Blockchain sleuth zachxbt noticed the strange movement of around 213&nbsp;million XRP, the native token for the Ripple project. These tokens were priced at around $112.5&nbsp;million at the time of the theft. He originally identified the source of funds as Ripple itself, though Ripple CEO Chris Larsen later went on Twitter to claim that the funds that were stolen had come from his personal wallets and not from wallets belonging to the Ripple project.<p>Larsen attempted to downplay the massive theft, claiming repeatedly that the theft did not represent a threat to Ripple itself, and trying to reassure people that Ripple wallets are still safe. However, fears over a threat to Ripple itself and the true separation between Larsen's wallets and those belonging to the Ripple project continued, and XRP dipped around 5% on the news.</p>

"Hackers steal $112 million of XRP Ripple cryptocurrency"

Chris Larsen XRP theft

$112.5&nbsp;million in XRP stolen from Ripple CEO Chris Larsen

A <button class="define-target" id="pig-butchering">pig-butchering</button> operation in Myanmar has scammed victims of more than $100&nbsp;million in <a href="https://www.web3isgoinggreat.com/?collection=tether" target="_blank">Tether</a> in less than two years, according to a report from Chainalysis and the anti-human trafficking organization <a href="https://en.wikipedia.org/wiki/International_Justice_Mission" target="_blank">International Justice Mission</a>.<p>Many of the workers for the romance scam group are themselves victims of human trafficking. The operation is based in a "compound" near Myanmar's border with Thailand, and researchers estimate that thousands of trafficked workers operate the scam from the "self-contained city".</p><p>The scam may put more pressure on Tether, whose role in human trafficking and high-volume romance scam operations has been scrutinized more heavily in recent months and years. Tether has frozen some assets belonging to romance scammers in the past, but remains the token of choice for many of these groups.</p>

"$100mn in crypto payments traced to Myanmar-based 'scammers'"

Myanmar-based pig-butchering scam

Myanmar-based romance scam operation pulls in $100&nbsp;million in less than two years

An Ethereum <button class="define-target" id="wallet">wallet</button> was apparently drained of 1,155&nbsp;<button class="define-target" id="wrapped-token">wrapped</button> bitcoin (~$72.7&nbsp;million) when they transferred it to a malicious address that had been operating an <button class="define-target" id="address-poisoning">address poisoning</button> scheme.<p>Address poisoning is a scam tactic that takes advantage of crypto traders' tendencies to copy and paste wallet <button class="define-target" id="address">addresses</button> from their transaction histories, since the addresses are long strings of characters that are not practical to type from memory. By creating a new wallet address with identical start and/or ending character strings to addresses used by the victim, and spamming the victim with transactions from that similar address, scammers are sometimes able to get victims to erroneously copy the spoofed address for future transfers.</p><p>That's what appears to have happened in this case, when a victim transferred 1,155 wrapped bitcoin — tokens pegged to the bitcoin price meant for use on the Ethereum blockchain — to the malicious address.</p><p>The victim and the exploiter later reached an agreement for the return of most of the funds, with the exploiter keeping $7.2&nbsp;million as a "<button class="define-target" id="bug-bounty">bounty</button>".</p>

0x1E227 address poisoning

Wallet loses over $72&nbsp;million to address poisoning

Liquidators have been appointed for three cryptocurrency companies owned by Ash Balanian. DCA Capital, Digital Commodity Assets, and the Digital Commodity Assets Fund have all entered liquidation after investors raised red flags about the fund's management and licensure.<p>So far, losses are estimated to affect around 100 investors, who have up to AU$100&nbsp;million (US$65&nbsp;million) in claims.</p><p>Balanian had boasted of his career experience as a former NASA mission planner, and targeted his fund to wealthy investors with a minimum initial deposit of AU$50,000 (~US$33,000).</p>

"Up to $150 million at risk as two Australian bitcoin schemes go bust"

DCA Fund collapse

Australian DCA Fund collapses with up to $65&nbsp;million owed to creditors

The "Munchables" crypto game explains: "Schnibbles grow on every realm across the Munchable's world. Each realm has their own unique and distinctive schniblet, and the Munchables react differently based on their compatibility to the schniblets fed to them. When creating an account for the Munchables, you must choose the location of your snuggery." Right then.<p>Things went awry in the land of the schnibbles and snuggeries when an attacker siphoned around 17,400&nbsp;ETH ($62.5&nbsp;million). Various descriptions of the attack circulated, with blockchain sleuth zachxbt attributing it to a recently hired developer, and crypto developer 0xQuit claiming the theft appeared to have been "planned since deploy".</p><p>Some began discussing the possibility that the Blast layer-2 blockchain might forcibly roll back the chain to "undo" the hack. Some have argued this is contra to the crypto ethos or would set a bad precedent, while others have argued that as a blockchain focused more on gaming and experimentation and less on decentralization and other facets of crypto ideology, it would be a reasonable step.</p><p>Some hours after the attack, the exploiter was convinced to return the funds.</p>

"Crypto game ‘Munchables’ on Blast exploited for $63M"

Munchables hack

"Munchables" crypto game exploited for $62.5&nbsp;million

Scam Sniffer's January 2024 report describes more than 40,000 victims who collectively lost more than $58&nbsp;million thanks to various phishing schemes on the Twitter platform.<p>The top seven victims collectively lost $17&nbsp;million, with the top victim alone losing $4.7&nbsp;million.</p>

"Scam Sniffer Report: $55 Million Stolen Due To Phishing In January"

January 2024 Twitter phishing

More than $58&nbsp;million stolen in Twitter phishing schemes in January

The Hong Kong-based BitForex cryptocurrency exchange has shut down access to its platform after a suspicious outflow of around $57&nbsp;million on several blockchains. Users who have tried to log in see a <a href="https://en.wikipedia.org/wiki/Cloudflare" target="_blank">CloudFlare</a> page explaining that they are blocked from accessing the website by CloudFlare's <a href="https://en.wikipedia.org/wiki/DDoS_mitigation" target="_blank">DDoS protection</a> service.<p>The withdrawals were first noticed by blockchain detective zachxbt, who also noted that the exchange has stopped processing withdrawals and has not been replying to customer support inquiries.</p><p>It seems likely that the outflows were an exit scam rather than an outside attack, particularly given the lack of communication and somewhat shady status of the exchange. The firm faced regulatory scrutiny in Japan in mid-2023 for operating without a license, and has been accused of inflating its trading volume. Its CEO resigned in January, but promised a new team would be taking over.</p>

"BitForex Website Goes Dark Amid Reported $57M Outflow"

"BitForex alleged $2.5 billion volume flatlines as exchange abruptly goes offline"

BitForex withdrawals

BitForex shuts off website after $57&nbsp;million withdrawal

The Hong Kong-based AAX cryptocurrency exchange <a href="https://www.web3isgoinggreat.com/?id=aax-cryptocurrency-exchange-suspends-withdrawals" target="_blank">suspended withdrawals</a> in November 2022, only days after the FTX collapse and related chaos in the cryptocurrency world. They claimed that user funds were safe, but the exchange never restored service. A month later, <a href="https://www.web3isgoinggreat.com/?id=police-arrest-two-executives-of-shuttered-aax-exchange" target="_blank">police arrested two of the company's executives</a>.<p>Now, over a year later, the Cyvers blockchain security firm has observed more than 24,000&nbsp;ETH (~$55.6&nbsp;million) has been moved from wallets used by the platform. Although there could be innocuous explanations for money moving off a defunct platform, whoever was moving the funds used various decentralized services to launder the money, appearing to be trying to make it more difficult to trace.</p>

AAX money movement

Over $55&nbsp;million taken from defunct AAX crypto exchange

Hedgey Finance, a platform used to manage token claims, lockups, and vesting, was hit with a <button class="define-target" id="flash-loan">flash loan</button> attack that drained $44.7&nbsp;million of customer funds from the platform.<p>The majority of assets were stolen from Hedgey on the Arbitrum <button class="define-target" id="layer-2">layer-2</button> network, although around $2.1&nbsp;million of them were stolen from the version deployed on the Ethereum mainnet.</p><p>Hedgey Finance confirmed the exploit, and sent an optimistic and congratulatory message on-chain: "Well done for finding it! We're assuming you executed this exploit as a <button class="define-target" id="white-hat">white hat</button>, so we'd like to get in touch with you to discuss next steps." No on-chain response thus far.</p>

Hedgey Finance hack

Hedgey Finance hacked for almost $45&nbsp;million

Scam Sniffer's February 2024 report describes 57,000 victims who collectively lost almost $47&nbsp;million thanks to various phishing schemes on the Twitter platform. Many of the losses came from accounts designed to impersonate various popular cryptocurrency projects, who diverted users to scam websites resembling the real ones.<p>The largest individual loss was the <a href="https://www.web3isgoinggreat.com/?id=kirilmeth-phishing" target="_blank">phishing attack against kirilm.eth</a>, who had over 180&nbsp;million $BEAM tokens notionally worth over $5&nbsp;million drained from their crypto wallet. The attacker sold the tokens for around $4.5&nbsp;million.</p><p>The total amount stolen is down slightly from <a href="https://www.web3isgoinggreat.com/?id=january-2024-twitter-phishing" target="_blank">January, in which $55&nbsp;million was taken</a>. Altogether, scammers have stolen over $100&nbsp;million via Twitter phishing alone in the first two months of 2024.</p> 

February 2024 Scam Sniffer Phishing Report

February 2024 Twitter phishing

Twitter phishers steal over $46&nbsp;million from 57,000 victims in February

NGS Crypto, which sold "crypto mining packages" to interested investors, has been put into receivership. The Australian firm encouraged customers to set up a self-managed super fund — a type of retirement fund — to achieve returns they said were powered by crypto mining. The firms advertised returns of up to 16% annually, and promised that investors would receive 100% of their initial investment back at the term's completion — even "in the unlikely event that crypto mining becomes unprofitable".<p>NGS and its associated business is believed to have pulled in around AU$62&nbsp;million (US$42&nbsp;million) from around 450 Australians.</p>

Australian NGS Crypto mining fund collapses

The South Korean blockchain gaming platform PlayDapp was hacked on February 9, and an attacker minted 200&nbsp;million $PLA tokens. These were notionally priced at around $36.5&nbsp;million, although because only 577&nbsp;million $PLA were in circulation before the unauthorized mint, there would not have been sufficient liquidity for the attacker to sell them at around that price.<p>Days after the initial attack, on February 12, the attacker minted another 1.59&nbsp;<i>billion</i> $PLA. This has led to news reports that the platform was exploited for "$290&nbsp;million". However, this value is being naively calculated based on the token price without taking into account the massive supply inflation, and ignoring that that dollar figure is more than 2.5x the total claimed market cap of the token. Even reputable outlets like <i>Bleeping Computer</i> have printed the figure in their headline (though <i>Bleeping Computer</i> later changed the headline to a more accurate one).</p><p>PlayDapp sent on-chain messages to the attacker, offering a bounty, but the offer was ignored.</p>

"PlayDapp exploit continues into 4th day, with losses reaching $290M"

"Hackers steal $290 million in crypto from PlayDapp gaming platform"

PlayDapp crypto gaming platform exploited, spurring misleading headlines

A project promising to build a decentralized casino managed to raise $33&nbsp;million, despite an anonymous team that had exhibited several instances of shady behavior throughout ZKasino's development. The project promised that everyone who <button class="define-target" id="bridge">bridged</button> ETH to their <button class="define-target" id="layer-2">layer-2</button> chain would be able to receive their ETH back 1:1 in thirty days.<p>Instead, the project's creators transferred those more than 10,500 ETH ($33&nbsp;million) to Lido, an Ethereum <button class="define-target" id="staking">staking</button> service. As for the "return" of funds, the project team indeed followed through with their promises to return the crypto... except instead of ETH, depositors received the project's native token, ZKAS, which would vest over a period of 15 months. The project announced that they had calculated the ZKAS distribution based on a discounted rate, "as a favour to our users who have bridged to participate in the ecosystem". Gee, thanks!</p><p>One investor in the project wrote, "We made a mistake investing in Zkasino early. ... [I]t sounds like a scam, but 95% of crypto consists of such crap. With memecoins pumping every day, people believe this could be the next one."</p><p>It seems that ZKasino's creators have links to other crypto scams, including a failed "ZigZagExchange", which raised around $15&nbsp;million that was allegedly misallocated to work on the ZKasino project. Crypto sleuth zachxbt had also described the team as "proven bad actors" in December, listing multiple instances in which they had avoided making promised payments.</p><p>After the rug pull, the project's planned IDO on Ape Terminal and AIT Launchpad were canceled, and MEXC (which had invested in the project's seed round) canceled the token listing.</p>

"ZKasino Users Plead for Refunds as $33M of Bridged Ether Sent to Lido"

"ZKasino launch leads to widespread outrage as $33 million promised to investors is sent to Lido"

ZKasino rug pull

ZKasino rug pulls after raising $33&nbsp;million

The FixedFloat cryptocurrency exchange was exploited for around 409&nbsp;BTC (~$21.17&nbsp;million) and 1,728&nbsp;ETH (~$4.85&nbsp;million) for a total loss of just over $26&nbsp;million. FixedFloat is a <button class="define-target" id="dex">decentralized cryptocurrency exchange</button> that doesn't require user registration or <button class="define-target" id="kyc">Know Your Customer</button>, making it popular for hackers looking to launder stolen funds.<p>FixedFloat first wrote that they had "encountered some minor technical problems", then acknowledged that there had been a hack. FixedFloat is non-custodial, so no user funds were impacted, however some have reported frozen transactions and missing funds from using the service on social media.</p>

"FixedFloat confirms $26M exploit in Bitcoin, Ether"

FixedFloat hack #1

FixedFloat exchange hacked for $26&nbsp;million

Two brothers, Anton and James Peraire-Bueno, were indicted for a theft involving <button class="define-target" id="mev">MEV</button> — maximal extractable value. MEV involves previewing upcoming transactions on a blockchain and taking actions to extract additional profits — which can sometimes be substantial — based on that information.<p>According to the Justice Department, the Peraire-Buenos exploited a flaw in popular MEV software called "MEV-boost", which is used by most Ethereum <button class="define-target" id="validator">validators</button>. By creating their own validators and "bait transactions", they were able to trick MEV bots into proposing transactions involving illiquid cryptocurrencies, which the brothers then frontran. They were able to create false signatures that tricked a MEV-boost relay into releasing information about upcoming blocks that they were able to tamper with.</p><p>The brothers were charged with conspiracy to commit wire fraud, wire fraud, and conspiracy to commit money laundering, and face up to 20 years in prison for each charge.</p><p>The Justice Department is describing the case as a "first-of-its-kind manipulation of the Ethereum blockchain". The case is an interesting one, as some believe the practice of MEV itself exploits Ethereum users. Others believe anything you can do with code should be allowed — "code is law". However, by signing false transactions and tricking the relay into releasing private information, the brothers' actions do seem to go beyond simply making profits in a "code is law" Wild West, and into the realm of actual fraud.</p>

, press release by the U.S. Department of Justice

"Two Brothers Arrested for Attacking Ethereum Blockchain and Stealing $25M in Cryptocurrency"

Peraire-Bueno MEV indictment

Brothers indicted for $25&nbsp;million MEV bot exploit

STFIL, a protocol that promises liquid staking and "leverage mining" to holders of Filecoin's FIL token, announced on Twitter that "We believe that the STFIL core technical team is under investigation by local Chinese police."<p>According to STFIL, while some of the core team members were detained by Chinese police, FIL tokens were moved to an unknown wallet. They also acknowledged that there had been "abnormal, unscheduled upgrades to the protocol". They asked their community members for help in tracking the wallet.</p><p>Some speculated that the story was fake, and that the project had stolen the funds. However, Chinese police have in several instances cracked down on people and companies involved in Filecoin-related projects, including an <a href="https://www.web3isgoinggreat.com/?id=shenzhen-shikongyun-technology-scheme" target="_blank">$83.3 million alleged pyramid scheme</a> in August 2023 and a group of <a href="https://www.web3isgoinggreat.com/?id=filecoin-ponzi-scheme" target="_blank">Filecoin Ponzi schemers</a> in 2021. Filecoin mining became popular in China after its 2018 initial coin offering, and also became a magnet for Ponzi schemes and other scams.</p>

"Filecoin liquid staking platform STFIL claims team members under investigation by Chinese police"

STFIL investigation

$23&nbsp;million goes missing amid STFIL claims that they're being investigated

Since March 5, those who used the Incognito Market darkweb narcotics marketplace have found themselves unable to withdraw the Bitcoin and Monero they had on the platform. It appeared the platform had exit scammed for somewhere between $10 and $30&nbsp;million.<p>Making matters worse, on March 10 the website posted a message reading, "Yes, this is an extortion !!" They wrote that, although the platform promised to "auto-encrypt" messages between buyers and sellers, and auto-delete after an expiry date, messages were not encrypted or deleted. They demanded that users pay an additional $100 to $20,000 to have their information removed from the dataset, which they promised to release at the end of May. "Whether or not you and your customers' info is on that list is totally up to you."</p><p>The tactic is reminiscent of that of ransomware groups, which often demand double fees: one from victims of hacks first to regain access to their systems, and another in exchange for a promise to destroy stolen data.</p>

Incognito Darknet Market Mass-Extorts Buyers, Sellers

Incognito Market exit scam

Incognito Market drug marketplace pulls multi-million dollar double scam

The Sonne Finance lending protocol was exploited for at least $20&nbsp;million as an attacker was able to exploit a vulnerability in some of their <button class="define-target" id="smart-contract">smart contracts</button>. Sonne is a <button class="define-target" id="fork">fork</button> of the Compound Finance project, which has known vulnerabilities that are sometimes not properly addressed by people who reuse the code — as has happened with <a href="https://www.web3isgoinggreat.com/?id=radiant-capital-hack" target="_blank">Radiant Capital</a> and <a href="https://www.web3isgoinggreat.com/?id=80-million-stolen-from-fei-protocol-and-rari" target="_blank">Rari</a>.<p>After being alerted to the theft by several security companies, Sonne announced they had paused the contract on the Optimism Ethereum <button class="define-target" id="layer-2">layer-2</button> chain.</p>

Sonne Finance hack

Sonne Finance hacked for at least $20&nbsp;million

Curio, a crypto project that creates tokens based on "real-world assets" (RWAs) like cars, watches, wine, and other goods, has suffered an attack that saw around $16&nbsp;million drained from the project's funds.<p>A bug in the project's Ethereum <button class="define-target" id="smart-contract">smart contract</button> enabled an attacker to mint 1&nbsp;billion of the project's CGT <button class="define-target" id="governance-token">governance token</button>. Although the tokens were notionally priced at around $40&nbsp;million, the loss to the project was estimated at closer to $16&nbsp;million.</p><p>Curio <button class="define-target" id="dao">DAO</button> announced that they intended to compensate users affected by the theft over a year-long period.</p>

"Hacker mints 1B tokens in $16M Curio smart contract exploit"

"CurioDAO Q1 2024 Exploit Recovery Strategy"

Curio hack

Curio RWA project suffers $16&nbsp;million exploit

Bahrain-based cryptocurrency exchange Rain was exploited for around $14.8&nbsp;million dollars on April 29. The exchange did not publicly disclose the hack until the suspicious outflows across <button class="define-target" id="wallet">wallets</button> on multiple blockchains were noticed by blockchain investigator zachxbt.<p>After zachxbt sounded the alarm on May 13, Rain admitted that they had had a "security incident", but stressed that customer funds were safe, and stated that the Rain Group had "covered any potential losses resulting from this incident".</p>

Rain cryptocurrency exchange hacked for $14.8&nbsp;million

RiskOnBlast, a gambling and trading platform on the new ethereum <button class="define-target" id="layer-2">layer-2</button> Blast blockchain, appears to have performed the blockchain's first major <button class="define-target" id="rug-pull">rug pull</button> — before the blockchain has even officially launched. Blast was created by the developers of the Blur NFT platform, and received funding from the Paradigm crypto VC.<p>The team behind Blast had even helped to promote the RiskOnBlast platform, tweeting from its official account that Blast was "a new challenger" in the ecosystem with "undeniable" potential.</p><p>On February 25, the platform drained more than 420&nbsp;ETH (~$1.3&nbsp;million) from more than 750 user wallets on their platform. The project's anonymous team then laundered the funds through various services and exchanges. All social media accounts for the project were taken offline.</p>

"Blast Ecosystem Sees First Apparent Scam as 'RiskOnBlast' Rug Pulls $1.3M Ether"

RiskOnBlast gambling platform rug pulls for $1.3&nbsp;million

The <button class="define-target" id="defi">defi</button> protocol Prisma Finance was hacked for 3,257&nbsp;ETH ($11.5&nbsp;million). An attacker was able to take advantage of a flaw in the project's <button class="define-target" id="smart-contract">smart contracts</button>, allowing them to manipulate users' positions and steal some of their collateral. Two other watchful attackers observed the attack strategy and replicated it, stealing a combined additional 173&nbsp;ETH (~$610,000).<p>Plasma paused the protocol after detecting the attack.</p><p>The first attacker, who stole the bulk of the assets, sent an on-chain message to Prisma claiming that they had performed a "whitehat rescue", and inquired about returning the funds. In later messages, however, they asked the project to answer questions about their security practices and projects' responsibilities to users to prevent attacks. The attacker then transferred the stolen funds to Tornado Cash — indicating their return is unlikely.</p><p>In another message, the attacker was angry that Prisma had not expressed gratitude to them or remorse to their users, and was angry they had used terms like "exploit" and "attack" in their description of the incident. They demanded that the team reveal their identities, apologize, and thank the attacker in an online press conference.</p>

"Prisma Finance Exploit - March 28, 2024 - Post-Mortem"

Prisma Finance hack

Prisma Finance hacked for $12&nbsp;million; attacker makes detailed demands

Have you ever gone out to karaoke and thought "man, the only thing missing from this perfect night is a blockchain"? No? Weird.<p>Anyway, the South Korean Somesing platform — which is really more of a TikTok-but-just-for-song-covers clone than anything to do with karaoke — suffered a breach in which 730&nbsp;million SSX tokens were stolen. These tokens are nominally priced at around $11.5&nbsp;million, but around 2/3 of the stolen tokens were as yet undistributed and not a part of the circulating supply.</p>

"South Korea's crypto karaoke platform hacked for over $11.5 million"

"Emergency notice following the hacking incident of SSX tokens"

Somesing hack

Korean crypto karaoke platform Somesing hacked

People have gotten really into <button class="define-target" id="memecoin">memecoin</button> trading on Solana recently. Like <i>really</i> into it. Someone decided they'd hop on the bandwagon with "Slerf", a sloth-themed memecoin they said would launch with a 50% presale.<p>Thanks to the aforementioned frenzy, the project managed to raise $10&nbsp;million in the presale. However, things went sideways when the developer accidentally <button class="define-target" id="burn">burned</button> the $10&nbsp;million by sending them to an address where they would be permanently inaccessible. "oh fuck", the developer wrote ominously on Twitter, before explaining their mistake.</p><p>Some speculated that the screwup may have been a marketing ploy, in which case it was very successful, because the token went on to post more than $2.7&nbsp;billion in trading volume over a 24-hour period — more than the entire ETH trading volume in that period. The monumental error by the developers seemed to have no damper on the overall frenzy around memecoins, or even produced the opposite effect.</p><p>Surely this trend won't end badly.</p>

"Solana Meme Coin Slerf Clocks Higher Trading Volume Than All of Ethereum"

Slerf memecoin meltdown only adds to mania

The LENX cross-chain bitcoin liquidity protocol has recently been accused of a $10&nbsp;million <button class="define-target" id="rug-pull">rug pull</button> after community members observed massive withdrawals of treasury funds which were then sent to Binance accounts.<p>One of the co-founders, known only as "Paul", claimed on Discord that he was "trying to investigate" the movement of funds, which have been blamed on the project's other co-founder, John Kim.</p><p>Conversations on Discord suggest that a remaining $3&nbsp;million in treasury funds were protected, and that the remaining LENX team may have been able to convince Binance to freeze the account that received stolen funds. However, little has been verifiably confirmed to date.</p><p>LENX is backed by the Frax Finance lending protocol.</p>

"Unexplained transfers on LENX protocol spark rug pull concerns"

LENX rug pull

LENX co-founder accused of $10&nbsp;million rug pull

Jeff "Jihoz" Zirlin, a co-founder of the <i>Axie Infinity</i> blockchain game, lost around $9.5&nbsp;million as two of his crypto wallets were compromised. The thief stole 3,248&nbsp;ETH ($9.5&nbsp;million), which they quickly laundered with the Tornado Cash cryptocurrency <button class="define-target" id="tumbler">mixer</button>.<p>Some were briefly concerned that <i>Axie Infinity's</i> Ronin Bridge had been hacked (<a href="https://www.web3isgoinggreat.com/?id=axie-infinity-suffers-625-million-exploit" target="_blank">again</a>), since the funds moved out of the <button class="define-target" id="bridge">bridge</button>. Jihoz and others were quick to emphasize that the bridge had not been affected, and it was simply a personal wallet compromise.</p>

Jihoz Zirlin wallet hack

<i>Axie Infinity</i> co-founder suffers $9.5&nbsp;million loss after wallet compromise

An attacker was able to use a <button class="define-target" id="flash-loan">flash loan</button> attack to <button class="define-target" id="oracle-manipulation">manipulate an oracle</button> on the WooFi <button class="define-target" id="dex">DEX</button> implementation on the Arbitrum network. By manipulating the price of $WOO, they were able to steal around $8.5&nbsp;million.<p>Blockchain security firms detected the attack quickly, and the project team paused the project's <button class="define-target" id="smart-contract">smart contract</button> within fifteen minutes, but not before the millions were stolen. They contacted the attacker via an on-chain message to offer a 10% "bounty", later threatening that they had a "strong lead that we think will soon reveal the identity of the exploiter".</p>

WOOFi hack

WOOFi hacked for $8.75&nbsp;million

Jay Mazini, an influencer who often boasted of his wealth on Instagram by doing cash giveaways to random strangers, has been sentenced to seven years in prison after running "overlapping fraud schemes" that scammed victims out of at least $8&nbsp;million. One of them involved a multi-million dollar cryptocurrency scam in which he would promise to pay higher prices for crypto, and would convince those who were interested to transfer their funds to him by providing doctored images of wire transfer confirmations to suggest that he'd fulfilled his end of the deal.<p>Mazini also ran a scam targeting the Muslim community in New York, via a company called Halal Capital. In reality, this was a Ponzi scheme, and payouts to his investors were funded in part by the crypto scam he was also running.</p><p>Mazini was arrested in March 2021 on kidnapping charges, after he kidnapped and beat someone who might have witnessed his frauds. He was sentenced to five years in prison for that charge, to which he pled guilty. His new fraud sentence will be served concurrently with the kidnapping sentence.</p><p>In addition to seven years in prison, Mazini has been ordered to forfeit $10 million. Restitution has not yet been determined.</p>

, U.S. Attorney's Office, Eastern District of New York

"Instagram Influencer Known as 'Jay Mazini' Sentenced to 84 Months in Prison for Overlapping Fraud Schemes"

"Serial Scammer and Instagram Influencer Jay Mazini Pleads Guilty"

Jay Mazini sentenced

Instagram influencer Jay Mazini sentenced to seven years in prison for crypto fraud

The crypto payments platform CoinsPaid was hacked for the second time in six months. This time, around $7.5&nbsp;million in various tokens was stolen.<p>In July 2023, an <a href="https://web3isgoinggreat.com/?id=coinspaid-suspends-withdrawals" target="_blank">attacker stole $37.3&nbsp;million</a> from the CoinsPaid platform. CoinsPaid said at the time that they suspected the attacker was the North Korean Lazarus hacking group, which has been a prolific perpetrator of cryptocurrency thefts.</p>

CoinsPaid hack #2

CoinsPaid hacked again

Well that sure is a headline I just had to write.<p>The Magic Internet Money ($MIM) stablecoin has lost its dollar <button class="define-target" id="peg">peg</button> again, dipping all the way below $0.77 in a flash crash before returning to around $0.95.</p><p>The depeg appears to be related to an exploit of the Abracadabra lending protocol, which allows people to borrow $MIM. An attacker exploited an apparent flaw in the platform's smart contracts to drain around $6.5&nbsp;million.</p><p>This is the second time the token has depegged, after a <a href="https://web3isgoinggreat.com/?id=magic-internet-money-stablecoin-wobbles" target="_blank">June 2022 incident</a> shortly after the <a href="https://web3isgoinggreat.com/?id=terra-luna-token-drops-in-price-by-98-amidst-ongoing-terrausd-stablecoin-collapse" target="_blank">Terra collapse</a>.</p>

"Abracadabra's $6.49M loss leads to MIM stablecoin destabilization"

Abracadabra exploit

Abracadabra exploited for almost $6.5&nbsp;million, Magic Internet Money stablecoin depegs

A bug in Seneca Protocol's <button class="define-target" id="smart-contract">smart contract</button> has allowed attackers to steal funds from users who had approved the contract. So far, around $3&nbsp;million has been stolen across the Ethereum blockchain and Arbitrum <button class="define-target" id="layer-2">layer-2</button>.<p>Making things worse, although the project's smart contract inherits the <code>Pausable</code> module that should allow the Seneca team to halt the malfunctioning code, they never implemented the function, meaning there's no way for them to stop the thefts. Instead, individual users must each revoke access to the flawed contract.</p>

Seneca Protocol bug

Seneca Protocol bug enables at least $3&nbsp;million in stolen user funds

An attacker tried to pull off what could have been a ~$12&nbsp;million heist from ALEX Lab's XLink bridge after a <button class="define-target" id="private-key">private key</button> was compromised. However, the sloppy work by the attacker enabled an apparent <button class="define-target" id="whitehat">whitehat</button> hacker to step in.<p>The attacker was successfully able to transfer around 13.8&nbsp;million STX (~$2 million) on the Stack BTC <button class="define-target" id="layer-2">layer-2</button> chain. However, their attempts to steal assets notionally worth around $4.3&nbsp;million from the project's BNB Chain implementation failed when they upgraded the project <button class="define-target" id="smart-contract">contract</button> to a malicious version, but failed to prevent <i>other</i> people from calling the withdraw function. The attacker's first transactions to withdraw the funds themself failed, and an apparent whitehat hacker was able to step in and complete the withdrawal ahead of the exploiter. They later negotiated a deal for the funds' return, after offering a 10% "<button class="define-target" id="bug-bounty">bounty</button>".</p><p>The exploiter had also tried, and failed, to steal assets notionally worth around $5&nbsp;million on the Ethereum blockchain, but failed to do so. ALEX Lab later announced they were able to recover or secure around $4.5&nbsp;million of those assets.</p>

ALEX XLink bridge theft

$2&nbsp;million stolen from ALEX's XLink bridge by bumbling exploiter

The Gamma Strategies <button class="define-target" id="defi">defi</button> protocol suffered an exploit when an attacker targeted their vaults on several projects across the Arbitrum <button class="define-target" id="layer-2">layer-2</button> network. The attacker successfully stole almost $6.2&nbsp;million from these vaults by manipulating the price of some of the assets involved.<p>Gamma has contacted the hacker to try to negotiate a return of some of the assets, and also says they have engaged law enforcement. Although they have promised to try to repay some of the stolen assets, they are estimating between 25% and 40% recoveries for various categories of users.</p>

"DeFi protocol Gamma Strategies suffers an estimated $3.4 million exploit"

Gamma Strategies exploit

Gamma Strategies exploited for $6.2&nbsp;million

An attacker was able to gain access to the Gamee (GMEE) token's source code repository, then exploit a vulnerability in the code to transfer 600&nbsp;million GMEE tokens to their own wallets. At the token's market price of $0.025 before the hack, these tokens were ostensibly priced at $15&nbsp;million, though the token value plunged around 60% to below $0.01 following the theft as the attacker began selling the tokens.<p>GMEE is the token belonging to the Gamee blockchain-based gaming platform, which was acquired by the Animoca Brands company in 2020. Animoca is mostly known for its crypto-metaverse project, The Sandbox.</p>

"Animoca Brands' Gamee Token Plunges 60% After Exploit"

Animoca Brands-owned Gamee tokens stolen

Hackers were able to exploit a vulnerability in the <button class="define-target" id="staking">staking</button> <button class="define-target" id="smart-contract">contract</button> for WallStreetMemes ($WSM), a <button class="define-target" id="memecoin">memecoin</button> and online casino project targeted at the "meme warriors" who frequent various financial meme communities, many of which formed around the <a href="https://en.wikipedia.org/wiki/GameStop_short_squeeze" target="_blank">Gamestop short squeeze</a>.<p>The attackers were able to siphon 769&nbsp;million $WSM from the contract, which was notionally worth around $7&nbsp;million. However, the token lacks liquidity to support swapping hundreds of millions of tokens without depressing the price, and the token price dropped around 35% in the wake of the attack as the thief began to cash out over several days.</p><p>Meanwhile, WSM announced that they would be issuing a new token to replace the stolen tokens, and "renew[ing] the liquidity pool"... somehow.</p>

WallStreetMemes exploit

WallStreetMemes token price plummets after staking contract exploited

"Charlotte Fang", the leader of the <a href="https://www.web3isgoinggreat.com/?id=founder-of-milady-nft-project-revealed-to-have-horrifying-history" target="_blank">controversial</a> Remilia project (known for its Milady NFTs), claimed he was hacked and drained of ETH and NFTs potentially worth several million dollars. Although the project's treasury used a <button class="define-target" id="multisig">multi-signature</button> model, the <button class="define-target" id="private-key">private keys</button> were stored in one password manager, which Fang says was compromised.<p>The attacker stole around 490&nbsp;ETH (~$1.8&nbsp;million) and $58,000 USDC, along with more than 130&nbsp;Milady NFTs, 320&nbsp;Remilio NFTs, and hundreds of derivative tokens issued on the NFTX platform. Based on <button class="define-target" id="floor-price">floor prices</button>, the assets are valued at north of $6&nbsp;million.</p><p>The mechanism of the attack is still uncertain, though Fang has said he suspects malware that could have intercepted credentials to his Bitwarden password manager. Some have expressed skepticism around the "hack", suggesting it could have been inside job. The Remilia group had suffered a separate <a href="https://www.web3isgoinggreat.com/?id=remilia-theft" target="_blank">$1&nbsp;million loss in September 2023</a> — blamed on a rogue developer — and failed to implement many security safeguards after that incident.</p>

Remilia Collective reports multi-million dollar hack

A trader looking to buy $9&nbsp;million of a recently popular Solana <button class="define-target" id="memecoin">memecoin</button>, dogwifhat (WIF), lost $5.7&nbsp;million of their funds to <button class="define-target" id="slippage">slippage</button> as they placed a massive order in a <button class="define-target" id="liquidity-pool">pool</button> with relatively low liquidity. $5.7&nbsp;million of their funds were lost to "slippage" — the discrepancy in price that can occur when a trade is so large or a market is so illiquid that the trade itself impacts the asset price.<p>Some have speculated that the trade might be an expensive marketing stunt to increase attention to WIF, which was losing some steam.</p><p>I'll give it to them: the token's namesake is pretty cute. But not $9&nbsp;million cute.</p>

"Trader Buys $9M of Solana Meme Coin Dogwifhat, But Loses Over 60% to Slippage"

dogwifhat slippage

Trader loses $5.7&nbsp;million to slippage in memecoin trade

A person or group have raised funds for various crypto projects only to abandon them, empty the project wallets, and <button class="define-target" id="tumbler">launder</button> the funds through Tornado Cash. The largest of the projects was called "MuskSwap", which proclaimed: "$MUSK &amp; MuskSwap was born to show admiration to elon musk's super projects like solarcity, tesla, space x and his constant influence on the world finance &amp; the crypto market."<p>The project described itself as a <button class="define-target" id="dex">DEX</button> with a native $MUSK token, and launched in July 2021. However, the token tanked on December 25, 2021. Although the project team tried to blame the crash on "liquidity issues" and promised paths forward, they locked the project Telegram chat on March 11, 2022. On April 5, 2022, the team withdrew remaining funds and deleted the website.</p><p>Crypto analysis firm CertiK linked the MuskSwap project to several other scam tokens and projects: RocketDoge, InfinityGame, SpaceX, MUFC (themed after Manchester United), and Elona Musk. Altogether, the rug pulls have drawn in $5.1&nbsp;million.</p>

"Decrypting MuskSwap: A web of Scams and Tracking Funds Through Tornado Cash"

MuskSwap exit scam

MuskSwap and related projects exit scam for over $5&nbsp;million

The Duelbits crypto casino and sports betting website was drained of around $4.6&nbsp;million on both the Ethereum and BNB Chain blockchains. The funds were quickly <button class="define-target" id="bridge">bridged</button> or exchanged to ETH.<p>It appears that the thief got access to a Duelbits <button class="define-target" id="wallet">wallet</button>, perhaps through a <button class="define-target" id="private-key">private key</button> compromise.</p>

Duelbits hack

Duelbits crypto casino exploited for $4.6&nbsp;million

Super Sushi Samurai, a new blockchain game on the Blast layer-2 blockchain was exploited for $4.6&nbsp;million when an attacker discovered a vulnerability in its <button class="define-target" id="smart-contract">smart contract</button>. A bug in the <button class="define-target" id="mint">mint</button> functionality caused users who transferred their $SSS balance to themselves to receive twice as many tokens. An attacker took advantage of this to drain $4.6&nbsp;million from the project, causing the $SSS token to plummet by 99%.<p>The attacker contacted the project shortly after the theft, claiming to be a whitehat. They wrote, "Hi team, this is a whitehat rescue hack. Let's work on reimbursing the users." Super Sushi Samurai later confirmed that the funds had been returned, minus a 5% "bounty". The team also gave the whitehat an additional 2.5% in SSS tokens and land, and brought them on to the project team as a tech adviser.</p>

Super Sushi Samurai exploit

Super Sushi Samurai exploited by whitehat for $4.6&nbsp;million

Radiant Capital, a cross-chain lending protocol built on the Arbitrum <button class="define-target" id="layer-2">layer-2</button> network, was hacked for 1,900&nbsp;ETH (~$4.5&nbsp;million). The exploit relied on a flaw in the underlying code, which was forked from Compound and Aave. The original code has a known rounding issue, which makes new projects vulnerable to attack shortly after they are deployed if they are not specifically configured to avoid the issue. In this case, the attacker had observed the <button class="define-target" id="smart-contract">contract</button> being deployed and performed the exploit only six seconds after the project was activated.<p>Radiant Capital sent an on-chain message to the attacker, offering to negotiate a <button class="define-target" id="bug-bounty">bounty</button>.</p>

Radiant Capital hack

Radiant Capital lending protocol hacked for $4.5&nbsp;million

A trader known as kirilm.eth fell victim to a phishing attack, losing over 180&nbsp;million BEAM tokens to a scammer. BEAM is a token belonging to the Beam blockchain gaming network, built by the Merit Circle DAO.<p>The stolen tokens were notionally priced at around $5.14&nbsp;million, although the sale of the stolen tokens resulted in a price drop that meant the attacker ultimately was only able to trade them for 1,629&nbsp;ETH (~$4.5&nbsp;million). The BEAM price dropped around 10%.</p>

"kirilm.eth Falls Victim To Phishing, Loses 180 Mln BEAM"

kirilm.eth phishing

Trader loses $4.5&nbsp;million in phishing attack

Someone who held over 111.6&nbsp;million ALI tokens from a project called The AI Protocol was phished by someone using a <button class="define-target" id="wallet-drainer">wallet drainer</button> service using a <button class="define-target" id="permit-phishing">permit phishing</button> technique. The tokens were priced at around $4.3&nbsp;million.<p>Blockchain sleuth zachxbt was able to coordinate with the project to organize a community governance vote to <button class="define-target" id="burn">burn</button> the stolen tokens before the attacker was able to cash out. Although this doesn't return the stolen funds to their original owner, it at least keeps the attacker from profiting.</p>

AI Protocol theft and burn

"The AI Protocol" burns tokens after holder suffers $4.3&nbsp;million theft

As Euler Finance tried to recover from a <a href="https://web3isgoinggreat.com/?id=euler-finance-exploited-for-almost-200-million" target="_blank">massive hack</a> in March 2023, and as founder co-founder Michael Bentley was dealing with matters in his personal life, he "made an error and it turns out that one of the <button class="define-target" id="private-key">private keys</button> [to his personal crypto <button class="define-target" id="wallet">wallet</button>] is no longer recoverable". The private key would have allowed him to recover assets from his <button class="define-target" id="hardware-wallet">hardware wallet</button>, which had made his assets inaccessible after a malfunction.<p>With the malfunctioning hardware wallet and no recovery key, Bentley has lost access to assets including 1.2&nbsp;million EUL tokens — over 4% of the total EUL token supply. These tokens are priced at about $3.8&nbsp;million today, though at other times the tokens would have been worth up to about $15&nbsp;million.</p><p>"I've now lost a substantial percentage of the crypto assets I held in <button class="define-target" id="cold-wallet">cold storage</button>, accumulated over more than seven years, including the majority of the EUL allocated to me for participating in Euler governance," said Bentley.</p>

"Euler co-founder lost $3.8m worth of governance tokens after hardware failure"

Euler Finance private key loss

Euler Finance cofounder loses private key and, with it, $3.8&nbsp;million

The Socket cross-chain infrastructure protocol was hacked for around $3.3&nbsp;million in an attack that exploited its Bungee <button class="define-target" id="bridge">bridge</button>. The thieves were able to exploit a bug that allowed them to take assets from those who had granted approval to a portion of the system called SocketGateway.<p>A little over 700&nbsp;victims were affected, and the highest loss from a single wallet was around $657,000. 121 wallets lost assets priced at more than $10,000.</p><p>On January 23, the protocol announced they had recovered 1,032&nbsp;ETH (~$2.23&nbsp;million) of the stolen funds.</p>

"Socket, Bungee Restart Operations After Apparent $3.3M Exploit"

"Socket Tech security breach affects multiple dapps and wallets"

Socket hack

Socket service and its Bungee bridge suffer $3.3&nbsp;million theft

The Shido blockchain suffered an exploit of their <button class="define-target" id="staking">staking</button> <button class="define-target" id="smart-contract">smart contract</button>, in which an attacker was able to transfer ownership of the contract to another address and then upgrade the contract with a function that allowed them to withdraw staked tokens. Altogether, the attacker withdrew all 4.3&nbsp;billion staked $SHIDO tokens — over half the entire circulating supply.<p>Although the stolen tokens were nominally priced at $35&nbsp;million, the massive theft caused the price to plummet 94%. The attacker has converted the stolen tokens to around 956&nbsp;ETH ($3.3&nbsp;million).</p><p>The Shido team announced that they would be trying to offer a "<button class="define-target" id="bug-bounty">bounty</button>" to the hacker.</p>

"Shido token plummets 94% as exploiter drains Ethereum staking contract"

Shido contract exploit

Shido exploited for at least $3.3&nbsp;million

In July 2023, <a href="https://web3isgoinggreat.com/?id=hector-dao-shuts-down" target="_blank">angry investors in the Hector Network project opted to "rage quit"</a> — an option reserved by some <button class="define-target" id="defi">defi</button> projects that allows investors to vote to liquidate a project's remaining treasury and distribute it to token holders. The successful rage-quit vote in Hector's case came after the protocol lost $8&nbsp;million in the <a href="https://web3isgoinggreat.com/?collection=multichain" target="_blank">Multichain disaster</a>, although investors say that was only the final straw in a series of poor management choices and inflated salaries that saw the project treasury dwindle from over $100&nbsp;million to around $16&nbsp;million.<p>Now, another $2.7&nbsp;million is gone after an apparent thief was able to exploit a <button class="define-target" id="smart-contract">smart contract</button> that was intended to distribute payouts to Hector's token holders. They then swapped the tokens from the USDC stablecoin to ETH.</p><p>Investors in the project are furious, especially because various parties had warned Hector Network about apparently insecure practices. Hector Network's team, meanwhile, have not acknowledged the theft, although a law firm involved in the project liquidation promised a statement would be forthcoming.</p>

"Mysterious $2.7 million withdrawal from Hector Network leaves investors perplexed"

"Investors rip Hector Network team after it squanders $100m treasury and ‘rage quits’ DeFi project"

Hector Network compensation fund theft

$2.7&nbsp;million disappears from funds meant to compensate Hector Network investors

Someone impersonating Ansem, an influential crypto trader, was able to scam people out of more than $2.6&nbsp;million simply by replying to the real Ansem's tweets. Using an account mimicking the real account, with only a slight difference in the username, a phisher convinced Ansem's followers that he was creating his own Solana <button class="define-target" id="memecoin">memecoin</button> and asked them to buy in.<p>In one of the real Ansem's tweets, Ansem wrote "i dont launch coins bros" — nevertheless, followers eager to get in early on a new memecoin clicked a link offering a presale and had their wallets <button class="define-target" id="drainer">drained</button>.</p><p>Altogether, people lost $2.6&nbsp;million to the scam. One individual lost $1.2&nbsp;million.</p>

Ansem Twitter impersonator

Phisher impersonating influential crypto trader in Twitter replies scams over $2.6&nbsp;million

The CFTC has filed a complaint against Debiex, a shadowy cryptocurrency platform whose precise location and executives are unknown. The company's employees primarily targeted Chinese Americans, and used common romance scam techniques: first striking up a friendship or romantic relationship with the victim, then convincing them that they could earn huge profits by putting money on Debiex.<p>Debiex, however, only resembled a cryptocurrency trading platform. In reality, the website merely mimicked a trading platform, and the funds supposedly deposited there for trading purposes were taken by Debiex.</p><p>The CFTC identified five victims who were allegedly defrauded of a combined $2.3&nbsp;million.</p>

"CFTC Charges Bogus Digital Asset Platform with Fraud and Misappropriation in an Online Romance Scam"

Debiex CFTC complaint

CFTC files complaint against Debiex platform for using "romance scam tactics" to steal $2.3&nbsp;million

The U.S. Attorney's Office in the District of Massachusetts announced that they had filed a civil forfeiture action to seize cryptocurrency priced at around $2.3&nbsp;million from two Binance accounts. Those accounts had received cryptocurrency of various kinds from at least 37 American victims, one of whom was based in Massachusetts and who lost $400,000 in crypto assets to the scammers.

, United States Attorney's Office, District of Massachusetts

"United States Files Forfeiture Action to Recover Cryptocurrency Traceable to Pig Butchering Romance Scam"

Event	Date	Amount More info	Recovered More info
Chris Larsen XRP theft	January 31, 2024	$112,500,000	$4,200,000
Myanmar-based pig-butchering scam	February 25, 2024	$100,000,000
0x1E227 address poisoning	May 3, 2024	$72,700,000	$65,500,000
DCA Fund collapse	April 12, 2024	$65,000,000
Munchables hack	March 26, 2024	$62,500,000	$62,500,000
January 2024 Twitter phishing	January 31, 2024	$58,324,698
BitForex withdrawals	February 26, 2024	$57,000,000
AAX money movement	February 20, 2024	$55,600,000
Hedgey Finance hack	April 19, 2024	$44,700,000
February 2024 Twitter phishing	March 10, 2024	$42,363,781
Australian NGS Crypto mining fund collapses	April 12, 2024	$42,000,000
PlayDapp crypto gaming platform exploited, spurring misleading headlines	February 9, 2024	$20,000,000 – $36,500,000
ZKasino rug pull	April 20, 2024	$33,000,000
FixedFloat hack #1	February 18, 2024	$26,100,000
Peraire-Bueno MEV indictment	May 15, 2024	$25,000,000
STFIL investigation	April 9, 2024	$23,000,000
Incognito Market exit scam	March 11, 2024	$10,000,000 – $30,000,000
Sonne Finance hack	May 14, 2024	$20,000,000
Curio hack	March 25, 2024	$16,000,000
Rain cryptocurrency exchange hacked for $14.8 million	April 29, 2024	$14,800,000
RiskOnBlast gambling platform rug pulls for $1.3 million	February 25, 2024	$13,250,000
Prisma Finance hack	March 28, 2024	$12,000,000
Somesing hack	January 27, 2024	$11,580,000
Slerf memecoin meltdown only adds to mania	March 18, 2024	$10,000,000
LENX rug pull	March 26, 2024	$10,000,000
Jihoz Zirlin wallet hack	February 22, 2024	$9,500,000
WOOFi hack	March 5, 2024	$8,750,000
Jay Mazini sentenced	April 24, 2024	$8,000,000
CoinsPaid hack #2	January 6, 2024	$7,500,000
Abracadabra exploit	January 30, 2024	$6,490,000
Seneca Protocol bug	February 28, 2024	$6,400,000	$5,200,000
ALEX XLink bridge theft	May 14, 2024	$6,300,000
Gamma Strategies exploit	January 4, 2024	$6,177,474
Animoca Brands-owned Gamee tokens stolen	January 22, 2024	$6,000,000
WallStreetMemes exploit	January 25, 2024	$6,000,000 – $7,000,000
Remilia Collective reports multi-million dollar hack	March 16, 2024	$5,999,945
dogwifhat slippage	January 10, 2024	$5,700,000
MuskSwap exit scam	April 8, 2024	$5,100,000
Duelbits hack	February 13, 2024	$4,600,000
Super Sushi Samurai exploit	March 21, 2024	$4,600,000	$4,255,000
Radiant Capital hack	January 2, 2024	$4,500,000
kirilm.eth phishing	February 16, 2024	$4,500,000
AI Protocol theft and burn	March 1, 2024	$4,300,000
Euler Finance private key loss	January 10, 2024	$3,800,000
Socket hack	January 16, 2024	$3,300,000	$2,300,000
Shido contract exploit	February 28, 2024	$3,300,000
Hector Network compensation fund theft	January 16, 2024	$2,700,000
Ansem Twitter impersonator	March 16, 2024	$2,600,000
Debiex CFTC complaint	January 19, 2024	$2,300,000
Massachusetts crypto romance scam	March 13, 2024	$2,300,000