convinced to return the funds.</p>

"Crypto game ‘Munchables’ on Blast exploited for $63M"

Munchables hack

"Munchables" crypto game exploited for $62.5&nbsp;million

Brothers Jonathan and Tanner Adam were charged with violating the antifraud provisions of the federal securities laws with their GCZ Global and Triten Financial Group entities, which the SEC alleges amounted to a $61.5&nbsp;million Ponzi scheme that impacted more than 80 victims. The brothers claimed to have a crypto arbitrage bot that would pull from investor funds to perform profitable trades that would earn them 8–13.5% returns. They claimed to investors that, short of a complete meltdown in global financial markets, their funds would be safe.<p>However, $53.9&nbsp;million of investor funds were used to pay other investors, in classic Ponzi fashion. The brothers also used investor funds to build houses for themselves and their family, purchase vehicles and designer goods, and make payments on a $30&nbsp;million condo in Miami for Tanner.</p><p>One of the brothers, Jonathan, had in 2004 been convicted on felony securities law violations that resulted in a four-year jail sentence and more than $300,000 in restitution.</p>

, U.S. Securities and Exchange Commission

"SEC Charges Brothers Jonathan and Tanner Adam with $60 Million Ponzi Scheme"

Adam brothers charged by SEC

Brothers charged by SEC for $60&nbsp;million "crypto bot" Ponzi scheme

Scam Sniffer's January 2024 report describes more than 40,000 victims who collectively lost more than $58&nbsp;million thanks to various phishing schemes on the Twitter platform.<p>The top seven victims collectively lost $17&nbsp;million, with the top victim alone losing $4.7&nbsp;million.</p>

"Scam Sniffer Report: $55 Million Stolen Due To Phishing In January"

January 2024 Twitter phishing

More than $58&nbsp;million stolen in Twitter phishing schemes in January

The Hong Kong-based BitForex cryptocurrency exchange has shut down access to its platform after a suspicious outflow of around $57&nbsp;million on several blockchains. Users who have tried to log in see a <a href="https://en.wikipedia.org/wiki/Cloudflare" target="_blank">CloudFlare</a> page explaining that they are blocked from accessing the website by CloudFlare's <a href="https://en.wikipedia.org/wiki/DDoS_mitigation" target="_blank">DDoS protection</a> service.<p>The withdrawals were first noticed by blockchain detective zachxbt, who also noted that the exchange has stopped processing withdrawals and has not been replying to customer support inquiries.</p><p>It seems likely that the outflows were an exit scam rather than an outside attack, particularly given the lack of communication and somewhat shady status of the exchange. The firm faced regulatory scrutiny in Japan in mid-2023 for operating without a license, and has been accused of inflating its trading volume. Its CEO resigned in January, but promised a new team would be taking over.</p>

"BitForex Website Goes Dark Amid Reported $57M Outflow"

"BitForex alleged $2.5 billion volume flatlines as exchange abruptly goes offline"

BitForex withdrawals

BitForex shuts off website after $57&nbsp;million withdrawal

The Hong Kong-based AAX cryptocurrency exchange <a href="https://www.web3isgoinggreat.com/?id=aax-cryptocurrency-exchange-suspends-withdrawals" target="_blank">suspended withdrawals</a> in November 2022, only days after the FTX collapse and related chaos in the cryptocurrency world. They claimed that user funds were safe, but the exchange never restored service. A month later, <a href="https://www.web3isgoinggreat.com/?id=police-arrest-two-executives-of-shuttered-aax-exchange" target="_blank">police arrested two of the company's executives</a>.<p>Now, over a year later, the Cyvers blockchain security firm has observed more than 24,000&nbsp;ETH (~$55.6&nbsp;million) has been moved from wallets used by the platform. Although there could be innocuous explanations for money moving off a defunct platform, whoever was moving the funds used various decentralized services to launder the money, appearing to be trying to make it more difficult to trace.</p>

AAX money movement

Over $55&nbsp;million taken from defunct AAX crypto exchange

Someone holding almost $55.5&nbsp;million in the DAI stablecoin was apparently phished, signing a transaction to reassign ownership of their DAI stash to a phishing address. The victim appeared to realize their error several hours later, attempting to withdraw the tokens only to have the transaction fail since they were no longer the owner of the assets.<p>The attacker later moved the stablecoins to a new wallet, and exchanged about half of them for 10,625&nbsp;ETH.</p>

Crypto holder loses over $55&nbsp;million to apparent phishing attack

Singaporean cryptocurrency exchange BingX suffered a $52&nbsp;million loss across a broad range of cryptocurrencies. The thefts occurred across two attacks that were hours apart. The attack appears to have targeted one of the exchange's <button class="define-target" id="hot-wallet">hot wallets</button>.<p>Some accused the exchange of trying to cover up the theft by announcing "temporary wallet maintenance" without disclosing that a theft had occurred. The team later announced that "there has been minor asset loss", and stated that the lost funds would be restored out of the company's capital.</p><p>Around $10&nbsp;million of the stolen assets were frozen during recovery efforts after the theft.</p>

"BingX 'minor' loss in suspected hack climbs to $52M"

"BingX dismisses $45m hack cover-up claims, restores deposits and withdrawals"

BingX hack

BingX hacked for $52&nbsp;million

The cryptocurrency lending project Radiant Capital was hacked for the second time in under a year, this time for more than $50&nbsp;million in the USDC <button class="define-target" id="stablecoin">stablecoin</button>, <button class="define-target" id="wrapped-token">w</button>BNB, ETH, and other tokens. An attacker successfully gained access to three of eleven private keys controlling a <button class="define-target" id="multisig">multisignature</button> wallet, which enabled them to upgrade the project's <button class="define-target" id="smart-contract">smart contracts</button> in such a way as to drain funds.<p>This is the second Radiant Capital exploit this year, after a <a href="https://www.web3isgoinggreat.com/?id=radiant-capital-hack" target="_blank">$4.5&nbsp;million theft in January</a> that was enabled by an unaddressed vulnerability in the underlying Compound Finance code.</p><p>The US and South Korean governments later attributed this attack on Radiant to North Korean state-sponsored attackers.</p>

"Radiant Capital Loses $50M to Second Blockchain Exploit This Year"

Radiant Capital hack #2

Radiant Capital exploited again, this time for at least $50&nbsp;million

Shan Hanes, the former CEO of the Kansas Heartland Tri-State Bank, was sentenced to 293&nbsp;months (24&nbsp;years, 5&nbsp;months) imprisonment after pleading guilty to embezzlement by a bank officer. Hanes had fallen for a "<button class="define-target" id="pig-butchering">pig butchering</button>" scam, where he believed he could earn returns by "investing" funds under the bank's control into a cryptocurrency scheme.<p>Between May and July of 2023, Hanes transferred $47.1&nbsp;million of the bank's funds to the fraudulent scheme. This ultimately led to the bank collapsing, with equity investors losing $9&nbsp;million and the FDIC footing the bill. "There were people who lost 70, 80% of their retirement" as a result of their investment losses, stated a community member.</p><p>Hanes had also taken money from a local church, an investment club, and his daughter's college savings. These funds were reportedly used to buy cryptocurrency after those running the scheme told him they needed more money to "unlock" the returns on his investments — a common tactic with these scams.</p>

, U.S. Attorney's Office, District of Kansas

"Former CEO of failed bank sentenced to prison"

"Cryptocurrency 'pig butchering' scam wrecks Kansas bank, sends ex-CEO to prison for 24 years"

Former CEO of Heartland Tri-State Bank sentenced to more than 24&nbsp;years in prison after putting bank funds into crypto scheme

Hedgey Finance, a platform used to manage token claims, lockups, and vesting, was hit with a <button class="define-target" id="flash-loan">flash loan</button> attack that drained $44.7&nbsp;million of customer funds from the platform.<p>The majority of assets were stolen from Hedgey on the Arbitrum <button class="define-target" id="layer-2">layer-2</button> network, although around $2.1&nbsp;million of them were stolen from the version deployed on the Ethereum mainnet.</p><p>Hedgey Finance confirmed the exploit, and sent an optimistic and congratulatory message on-chain: "Well done for finding it! We're assuming you executed this exploit as a <button class="define-target" id="white-hat">white hat</button>, so we'd like to get in touch with you to discuss next steps." No on-chain response thus far.</p>

Hedgey Finance hack

Hedgey Finance hacked for almost $45&nbsp;million

Scam Sniffer's February 2024 report describes 57,000 victims who collectively lost almost $47&nbsp;million thanks to various phishing schemes on the Twitter platform. Many of the losses came from accounts designed to impersonate various popular cryptocurrency projects, who diverted users to scam websites resembling the real ones.<p>The largest individual loss was the <a href="https://www.web3isgoinggreat.com/?id=kirilmeth-phishing" target="_blank">phishing attack against kirilm.eth</a>, who had over 180&nbsp;million $BEAM tokens notionally worth over $5&nbsp;million drained from their crypto wallet. The attacker sold the tokens for around $4.5&nbsp;million.</p><p>The total amount stolen is down slightly from <a href="https://www.web3isgoinggreat.com/?id=january-2024-twitter-phishing" target="_blank">January, in which $55&nbsp;million was taken</a>. Altogether, scammers have stolen over $100&nbsp;million via Twitter phishing alone in the first two months of 2024.</p> 

February 2024 Scam Sniffer Phishing Report

February 2024 Twitter phishing

Twitter phishers steal over $46&nbsp;million from 57,000 victims in February

NGS Crypto, which sold "crypto mining packages" to interested investors, has been put into receivership. The Australian firm encouraged customers to set up a self-managed super fund — a type of retirement fund — to achieve returns they said were powered by crypto mining. The firms advertised returns of up to 16% annually, and promised that investors would receive 100% of their initial investment back at the term's completion — even "in the unlikely event that crypto mining becomes unprofitable".<p>NGS and its associated business is believed to have pulled in around AU$62&nbsp;million (US$42&nbsp;million) from around 450 Australians.</p>

Australian NGS Crypto mining fund collapses

The South Korean blockchain gaming platform PlayDapp was hacked on February 9, and an attacker minted 200&nbsp;million $PLA tokens. These were notionally priced at around $36.5&nbsp;million, although because only 577&nbsp;million $PLA were in circulation before the unauthorized mint, there would not have been sufficient liquidity for the attacker to sell them at around that price.<p>Days after the initial attack, on February 12, the attacker minted another 1.59&nbsp;<i>billion</i> $PLA. This has led to news reports that the platform was exploited for "$290&nbsp;million". However, this value is being naively calculated based on the token price without taking into account the massive supply inflation, and ignoring that that dollar figure is more than 2.5x the total claimed market cap of the token. Even reputable outlets like <i>Bleeping Computer</i> have printed the figure in their headline (though <i>Bleeping Computer</i> later changed the headline to a more accurate one).</p><p>PlayDapp sent on-chain messages to the attacker, offering a bounty, but the offer was ignored.</p>

"PlayDapp exploit continues into 4th day, with losses reaching $290M"

"Hackers steal $290 million in crypto from PlayDapp gaming platform"

PlayDapp crypto gaming platform exploited, spurring misleading headlines

A project promising to build a decentralized casino managed to raise $33&nbsp;million, despite an anonymous team that had exhibited several instances of shady behavior throughout ZKasino's development. The project promised that everyone who <button class="define-target" id="bridge">bridged</button> ETH to their <button class="define-target" id="layer-2">layer-2</button> chain would be able to receive their ETH back 1:1 in thirty days.<p>Instead, the project's creators transferred those more than 10,500 ETH ($33&nbsp;million) to Lido, an Ethereum <button class="define-target" id="staking">staking</button> service. As for the "return" of funds, the project team indeed followed through with their promises to return the crypto... except instead of ETH, depositors received the project's native token, ZKAS, which would vest over a period of 15 months. The project announced that they had calculated the ZKAS distribution based on a discounted rate, "as a favour to our users who have bridged to participate in the ecosystem". Gee, thanks!</p><p>One investor in the project wrote, "We made a mistake investing in Zkasino early. ... [I]t sounds like a scam, but 95% of crypto consists of such crap. With memecoins pumping every day, people believe this could be the next one."</p><p>It seems that ZKasino's creators have links to other crypto scams, including a failed "ZigZagExchange", which raised around $15&nbsp;million that was allegedly misallocated to work on the ZKasino project. Crypto sleuth zachxbt had also described the team as "proven bad actors" in December, listing multiple instances in which they had avoided making promised payments.</p><p>After the rug pull, the project's planned IDO on Ape Terminal and AIT Launchpad were canceled, and MEXC (which had invested in the project's seed round) canceled the token listing.</p>

"ZKasino Users Plead for Refunds as $33M of Bridged Ether Sent to Lido"

"ZKasino launch leads to widespread outrage as $33 million promised to investors is sent to Lido"

ZKasino rug pull

ZKasino rug pulls after raising $33&nbsp;million

A victim lost 12,083 <button class="define-target" id="wrapped-token">spW</button>ETH tokens (~$32.4&nbsp;million) after signing a malicious transaction stemming from someone using <button class="define-target" id="drainer">wallet drainer</button> software. These drainers are "scam-as-a-service" products, where the drainer creators allow others to operate the drainer software in exchange for a 20% cut of stolen funds.<p>The victim wallet sent a message to the thief, offering "a peaceful resolution to this situation" in which the thief could keep 20% of the total amount taken (around $6.5&nbsp;million).</p>

"Crypto whale loses over $32 million in apparent phishing attack"

Victim loses over $32&nbsp;million to wallet drainer

After apparently exhausting all his other options, a trader has put out a call to "all skilled hackers and white hats out there" to help him recover 7,912&nbsp;Renzo staked ETH (ezETH) he inadvertently sent to an inaccessible address back in June. The tokens were priced at a little over $28&nbsp;million at the time, and are currently priced at a little less than $26&nbsp;million. According to the trader, he copied the wrong address to his clipboard before making the trade, which rendered his funds permanently inaccessible.<p>Short of finding a vulnerability in Renzo, the trader's only real choice is to plead with Renzo to change their <button class="define-target" id="smart-contract">smart contract</button> in such a way as to release the funds. While this is technically possible, Renzo has told the trader they could not grant his request due to "regulatory limitations".</p>

"Trader who lost $26M to copy-paste error says it’s been ‘max pain’"

qklpjeth copypaste

Trader reveals he lost $28&nbsp;million to bad copy-paste

The defi protocol Penpie was exploited for 11,113.6&nbsp;ETH (~$27.3&nbsp;million) by an attacker who exploited a flaw allowing them to withdraw unearned "rewards". Although the protocol claimed to have been <button class="define-target" id="audit">audited</button> by two blockchain security firms, they later disclosed that the <button class="define-target" id="smart-contract">smart contracts</button> containing the bugs had not been fully audited.<p>The team behind Pendle (the platform on which Pendie is built) detected the attack and paused Pendle an hour after the attack began, which they claim prevented another $105&nbsp;million from being stolen.</p><p>Members of the Penpie team filed complaints with Singaporean police and the US FBI. They also attempted to negotiate a "<button class="define-target" id="bug-bounty">bug bounty</button>" via on-chain and social media messages to the attacker, but the hacker seems uninterested and has continued to transfer funds between various crypto wallets and launder funds through Tornado Cash.</p>

Penpie hacked for $27.3&nbsp;million

The FixedFloat cryptocurrency exchange was exploited for around 409&nbsp;BTC (~$21.17&nbsp;million) and 1,728&nbsp;ETH (~$4.85&nbsp;million) for a total loss of just over $26&nbsp;million. FixedFloat is a <button class="define-target" id="dex">decentralized cryptocurrency exchange</button> that doesn't require user registration or <button class="define-target" id="kyc">Know Your Customer</button>, making it popular for hackers looking to launder stolen funds.<p>FixedFloat first wrote that they had "encountered some minor technical problems", then acknowledged that there had been a hack. FixedFloat is non-custodial, so no user funds were impacted, however some have reported frozen transactions and missing funds from using the service on social media.</p>

"FixedFloat confirms $26M exploit in Bitcoin, Ether"

FixedFloat hack #1

FixedFloat exchange hacked for $26&nbsp;million

The Thala Labs Aptos-based <button class="define-target" id="defi">defi</button> project suffered a $25.5&nbsp;million theft when an attacker exploited a vulnerability in one of their <button class="define-target" id="smart-contract">smart contracts</button>. They paused related smart contracts and <button class="define-target" id="freezing">froze</button> tokens where they were able, ultimately freezing around $11.5&nbsp;million in assets. After working with law enforcement and several blockchain security teams, they successfully negotiated the return of the assets, leaving the attacker with a "<button class="define-target" id="bug-bounty">bounty</button>" of $300,000.

"Thala recovers $25.5M in crypto lost  through v1 farming vulnerability"

Thala hack

Thala Labs loses, then recovers, $25.5&nbsp;million

Two brothers, Anton and James Peraire-Bueno, were indicted for a theft involving <button class="define-target" id="mev">MEV</button> — maximal extractable value. MEV involves previewing upcoming transactions on a blockchain and taking actions to extract additional profits — which can sometimes be substantial — based on that information.<p>According to the Justice Department, the Peraire-Buenos exploited a flaw in popular MEV software called "MEV-boost", which is used by most Ethereum <button class="define-target" id="validator">validators</button>. By creating their own validators and "bait transactions", they were able to trick MEV bots into proposing transactions involving illiquid cryptocurrencies, which the brothers then frontran. They were able to create false signatures that tricked a MEV-boost relay into releasing information about upcoming blocks that they were able to tamper with.</p><p>The brothers were charged with conspiracy to commit wire fraud, wire fraud, and conspiracy to commit money laundering, and face up to 20 years in prison for each charge.</p><p>The Justice Department is describing the case as a "first-of-its-kind manipulation of the Ethereum blockchain". The case is an interesting one, as some believe the practice of MEV itself exploits Ethereum users. Others believe anything you can do with code should be allowed — "code is law". However, by signing false transactions and tricking the relay into releasing private information, the brothers' actions do seem to go beyond simply making profits in a "code is law" Wild West, and into the realm of actual fraud.</p>

, press release by the U.S. Department of Justice

"Two Brothers Arrested for Attacking Ethereum Blockchain and Stealing $25M in Cryptocurrency"

Peraire-Bueno MEV indictment

Brothers indicted for $25&nbsp;million MEV bot exploit

STFIL, a protocol that promises liquid staking and "leverage mining" to holders of Filecoin's FIL token, announced on Twitter that "We believe that the STFIL core technical team is under investigation by local Chinese police."<p>According to STFIL, while some of the core team members were detained by Chinese police, FIL tokens were moved to an unknown wallet. They also acknowledged that there had been "abnormal, unscheduled upgrades to the protocol". They asked their community members for help in tracking the wallet.</p><p>Some speculated that the story was fake, and that the project had stolen the funds. However, Chinese police have in several instances cracked down on people and companies involved in Filecoin-related projects, including an <a href="https://www.web3isgoinggreat.com/?id=shenzhen-shikongyun-technology-scheme" target="_blank">$83.3 million alleged pyramid scheme</a> in August 2023 and a group of <a href="https://www.web3isgoinggreat.com/?id=filecoin-ponzi-scheme" target="_blank">Filecoin Ponzi schemers</a> in 2021. Filecoin mining became popular in China after its 2018 initial coin offering, and also became a magnet for Ponzi schemes and other scams.</p>

"Filecoin liquid staking platform STFIL claims team members under investigation by Chinese police"

STFIL investigation

$23&nbsp;million goes missing amid STFIL claims that they're being investigated

Gabriel Hay and Gavin Mayo, two LA-based NFT creators, have been charged for defrauding investors of more than $22.4&nbsp;million through a series of NFT rug pulls and other crypto scams. The duo launched various projects with detailed and false roadmaps to lure NFT buyers, then abandoned the projects without following through.<p>For example, a "Vault of Gems" NFT project falsely claimed to be the "first NFT pegged to a hard asset, like jewelry", which would have its own exchange. A "Faceless" NFT project promised to produce comic books, a movie, and a clothing company. None of the promises ever materialized, and Hay and Mayo abandoned the projects soon after launching them.</p><p>Hay and Mayo worked to hide their involvement with their scams, and have been charged with harassment for attempting to threaten those who connected them. In one case, after a person revealed Hay and Mayo to be the ones behind the Faceless NFT project, the duo sent threatening emails and text messages to the man and his parents. In an email to his parents, they impersonated a law firm, and even threatened to make false sexual abuse claims against the man.</p>

Hay and Mayo rug pull indictment

Two NFT fraudsters charged for rug pulls amounting to over $22&nbsp;million

The Indonesian Indodax cryptocurrency exchange suffered an exploit that allowed attackers to steal tokens from several of its <button class="define-target" id="hot-wallet">hot wallets</button>. The firm did not directly acknowledge the theft, instead posting an announcement that they had "discovered a potential security issue" and were "conducting a complete maintenance to ensure the entire system is operating properly". They reassured customers that their assets were "100% safe".<p>Indodax's Instagram account also appeared to be compromised, promoting a suspicious "giveaway".</p>

"Indonesian Crypto Exchange Indodax Hacked for $22M; Pauses Activity Before Bigger Hit"

Indodax hack

Indodax crypto exchange apparently hacked for at least $22&nbsp;million

Someone was able to mint 5&nbsp;billion $GALA tokens, the native token of the Gala Games blockchain gaming project. The tokens would be notionally worth around $200&nbsp;million based on their paper value, although such a massive amount wouldn't be sellable without impacting the token price. Furthermore, the Gala Games team was able to add the attacker's address to a blocklist shortly after the theft a few hours after the attack began, preventing them from swapping more of the tokens.<p>Altogether, the attacker was able to swap around $21&nbsp;million of the GALA tokens into ETH before the address was frozen.</p><p>The attacker was able to perform the exploit because they had access to a wallet with admin access to the Gala Games smart contract. It's not clear if the attacker is a rogue employee, or if an admin wallet was compromised.</p><p>As of writing, Gala Games has not publicly acknowledged the attack.</p>

Gala Games hack

Gala Games suffers $21&nbsp;million hack

DEXX, a platform that advertises itself as the "first <button class="define-target" id="memecoin">memecoins</button> trading terminal application", disclosed that it had been hacked when it posted a message on social media addressed to "Mr./Ms. Hacker", asking they return stolen funds in exchange for "destroy[ing] all information we currently have on the hack" and not pursuing further legal action.<p>DEXX did not disclose how much was taken in the breach, but hundreds of victims have reported around $21&nbsp;million in combined losses so far.</p>

DEXX losses

Around $21&nbsp;million in losses reported by users of DEXX

More than $20&nbsp;million in stablecoins and Ethereum were transferred from a wallet identified as belonging to the US government, and holding funds connected to the 2016 hack of the Bitfinex cryptocurrency exchange. While the government does occasionally shuffle cryptocurrency around, these funds were moved to a brand new wallet and then began to be shuffled through cryptocurrency exchanges — something that crypto sleuth zachxbt noted "looks nefarious".<p>The government has not made any statements regarding the movement of assets.</p><p>The following day, $19.3&nbsp;million in tokens were returned to the original wallet.</p>

"US Government Crypto Wallet Drained of $20 Million in Suspicious Transfers"

Possible US government theft

$20&nbsp;million moved from US government wallet in possible theft

Since March 5, those who used the Incognito Market darkweb narcotics marketplace have found themselves unable to withdraw the Bitcoin and Monero they had on the platform. It appeared the platform had exit scammed for somewhere between $10 and $30&nbsp;million.<p>Making matters worse, on March 10 the website posted a message reading, "Yes, this is an extortion !!" They wrote that, although the platform promised to "auto-encrypt" messages between buyers and sellers, and auto-delete after an expiry date, messages were not encrypted or deleted. They demanded that users pay an additional $100 to $20,000 to have their information removed from the dataset, which they promised to release at the end of May. "Whether or not you and your customers' info is on that list is totally up to you."</p><p>The tactic is reminiscent of that of ransomware groups, which often demand double fees: one from victims of hacks first to regain access to their systems, and another in exchange for a promise to destroy stolen data.</p>

Incognito Darknet Market Mass-Extorts Buyers, Sellers

Incognito Market exit scam

Incognito Market drug marketplace pulls multi-million dollar double scam

The Sonne Finance lending protocol was exploited for at least $20&nbsp;million as an attacker was able to exploit a vulnerability in some of their <button class="define-target" id="smart-contract">smart contracts</button>. Sonne is a <button class="define-target" id="fork">fork</button> of the Compound Finance project, which has known vulnerabilities that are sometimes not properly addressed by people who reuse the code — as has happened with <a href="https://www.web3isgoinggreat.com/?id=radiant-capital-hack" target="_blank">Radiant Capital</a> and <a href="https://www.web3isgoinggreat.com/?id=80-million-stolen-from-fei-protocol-and-rari" target="_blank">Rari</a>.<p>After being alerted to the theft by several security companies, Sonne announced they had paused the contract on the Optimism Ethereum <button class="define-target" id="layer-2">layer-2</button> chain.</p>

Sonne Finance hack

Sonne Finance hacked for at least $20&nbsp;million

The <button class="define-target" id="defi">defi</button> lending protocol UwU Lend was hacked for around $20&nbsp;million. After various blockchain security firms observed suspicious outflows of funds, the protocol acknowledged there had been a "situation" on their Twitter account, and wrote that they had paused the protocol while they were investigating.<p>UwU Lend was founded by Michael Patryn, aka Omar Dhanani, aka "0xSifu" — a co-founder of the ill-fated <a href="https://en.wikipedia.org/wiki/Quadriga_Fintech_Solutions" target="_blank">QuadrigaCX</a> exchange and ex-con. He also pseudonymously ran the defi cryptocurrency project Wonderland until his <a href="https://www.web3isgoinggreat.com/?id=wonderland-protocol-michael-patryn-sifu" target="_blank">identity was revealed</a> after the <a href="https://www.web3isgoinggreat.com/?id=cascading-liquidations-tank-wonderland-protocol-token-price" target="_blank">protocol suffered a meltdown</a>.</p>

UwU Lend hack #1

UwU Lend suffers almost $20&nbsp;million hack

Bahrain-based cryptocurrency exchange Rain was exploited for around $16.13&nbsp;million dollars on April 29. The exchange did not publicly disclose the hack until the suspicious outflows across <button class="define-target" id="wallet">wallets</button> on multiple blockchains were noticed by blockchain investigator zachxbt.<p>After zachxbt sounded the alarm on May 13, Rain admitted that they had had a "security incident", but stressed that customer funds were safe, and stated that the Rain Group had "covered any potential losses resulting from this incident".</p><p>The attack was later attributed to North Korean state-sponsored attackers.</p>

Rain hack

Rain cryptocurrency exchange hacked for $16.13&nbsp;million

Curio, a crypto project that creates tokens based on "real-world assets" (RWAs) like cars, watches, wine, and other goods, has suffered an attack that saw around $16&nbsp;million drained from the project's funds.<p>A bug in the project's Ethereum <button class="define-target" id="smart-contract">smart contract</button> enabled an attacker to mint 1&nbsp;billion of the project's CGT <button class="define-target" id="governance-token">governance token</button>. Although the tokens were notionally priced at around $40&nbsp;million, the loss to the project was estimated at closer to $16&nbsp;million.</p><p>Curio <button class="define-target" id="dao">DAO</button> announced that they intended to compensate users affected by the theft over a year-long period.</p>

"Hacker mints 1B tokens in $16M Curio smart contract exploit"

"CurioDAO Q1 2024 Exploit Recovery Strategy"

Curio hack

Curio RWA project suffers $16&nbsp;million exploit

The UAE-based M2 cryptocurrency exchange was hacked for $13.7&nbsp;million in bitcoin, ether, and Solana tokens. The exploiter compromised several of the exchange's <button class="define-target" id="hot-wallet">hot wallets</button> to take the funds.<p>Shortly after the theft, M2 acknowledged the hack and announced that "the situation has been fully resolved". This apparently involved M2 restoring customer funds from their own assets, rather than recovering the stolen assets.</p>

M2 hack

M2 cryptocurrency exchange hacked for $13.7&nbsp;million

RiskOnBlast, a gambling and trading platform on the new ethereum <button class="define-target" id="layer-2">layer-2</button> Blast blockchain, appears to have performed the blockchain's first major <button class="define-target" id="rug-pull">rug pull</button> — before the blockchain has even officially launched. Blast was created by the developers of the Blur NFT platform, and received funding from the Paradigm crypto VC.<p>The team behind Blast had even helped to promote the RiskOnBlast platform, tweeting from its official account that Blast was "a new challenger" in the ecosystem with "undeniable" potential.</p><p>On February 25, the platform drained more than 420&nbsp;ETH (~$1.3&nbsp;million) from more than 750 user wallets on their platform. The project's anonymous team then laundered the funds through various services and exchanges. All social media accounts for the project were taken offline.</p>

"Blast Ecosystem Sees First Apparent Scam as 'RiskOnBlast' Rug Pulls $1.3M Ether"

RiskOnBlast gambling platform rug pulls for $1.3&nbsp;million

The <button class="define-target" id="defi">defi</button> protocol Prisma Finance was hacked for 3,257&nbsp;ETH ($11.5&nbsp;million). An attacker was able to take advantage of a flaw in the project's <button class="define-target" id="smart-contract">smart contracts</button>, allowing them to manipulate users' positions and steal some of their collateral. Two other watchful attackers observed the attack strategy and replicated it, stealing a combined additional 173&nbsp;ETH (~$610,000).<p>Plasma paused the protocol after detecting the attack.</p><p>The first attacker, who stole the bulk of the assets, sent an on-chain message to Prisma claiming that they had performed a "whitehat rescue", and inquired about returning the funds. In later messages, however, they asked the project to answer questions about their security practices and projects' responsibilities to users to prevent attacks. The attacker then transferred the stolen funds to Tornado Cash — indicating their return is unlikely.</p><p>In another message, the attacker was angry that Prisma had not expressed gratitude to them or remorse to their users, and was angry they had used terms like "exploit" and "attack" in their description of the incident. They demanded that the team reveal their identities, apologize, and thank the attacker in an online press conference.</p>

"Prisma Finance Exploit - March 28, 2024 - Post-Mortem"

Prisma Finance hack

Prisma Finance hacked for $12&nbsp;million; attacker makes detailed demands

The Ronin bridge, which <button class="define-target" id="bridge">bridges</button> crypto assets to the Ronin Network used by <i>Axie Infinity</i> and other gaming projects, has once again suffered a breach — though a considerably smaller one than the <a href="https://www.web3isgoinggreat.com/?id=axie-infinity-suffers-625-million-exploit" target="_blank">recordbreaking $625&nbsp;million theft</a> in March 2022. An update to the bridge code introduced a flaw with respect to how transactions were confirmed.<p>Fortunately for the Ronin team, it seems that most of the losses actually went to <button class="define-target" id="whitehat">whitehats</button> and <button class="define-target" id="mev">MEV</button> bots that were frontrunning transactions by would-be exploiters. ETH and USDC priced at around $12&nbsp;million were taken — the maximum amount before triggering a safety feature in the code. Later that day, Ronin announced that the ETH (worth around $10&nbsp;million) had been returned, and that the USDC was in the process of being returned. They also announced that they would reward the whitehats with a $500,000 bug bounty reward.</p><p>The Ronin bridge was taken offline shortly after the flaw was detected, and the team announced it would undergo an audit before being brought back online.</p>

"New Ronin Bridge hack down to dodgy upgrade, team banks on 'white hat' op"

"Ronin Bridge Paused, Restarted After $12M Drained in Whitehat Hack"

$12&nbsp;million taken by whitehats from Ronin bridge

The Fantom-based Polter Finance <button class="define-target" id="defi">defi</button> project was exploited for $7&nbsp;million when an attacker was able to perform an <button class="define-target" id="oracle-manipulation">oracle manipulation</button> attack. By artificially increasing the price of the $BOO token, which is a governance token used by the SpookySwap project, they were then able to use that token to drain Polter's <button class="define-target" id="liquidity-pool">liquidity pools</button> using a <button class="define-target" id="flash-loan">flash loan</button>. The attacker successfully drained the entire $12&nbsp;million worth of tokens on the platform.<p>The creator of the platform stated that they had filed a police report with Singaporean authorities. They also attempted to contact the hacker via on-chain message to negotiate the return of funds, but have not received a response.</p>

"Crypto lender Polter Finance halts operations after $12M hack"

Polter Finance hack

Polter Finance exploited for $12&nbsp;million

Have you ever gone out to karaoke and thought "man, the only thing missing from this perfect night is a blockchain"? No? Weird.<p>Anyway, the South Korean Somesing platform — which is really more of a TikTok-but-just-for-song-covers clone than anything to do with karaoke — suffered a breach in which 730&nbsp;million SSX tokens were stolen. These tokens are nominally priced at around $11.5&nbsp;million, but around 2/3 of the stolen tokens were as yet undistributed and not a part of the circulating supply.</p>

"South Korea's crypto karaoke platform hacked for over $11.5 million"

"Emergency notice following the hacking incident of SSX tokens"

Somesing hack

Korean crypto karaoke platform Somesing hacked

A victim lost $11&nbsp;million in Aave Ethereum (aEthMK) and Pendle USDe tokens after signing several <button class="define-target" id="permit-phishing">permit phishing</button> signatures. Permit phishing is a technique in which scammers convince a victim to sign a transaction that grants broad permissions, allowing the scammer to then drain assets from the wallets.

0xfb94d theft

Victim loses $11&nbsp;million to permit phishing

People have gotten really into <button class="define-target" id="memecoin">memecoin</button> trading on Solana recently. Like <i>really</i> into it. Someone decided they'd hop on the bandwagon with "Slerf", a sloth-themed memecoin they said would launch with a 50% presale.<p>Thanks to the aforementioned frenzy, the project managed to raise $10&nbsp;million in the presale. However, things went sideways when the developer accidentally <button class="define-target" id="burn">burned</button> the $10&nbsp;million by sending them to an address where they would be permanently inaccessible. "oh fuck", the developer wrote ominously on Twitter, before explaining their mistake.</p><p>Some speculated that the screwup may have been a marketing ploy, in which case it was very successful, because the token went on to post more than $2.7&nbsp;billion in trading volume over a 24-hour period — more than the entire ETH trading volume in that period. The monumental error by the developers seemed to have no damper on the overall frenzy around memecoins, or even produced the opposite effect.</p><p>Surely this trend won't end badly.</p>

"Solana Meme Coin Slerf Clocks Higher Trading Volume Than All of Ethereum"

Event	Date	Amount More info	Recovered More info
NovaTech and AWS Mining crypto pyramid schemes	June 6, 2024	$1,000,000,000
DMM Bitcoin loss	May 31, 2024	$308,000,000
Gemini phishing attack	September 19, 2024	$243,000,000	$500,000
WazirX hack	July 18, 2024	$235,000,000
Chris Larsen XRP theft	January 31, 2024	$112,500,000	$4,200,000
OmegaPro founder arrested	July 9, 2024	$103,000,000
Myanmar-based pig-butchering scam	February 25, 2024	$100,000,000
BtcTurk exploit	June 22, 2024	$90,000,000	$5,300,000
Crypto scam money launderers charged for laundering more than $73 million through Deltec	May 17, 2024	$73,000,000
0x1E227 address poisoning	May 3, 2024	$72,700,000	$65,500,000
DCA Fund collapse	April 12, 2024	$65,000,000
Munchables hack	March 26, 2024	$62,500,000	$62,500,000
Adam brothers charged by SEC	August 26, 2024	$60,000,000
January 2024 Twitter phishing	January 31, 2024	$58,324,698
BitForex withdrawals	February 26, 2024	$57,000,000
AAX money movement	February 20, 2024	$55,600,000
Crypto holder loses over $55 million to apparent phishing attack	August 20, 2024	$55,473,618
BingX hack	September 20, 2024	$52,000,000	$10,000,000
Radiant Capital hack #2	October 16, 2024	$50,000,000
Former CEO of Heartland Tri-State Bank sentenced to more than 24 years in prison after putting bank funds into crypto scheme	August 19, 2024	$47,100,000
Hedgey Finance hack	April 19, 2024	$44,700,000
February 2024 Twitter phishing	March 10, 2024	$42,363,781
Australian NGS Crypto mining fund collapses	April 12, 2024	$42,000,000
PlayDapp crypto gaming platform exploited, spurring misleading headlines	February 9, 2024	$20,000,000 – $36,500,000
ZKasino rug pull	April 20, 2024	$33,000,000
Victim loses over $32 million to wallet drainer	September 28, 2024	$32,000,000
qklpjeth copypaste	November 10, 2024	$28,127,000
Penpie hacked for $27.3 million	September 3, 2024	$27,348,259
FixedFloat hack #1	February 18, 2024	$26,100,000
Thala hack	November 15, 2024	$25,500,000	$25,200,000
Peraire-Bueno MEV indictment	May 15, 2024	$25,000,000
STFIL investigation	April 9, 2024	$23,000,000
Hay and Mayo rug pull indictment	December 18, 2024	$22,400,000
Indodax hack	September 10, 2024	$22,000,000
Gala Games hack	May 20, 2024	$21,451,000
DEXX losses	November 16, 2024	$21,000,000
Possible US government theft	October 24, 2024	$20,500,000	$1,930,000
Incognito Market exit scam	March 11, 2024	$10,000,000 – $30,000,000
Sonne Finance hack	May 14, 2024	$20,000,000
UwU Lend hack #1	June 10, 2024	$20,000,000
Rain hack	April 29, 2024	$16,130,000
Curio hack	March 25, 2024	$16,000,000
M2 hack	October 31, 2024	$13,700,000
RiskOnBlast gambling platform rug pulls for $1.3 million	February 25, 2024	$13,250,000
Prisma Finance hack	March 28, 2024	$12,000,000
$12 million taken by whitehats from Ronin bridge	August 6, 2024	$12,000,000	$11,500,000
Polter Finance hack	November 16, 2024	$12,000,000
Somesing hack	January 27, 2024	$11,580,000
0xfb94d theft	June 23, 2024	$11,000,000
Slerf memecoin meltdown only adds to mania	March 18, 2024	$10,000,000