The Genesis cryptocurrency lending platform filed for bankruptcy, following weeks of turmoil after the FTX collapse. Genesis <a href="https://web3isgoinggreat.com/?id=genesis-crypto-lending-service-halts-withdrawals" target="_blank">halted withdrawals</a> shortly after FTX's failure, and shortly afterwards <a href="https://web3isgoinggreat.com/?id=genesis-warns-of-bankruptcy-if-they-cant-raise-1-billion" target="_blank">warned of possible</a> bankruptcy if they couldn't raise at least $1&nbsp;billion in new capital. The past few months have also featured a <a href="https://web3isgoinggreat.com/?id=gemini-founder-writes-open-letter-to-barry-silbert-begging-for-the-return-of-900-million" target="_blank">public conflict</a> between Genesis, along with its parent company DCG and DCG's CEO and founder Barry Silbert, and the Winklevoss twins behind the Gemini crypto exchange.<p>It remains to be seen what the impact of a Genesis bankruptcy may have on its parent company, Digital Currency Group (DCG). DCG owes Genesis more than $1.65&nbsp;billion, according to bankruptcy filings, including a $1.1&nbsp;billion promissory note created to absorb <a href="https://web3isgoinggreat.com/?id=genesis-lost-hundreds-of-millions" target="_blank">Genesis losses in the Three Arrows Capital collapse</a>.</p>

"Genesis, a Crypto Lending Firm, Files for Bankruptcy"

Genesis bankruptcy

Genesis files for bankruptcy

Many investors have reported losses thanks to a cryptocurrency investment scheme called HyperVerse, which operated in Australia from around 2018 to mid-2023. Several financial watchdogs issued warnings about the company, including the UK, Canada, Germany, and New Zealand. The Hungarian central bank warned in August 2022 that the HyperVerse project was a "suspected pyramid scheme... behind which there is no real economic activity... There is a significant chance that investors may permanently lose part or all of their invested capital."<p>Estimates by Chainalysis suggest that victims have lost a combined $1.3&nbsp;billion (with a B) to the scam thus far.</p><p>The scheme's operators Sam Lee and Zijing "Ryan" Xu were also behind <a href="https://web3isgoinggreat.com/?id=blockchain-global-enters-liquidation" target="_blank">Blockchain Global</a>, a collapsed company that operated the Australian ACX crypto exchange that collapsed in 2019. The company is in liquidation, and creditor claims are expected to surpass $50&nbsp;million. Although Lee and Xu were reported for investigation to the Australian Securities &amp; Investments Commission, ASIC did not take any action.</p><p>Lee has also been involved in other investment platforms, including two that are currently active: StableDao and We Are All Satoshi. Both platforms were the target of cease and desist letters from the Californian Department of Financial Protection and Innovation in September 2023, who described them both as "fraudulent pyramid and Ponzi scheme[s]".</p>

"Investors lose millions as crypto schemes operate unchecked in Australia"

"'They are so convincing': Vera Gazzard lost her life savings to HyperVerse"

"Crypto Scam Revenue Dropped 46% in 2022, While Blockchain Analysis Finds Links Between What Appear to be Distinct Scams"

"More than $50 million owed to creditors after collapse of Blockchain Global's cryptocurrency exchange"

HyperVerse scam

Australian victims lose estimated $1.3&nbsp;billion to prolific scammers' HyperVerse project

Indian police have arrested around eighteen people, including four police officers, in connection with a $300&nbsp;million cryptocurrency scam that affected around 100,000 people in Himachal Pradesh. Victims were invited to invest in a cryptocurrency called Korvio Coin (KRO), but later the scam incorporated other tokens as well. Around 5,000 government officials and around 1,000 police fell victim to the scam, with some themselves becoming promoters.<p>The scam was allegedly orchestrated by Subhash Sharma, who has not been apprehended. This particular fraud was uncovered in September, but has been ongoing since as long ago as 2018.</p>

"Indian Police Arrest 8 More in $300M Crypto Scam: Report"

Himachal Pradesh scam

Arrests made in $300&nbsp;million Indian crypto scam

At least according to the rather shady Tether stablecoin provider, the U.S. Department of Justice has been working on an investigation into a massive "<button class="define-target" id="pig-butchering">pig butchering</button>" romance scam and human trafficking operation based out of Southeast Asia.<p>According to Tether, they "voluntarily fr[oze] approximately 225 million in USDT tokens" in connection to the investigation.</p><p>Some romance scammers hoping to lure victims into sending them cryptocurrencies <a href="https://www.bloomberg.com/news/features/2023-08-17/my-crypto-hell-journey-started-with-a-wrong-number-scam-text" target="_blank">are themselves victims of human trafficking operations</a>, where they are held victim and forced to send such messages.</p>

"Following Investigations by Tether, OKX, and the U.S. Department of Justice, Tether Voluntarily Freezes 225M in Stolen USDT Linked to International Crime Syndicate"

Crypto romance scam in Southeast Asia

DOJ cracks down on $225&nbsp;million crypto romance scam

The operators of the Mixin Network disclosed that hackers had stolen around $200&nbsp;million in funds in the largest known hack of the year (to date). Mixin Network is a cross-chain project that boasts zero transaction fees.<p>In their announcement, Mixin wrote that "the database of Mixin Network's cloud service provider was attacked by hackers", leading to some confusion as Mixin is supposed to be a decentralized network that ostensibly shouldn't <i>have</i> a centralized cloud database.</p><p>Mixin announced they would be suspending deposits and withdrawals pending analysis of the incident. They also told users that they would be compensated "up to a maximum of 50%" on assets that had been stolen from them, and receive "tokenized liability claims" (that is, IOUs) for the rest.</p>

Mixin Network hack

Mixin Network discloses $200&nbsp;million hack

The decentralized lending platform Euler Finance suffered a <button class="define-target" id="flash-loan">flash loan</button> attack in which an exploiter stole $197&nbsp;million from the project. The attacker stole $8.7&nbsp;million in the Dai <button class="define-target" id="stablecoin">stablecoin</button>, $18.5&nbsp;million in <button class="define-target" id="wrapped-token">wrapped</button> Bitcoin, $135.8&nbsp;million in Lido staked Ethereum (stETH), and $33.8&nbsp;million in the USDC stablecoin. Although Euler was well known for its many code <button class="define-target" id="audit">audits</button>, the project had later added a vulnerable function that had not been as heavily audited.<p>Euler announced that they were aware of the exploit, and were "working with security professionals and law enforcement".</p><p>On April 3, Euler Finance announced that they had completed successful negotiations, and that "all of the recoverable funds taken from the Euler protocol on March 13th have now been successfully returned by the exploiter". Unfortunately, based on on-chain transfers, this appeared to only be around $31&nbsp;million.</p>

"Hackers steal around $200 million from crypto lender Euler Finance"

"Euler Finance Exploiter Returns All ‘Recoverable Funds’ From $200M Hack"

Euler Finance hack

Euler Finance exploited for almost $200&nbsp;million

After the Hong Kong-based JPEX exchange limited withdrawals amidst what appeared to be an <a href="https://web3isgoinggreat.com/?id=jpex-issues" target="_blank">impending collapse of the platform</a>, things are now looking a lot more like fraud.<p>Police have received more than 2,200 complaints pertaining to the exchange, involving $191&nbsp;million (and counting) in possible losses. Eleven people, including various crypto influencers who had promoted the exchange, were taken in for questioning. However, police have said those eleven people were not likely central to the fraud, and that the leaders of the JPEX project are on the run.</p><p>According to the <i>South China Morning Post</i>, "The alleged case of financial fraud involving HK$1.37 billion is the largest of its kind in Hong Kong's history."</p>

"Hong Kong JPEX scandal: who are the suspects arrested so far and how are they tied to cryptocurrency platform?"

JPEX collapse

JPEX appears to be a $191&nbsp;million fraud

Blockchain watchers observed $130&nbsp;million in various assets flowing out of the Multichain blockchain bridge, questioning whether there had been an exploit. Multichain tweeted, "The team is not sure what happened and is currently investigating," and recommended users stop using the service and revoke contract approvals.<p>Several hours later, Multichain wrote that they had stopped service, and that "all bridge transactions will be stuck on the source chains. There is no confirmed resume time."</p><p>In May, <a href="https://web3isgoinggreat.com/?id=transactions-stuck-on-multichain-blockchain-bridge-due-to-force-majeure" target="_blank">Multichain suffered a bizarre slew of issues</a>, culminating in the project team admitting that their CEO had gone missing and could not be contacted. So far, they have not reported his return.</p><p>This is also not the first hack suffered by Multichain. In January 2022, the project, bafflingly, <a href="https://web3isgoinggreat.com/?id=multichain-publicly-announces-vulnerability-and-is-quickly-hacked" target="_blank">publicly announced a security vulnerability that was affecting their tokens, without first instructing users to safeguard their tokens</a>. Attackers quickly followed the instruction manual provided to them by Multichain, making off with around $3&nbsp;million in assets.</p>

"Multichain halts on suspected $130M hack, 1 month after CEO disappeared"

Multichain suspected hack #2

Multichain shuts down amidst $130&nbsp;million suspected hack

A company that promised an app that could identify dogs by their nose-prints — built on the blockchain, of course — has been alleged by South Korean police to be "a typical <button class="define-target" id="ponzi">Ponzi scheme</button>" that lured investors with promises of up to 150% returns in 100 days. The company raised around ₩166.4&nbsp;billion (~$127&nbsp;million) from approximately 22,000 people. The victims, according to Korean police, are mostly "in their 60s or older with no expertise in cryptocurrencies".<p>As for the noseprint reader, well, it was found to be a fake product that (shockingly) didn't use a blockchain at all. The company had also promised to build "theme parks for pets", but had not leased any of the sites it had identified.</p>

"'Blockchain for dog nose wrinkles' Ponzi makes off with $127m"

Dog noseprint Ponzi scheme

Ponzi scheme promising a blockchain app to identify dogs by their nose-prints scams investors out of $127&nbsp;million

Assets including Bitcoin, Ethereum, and Tron's TRX token, priced at more than $126&nbsp;million, were stolen from Justin Sun's Poloniex cryptocurrency exchange. Researchers are still homing in on the exact amount of funds that were stolen from the company's <button class="define-target" id="hot-wallet">hot wallets</button> across multiple blockchains, but suffice to say it's a lot.<p>Poloniex was initially tight-lipped, posting on Twitter that they had "disabled for maintenance" an exchange wallet. Justin Sun later updated that they were investigating the "hack incident", and promised to "fully reimburse" the massive theft... somehow. He later tweeted that they would offer a 5% "<button class="define-target" id="bug-bounty">bounty</button>" to the hacker if they returned the funds within a week, threatening to "engage law enforcement" otherwise.</p>

"Justin Sun-Owned Exchange Poloniex Hacked for At Least $126 Million"

Poloniex hack

Poloniex hacked for more than $120&nbsp;million

The US-based company Coin Cloud, which operates crypto ATMs in the US and Brazil, filed for bankruptcy on February 7. They are the second largest crypto ATM operator in the world, and also in the US.<p>The company disclosed liabilities between $100&nbsp;million and $500&nbsp;million, and assets between $50&nbsp;million and $100&nbsp;million. In a filing, they reported they had 5,001–10,000 creditors.</p><p>By far the largest creditor is Genesis, a crypto lending firm that is also undergoing bankruptcy proceedings. Coin Cloud has a $116&nbsp;million loan from Genesis, around $108&nbsp;million of which is unsecured. Coin Cloud also owes a $7.6&nbsp;million secured debt to crypto lending firm Enigma.</p><p>According to Coin Cloud, contributing to their bankruptcy was a $35&nbsp;million deal with a vendor who they allege sold them faulty ATMs in February 2021, and with whom they are in litigation. Furthermore, in September 2021, the firm providing Coin Cloud's ATM software tried to terminate their software agreement, and pushed a software update that rendered the machines inoperable, causing days- or weeks-long outages. Coin Cloud decided to deploy unfinished ATM software that they had been using internally, and which was quickly hacked for around $6.5&nbsp;million. Finally, Coin Cloud claims a chief marketing officer they hired lied about his credentials, and then spent $20&nbsp;million more than he was budgeted.</p>

Cash Cloud, Inc. (dba Coin Cloud) Declaration in Support of First Day Motions

Cash Cloud, Inc. (dba Coin Cloud) Official Form 201

"Coin Cloud crypto ATM operator files for bankruptcy, owes over $100M to Genesis"

Coin Cloud bankruptcy

Coin Cloud crypto ATM operator files for bankruptcy

Justin Sun confirmed that HTX (formerly Huobi) and its related Heco Chain protocol were hacked for a combined $115&nbsp;million. It's been a rough few weeks for Sun, whose <a href="https://web3isgoinggreat.com/?id=poloniex-hack" target="_blank">Poloniex exchange was hacked for around $120&nbsp;million</a> on November 10, and a rough few months for HTX, which was <a href="https://web3isgoinggreat.com/?id=huobi-exchange-hacked" target="_blank">hacked for $8&nbsp;million</a> in late September.<p>HTX suspended withdrawals as they investigated the hack, and wrote that the company would "fully compensate for HTX's <button class="define-target" id="hot-wallet">hot wallet</button> losses". Security firm Cyvers said they believed the theft was enabled by a <button class="define-target" id="private-key">private key</button> leak.</p>

"Justin Sun Confirms HTX, Heco Chain Exploited After $100M in Suspicious Transfers"

HTX and Heco Chain hack

HTX (fka Huobi) and Heco Chain hacked for $115&nbsp;million

Only five days after <a href="https://web3isgoinggreat.com/?id=multichain-suspected-hack" target="_blank">$130&nbsp;million was emptied</a> from the Multichain blockchain bridge, another $107&nbsp;million in a wide range of assets has been taken. After the first theft, Multichain urged users to stop using the project and revoke contract approvals, but a large quantity of assets remained on the service.<p>People are becoming increasingly suspicious that the Multichain thefts may be an inside job, not least because <a href="https://web3isgoinggreat.com/?id=transactions-stuck-on-multichain-blockchain-bridge-due-to-force-majeure" target="_blank">Multichain's CEO suddenly disappeared</a> in late May and hasn't been located since.</p>

"Multichain Protocol Experiences Mysterious Withdrawals, Suggesting Multi-Million Dollar Hack or Rug Pull"

Multichain theft #3

Multichain drained of another $107&nbsp;million days after previous theft

Multiple users of the Atomic Wallet software suffered <button class="define-target" id="wallet">wallet</button> compromises totaling more than $100&nbsp;million in a spate of hacks suggesting an issue with the wallet itself. Atomic Wallet is a self-custody wallet, a suggested safer alternative than storing crypto assets in accounts controlled by third party companies. In February 2022, <a href="https://web3isgoinggreat.com/?id=security-firm-forced-to-publicly-disclose-issues-with-atomic-wallet" target="_blank">a security firm was forced to publicly disclose issues with the Atomic Wallet software</a> after attempting to address them with the company via traditional routes, but went ignored.<p>Following the thefts, Atomic Wallet tweeted that they were aware of the reports of wallet compromises, and that they were attempting to learn more about the attacks, but had not yet confirmed any method of attack. They've since taken down the wallet software download page, likely out of concern that the software itself has been compromised.</p><p>Crypto sleuth zachxbt compiled a list of reported compromised Atomic Wallets, finding that multiple individuals lost multiple millions in the attack. The largest known individual theft so far involved almost $8&nbsp;million in USDT (Tether); other individuals lost $2.8&nbsp;million in USDT and 1,897&nbsp;ETH (~$3.5&nbsp;million).</p><p>Users of Atomic Wallet have been advised to transfer their assets to other wallets.</p><p>On June 6, both zachxbt and blockchain research group Elliptic speculated that the laundering strategy by the thieves resembled that of the North Korea-linked Lazarus Group, which has been responsible for other major crypto thefts.</p>

"Atomic Wallet hacks lead to over $35 million in crypto stolen"

"North Korea’s Lazarus Group Likely Responsible for $35 million Atomic Crypto Theft"

"North Korea-Linked Atomic Wallet Heist Tops $100 Million"

Atomic Wallet hacks

Atomic Wallet hacks total over $100&nbsp;million

Some types of Curve factory pools, including one operated by AlchemixFi and one by JPEG'd, were exploited. The attack stemmed from an issue in the Vyper language, a <button class="define-target" id="smart-contract">smart contract</button> programming language that is similar to Solidity. Early investigations suggested that versions of the Vyper compiler had improperly implemented a <button class="define-target" id="reentrancy">re-entrancy</button> guard, leaving some projects vulnerable to that type of attack. Vyper tweeted an announcement that the versions were vulnerable, and urged "projects relying on these versions [to] immediately reach out to us".<p>Curve itself lost $61&nbsp;million to the exploit. AlchemixFi was exploited for around $13&nbsp;million in assets, and JPEG'd suffered a $11&nbsp;million loss. MetronomeDAO suffered a $1.6&nbsp;million loss, Ellipsis Finance lost $68,600, and Debridge Finance lost around $24,600.</p><p>Altogether, somewhere between $88&nbsp;million and $100&nbsp;million was taken, though some exploits appeared to be <button class="define-target" id="whitehat">whitehat</button> actions intended to preserve funds. The primary exploiter also later returned some of the stolen funds, refunding the entire amount to AlchemixFi and 90% of funds to JPEG'd in exchange for a 10% "<button class="define-target" id="bug-bounty">bug bounty</button>".</p>

Vyper vulnerability affecting Curve

Bug in Vyper smart contract language enables multiple exploits on Curve and related projects

Nevada's Financial Institutions Division and the Prime Trust crypto custodian requested that Prime Trust be placed into receivership, according to the NFID. A week earlier, the <a href="https://web3isgoinggreat.com/?id=prime-trust-is-insolvent" target="_blank">NFID had issued a cease and desist</a>, ordering Prime Trust to halt operations and alleging that the company was insolvent.<p>In the filing, NFID alleges that Prime Trust discovered in December 2021 that it couldn't access some customer wallets, and so "purchased additional digital currency using customer money from its omnibus customer accounts" in order to satisfy withdrawals from said wallets.</p><p>Prime Trust reportedly has liabilities of around $82.8&nbsp;million in fiat currency, plus another $860,000 of digital asset-denominated liabilities. "[Prime Trust] is in an unsafe financial condition and/or is insolvent. Additionally, [Prime Trust's] condition will only progressively worsen as customers continue to withdraw," wrote the regulator.</p>

"Nevada Places Crypto Custodian Prime Trust Into Receivership"

Prime Trust insolvency

Prime Trust placed into receivership

Shenzhen Shikongyun Technology, a company focused on mining the Filecoin token, has been accused of running a pyramid scheme. Four of the company's executives were also charged. According to Chinese law enforcement, they had been soliciting investments in what was ultimately a pyramid scheme, exaggerating the likely returns from their mining efforts.<p>Shenzhen Shikongyun Technology was operating in mainland China despite a ban on cryptocurrency activities in September 2021.</p>

"Chinese Filecoin mining firm charged for allegedly orchestrating $83.3 million pyramid scheme"

Shenzhen Shikongyun Technology scheme

Shenzhen Shikongyun Technology accused of $83 million Filecoin pyramid scheme

The Orbit Bridge project, a cross-chain <button class="define-target" id="bridge">bridge</button> for the Orbit Chain project, was exploited on December 31 for around $81&nbsp;million. The attacker made off with around 26,742&nbsp;ETH (~$64&nbsp;million) and $18&nbsp;million in the DAI <button class="define-target" id="stablecoin">stablecoin</button>. Orbit Chain's <button class="define-target" id="tvl">total value locked</button> plummeted from $152&nbsp;million to $71&nbsp;million as over half the funds were drained.<p>Orbit began sending the attacker on-chain messages, writing that "we will track you down and restore the damage you incurred to the ecosystem. And we will not stop." Orbit also wrote on Twitter that they were working with various law enforcement agencies.</p>

"Orbit Chain Loses $81M in Cross-Chain Bridge Exploit"

Orbit Bridge hack

Orbit Bridge hacked for $81&nbsp;million

Four individuals who helped launder money through shell companies and various bank accounts have been charged in connection to an $80&nbsp;million "<button class="define-target" id="pig-butchering">pig butchering</button>" cryptocurrency scam. The scam reportedly involved at least 284&nbsp;transactions, though it's not clear how many victims were involved.

"Four Individuals Charged for Laundering Millions from Cryptocurrency Investment Scams"

$80&nbsp;million romance scam

Money launderers charged over $80&nbsp;million crypto romance scam 

Croatian company BitLucky told its customers that it would invest their money in cryptocurrencies, promising 5–25% monthly profits. However, its director Luka Burazer wrote an email to clients on May 19, explaining: "Dear clients, with a series of bad trades and decisions, unfortunately, I have brought the state of the company into a crisis situation. We will have more information in the following days". He and the company co-founder have since gone dark, turning off their cell phones, not replying to emails, and deleting their social media presence. According to Croatian news outlet <i>Jutarnji list</i>, a secretary for the company reached on the phone explained, "the director went crazy and spent all the money". The losses allegedly involve crypto assets notionally worth €70&nbsp;million (~$75.7&nbsp;million), and affect at least 700 individuals.<p>Some have expressed the opinion that BitLucky was a Ponzi scheme all along, given the unreasonable promises of 5–25% monthly returns. The editor of a crypto news outlet also expressed that "there was a 'line of [red] flags'", including that Burazer never wanted to appear in the media or have his picture shown online.</p>

"Najveća domaća kripto prevara? Riječanin klijentima uzeo 70 milijuna €. Upravo je u bijegu"

BitLucky collapse

Croatian cryptocurrency investment company BitLucky reportedly collapses; more than $75&nbsp;million allegedly missing

Various blockchain watchers noticed suspicious transfers from a <button class="define-target" id="hot-wallet">hot wallet</button> known to belong to the CoinEx cryptocurrency exchange. CoinEx later confirmed a "security incident" involving "unauthorized transactions", and disclosed that around $70&nbsp;million was stolen. Outside researchers have suggested that the thieves appear to be a part of the North Korean state-sponsored hacking group, Lazarus.<p>CoinEx is based out of Hong Kong, and was recently forced to stop serving US customers as part of <a href="https://web3isgoinggreat.com/?id=coinex-settles-with-new-york-for-1-7-million" target="_blank">a settlement</a> with the New York Attorney General which also required them to pay a $1.7&nbsp;million fine.</p>

CoinEx hack

CoinEx hacked for $70&nbsp;million

The crypto payment processor Alphapo suffered a <button class="define-target" id="hot-wallet">hot wallet</button> hack on July 22 in which at least $60&nbsp;million in Ethereum, Tron, and Bitcoin was stolen. Alphapo processes payments for several gambling platforms including HypeDrop, Bovada, and Ignition.<p>HypeDrop disabled withdrawals on their platform, and wrote on Twitter that they were experiencing "ongoing deposit and withdrawal issues" due to "an issue on the cryptocurrency provider's side."</p> 

"Alphapo hot wallets drained for $23 million, HypeDrop disables withdrawals"

"Alphapo hot wallets hacked for over $31 million"

Alphapo hack

Alphapo hacked for more than $60&nbsp;million

A wallet <button class="define-target" id="drainer">drainer</button> service has facilitated the theft of more than $60&nbsp;million in various assets from almost 100,000 victims since May 2023. According to research group ScamSniffer, the drainer has recently started using functionality in the Ethereum network called <code>CREATE2</code> to generate new <button class="define-target" id="address">addresses</button> for each malicious <button class="define-target" id="signing">signature</button>. This allows the drainer to sidestep security alerts built into some crypto wallet software that would flag known malicious addresses.<p>ScamSniffer identified one victim who lost almost 17,000&nbsp;GMX (~$927,000) to this drainer after signing a malicious transaction.</p>

"Wallet Drainers Starts Using Create2 Bypass Wallet Security Alert"

Create2 wallet drainer

Wallet drainer steals more than $60&nbsp;million in six months

A new <button class="define-target" id="wallet-drainer">wallet drainer</button> tool has stolen $58.98&nbsp;million in cryptocurrency assets from more than 63,000 victims in the past nine months. People using the drainer software have pulled in victims by running ads on Twitter and through Google ads, employing various tricks to thwart ad reviewers trying to thwart malicious ads on their platforms.

MS drainer

New wallet drainer steals almost $60&nbsp;million in 9&nbsp;months

The KyberSwap <button class="define-target" id="dex">decentralized exchange</button> was hacked by an attacker who stole large sums of ETH, <button class="define-target" id="wrapped-token">w</button>ETH, and the USDC <button class="define-target" id="stablecoin">stablecoin</button>. Altogether, the assets are valued at around $54.7&nbsp;million. The attacker was able to exploit a complex bug in a feature for <button class="define-target" id="liquidity-pool">liquidity pool</button> providers. Prior to the hack, KyberSwap had approximately $80&nbsp;million in <button class="define-target" id="tvl">TVL</button>.<p>Shortly after the attack, the thief sent a message: "Negotiations will start in a few hours when I am fully rested." The KyberSwap team later responded to offer a 10% bounty, also seeming to praise the attacker: "You have done one of the most sophisticated hacks ser. That was high EV and everyone missed it."</p><p>The thief had other plans, though, ultimately issuing a list of "demands" which included "complete executive control" over the company and "surrender of all ... assets" to the hacker. They wrote that they had big plans for the network, and although they planned to dismiss all executives, they wrote that employees would be offered double salaries to continue their work. The hacker signed the message "Kyber Director".</p><p>Meanwhile, KyberSwap regained around $4.7&nbsp;million after negotiations with the operators of <button class="define-target" id="front-running">front-running</button> bots, who agreed to return 90% of the funds they obtained through frontrunning the hacker's transactions.</p>

"KyberSwap offers 10% bounty to hacker following $47 million exploit"

"KyberSwap DEX Hacked for $48 Million, Attacker Teases Negotiations"

KyberSwap hack #2

KyberSwap hacked for $50&nbsp;million

Attackers managed to make transactions from <button class="define-target" id="hot-wallet">hot wallets</button> operated by the Stake betting platform, stealing approximately $15.7&nbsp;million from their Ethereum wallet and around $25.6&nbsp;million from BSC and Polygon. Blockchain analysis project Cyvers attributed the theft to a <button class="define-target" id="private-key">private key</button> leak, though Stake co-founder Edward Craven later denied that. Craven claimed that the attack was achieved through a "sophisticated breach" targeting a service the company uses to approve transactions.<p>Stake acknowledged the attack on their Twitter account, writing that "We are investigating and will get the wallets up as soon as they're completely re-secured."</p><p>Stake is an Australia-based cryptocurrency casino and sports betting platform that has enjoyed endorsements from various celebrities, and which shelled out $100&nbsp;million in 2022 for an endorsement deal with Drake.</p><p>On September 6, the FBI announced that they believed the <a href="https://web3isgoinggreat.com/?collection=lazarus" target="_blank">Lazarus Group</a> was behind the theft. Lazarus is a group of North Korean state-sponsored hackers allegedly responsible for crypto hacks totaling hundreds of millions of dollars.</p>

"Crypto Casino Stake Targeted in Reported $40M Exploit"

Stake hack

Crypto casino Stake hacked for over $40&nbsp;million

Contagion from the massive <a href="https://web3isgoinggreat.com/?id=euler-finance-exploited-for-almost-200-million" target="_blank">exploit of the Euler project</a> has spread to around a dozen <button class="define-target" id="defi">defi</button> projects, including Balancer, Angle Protocol, Yearn Finance, InverseFinance, and others. Some are still evaluating if and how they may be affected, and how much they've lost.<p>Around $11.9&nbsp;million of tokens were sent from the Balancer defi liqiuidity project to Euler during the attack, prompting Balancer to pause the project.</p><p>The Angle Protocol decentralized <button class="define-target" id="stablecoin">stablecoin</button> project also disclosed that almost half of the <button class="define-target" id="tvl">total value locked</button> in the project — around $17.6&nbsp;million in the USDC stablecoin — were sent to Euler during the hack.</p>

"Euler attack causes locked tokens, losses in 11 DeFi protocols, including Balancer"

"Angle Protocol - Q&amp;A Regarding Euler Exploit"

Euler Finance contagion

Over $35&nbsp;million lost as contagion from Euler hack spreads throughout defi

The CoinsPaid crypto payment platform, which provides payment services to various online casinos, reportedly suspended withdrawals under mysterious circumstances. The company later deleted a handful of tweets pertaining to the incident, which they ascribed to a "technical issue".<p>After prominent Bitcoiner Jameson Lopp tweeted that the issue "look[s] more like a hack", CoinsPaid replied "Our team is aware of the issue... Please wait for the official announcement on this topic." Crypto researcher zachxbt responded, "The issue is you got hacked by North Korea that's what lol", referencing the increasing suspicion that the <a href="https://web3isgoinggreat.com/?collection=lazarus" target="_blank">Lazarus group</a> may be behind the disruption. Sure enough, CoinsPaid later confirmed that they had been hacked for $37.3&nbsp;million, and announced that they suspected the Lazarus Group was behind it.</p><p>Some have been speculating that there are connections between this incident and the <a href="https://web3isgoinggreat.com/?id=alphapo-hack" target="_blank">$60&nbsp;million hack of the Alphapo crypto payments processor</a> on July 22. Alphapo also provided services to various online casinos. Indeed, there seem to be connections between Alphapo and CoinsPaid, and they may in fact be operated by the same people.</p>

"CoinsPaid is back to processing after being hit by a hacker attack..."

CoinsPaid hack #1

CoinsPaid hacked for $37.3&nbsp;million

Nevin Shetty, the former chief financial officer of the Fabric e-commerce platform, was federally indicted for wire fraud after allegedly misappropriating $35&nbsp;million from Fabric to put into his cryptocurrency platform HighTower. Shetty stole the money in April 2022, shortly after being told he would be fired from Fabric for performance reasons.<p>According to the grand jury indictment, Shetty planned to put the funds into cryptocurrency positions that "could have yielded returns of 20 percent or more annually", and planned to return 6% to Fabric, keeping the difference. This so-called "investment" contradicted the conservative investment strategy that Shetty had helped to draft for Fabric, and he concealed both the existence of the transfer and his involvement with HighTower.</p><p>Shetty "lost virtually all of [Fabric's] money" "within a matter of weeks", at which point he fessed up to Fabric. Shetty had placed all of the funds into protocols based around the Terra <button class="define-target" id="stablecoin">stablecoin</button>, which <a href="https://web3isgoinggreat.com/?collection=terra-collapse&id=terrausd-ust-stablecoin-struggles-to-retain-peg" target="_blank">collapsed dramatically</a> only a month later.</p><p>Shetty has pled not guilty, and has been released on bond.</p>

<i>United States of America v. Nevin Shetty</i>

"Former Seattle startup CFO denies fraud charges, pleads not guilty to funneling company funds"

Fabric CFO funds misappropriation

Former Fabric CFO accused of siphoning $35&nbsp;million into his crypto startup and losing it all

In November 2022, popular password management tool LastPass disclosed that hackers had stolen "password vaults" containing data belonging to more than 25&nbsp;million users. Although the vaults themselves are encrypted, some experts now believe that these vaults are being cracked to enable access to crypto credentials stored within.<p>A <a href="https://krebsonsecurity.com/2023/09/experts-fear-crooks-are-cracking-keys-stolen-in-lastpass-breach/" target="_blank">report</a> by cybersecurity expert Brian Krebs outlines how various experts have come to this conclusion after analyzing a long string of crypto thefts perpetrated against people with otherwise strong security practices. Altogether, the thefts suspected to have been enabled by the LastPass breach amount to more than $35&nbsp;million.</p>

"Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach"

Stolen LastPass vaults possibly cracked

Stolen LastPass vaults possibly cracked to enable crypto thefts

A Ponzi scheme called Morgan DF Fintoch lured consumers by claiming to be owned by the American banking giant Morgan Stanley. Morgan Stanley themselves warned of the scheme, writing that it was an impersonator, and that any claims of affiliation were false. The government of Singapore also issued a warning about the firm in early May. The company advertised a wallet which they claimed would "pay 1% per day,36% 30 Days and 100% in 63 days".<p>On May 23, crypto sleuth zachxbt tweeted that the project appeared to have executed their exit scam, bridging around 31.6&nbsp;million Tether to various addresses. Platform users began to report that they could not withdraw funds.</p>

Morgan DF Fintoch exit scam

Morgan DF Fintoch likely exit scams for around $31&nbsp;million

An attacker apparently stole $27&nbsp;million in the Tether <button class="define-target" id="stablecoin">stablecoin</button> from a <button class="define-target" id="wallet">wallet</button> that had just withdrawn the funds from their Binance account. The hacker quickly converted the funds to evade attempts at <button class="define-target" id="freezing">freezing</button> the stolen assets.<p>Crypto researcher zachxbt observed that the wallet targeted for the theft had in 2019 received a transfer from the Binance <button class="define-target" id="deployer">deployer</button>, suggesting that the compromised wallet may have some ties to Binance itself.</p>

Binance-linked wallet hacked

Wallet linked to Binance deployer loses $27&nbsp;million in apparent hack

The cryptocurrency trading firm Kronos Research announced on Twitter that they had stopped trading while they investigated "unauthorized access of some of our API keys". They claimed that "potential losses are not a significant portion of our equity". They later confirmed the loss at around $26&nbsp;million.

Kronos breach

Kronos trading firm suffers key breach

A memecoin called $BALD, built on the Coinbase Base test network, appears to have rug pulled for at least $25.6&nbsp;million. Although the Base network is meant to be used for developer testing, some people have tried to trade on the network before its official launch.<p>A pseudonymous crypto user called "Bald" announced that they would be selling $BALD tokens on the Base network, and the token — apparently named after the hairless Coinbase CEO Brian Armstrong — quickly skyrocketed in price. However, the token deployer emptied tokens priced at around $25.6&nbsp;million from the liquidity pool two days after launch in apparent <button class="define-target" id="rug-pull">rug pull</button>. The token price quickly plunged by around 90%.</p><p>Conspiracy theories emerged that the Bald account was in fact operated by Sam Bankman-Fried, the former CEO of FTX who is on house arrest under strict supervision and without access to most websites as he awaits trial later this year.</p>

"BALD Meme Coin on Coinbase Layer-2 Goes to Zero as Dev Pulls Liquidity"

BALD rug pull

BALD memecoin plunges after $25.6&nbsp;million rug pull

It's a dog-eat dog-world in the crypto universe, where everyone's trying to steal money from everyone else.<p><button class="define-target" id="mev">MEV</button> bots are a phenomenon that became popular in recent times: bots that use various techniques to extract value by inspecting pending blockchain transactions and then sending advantageous transactions of their own. In this case, a bot was performing a "sandwich attack": sending transactions just before and just after a pending transaction, which manipulate the price of the underlying asset, allowing the bot operator to "steal" value from the victim — "steal" in quotes, because there is some debate over whether MEV bots are really stealing, or are operating within the rules laid out for them.</p><p>In order to manipulate prices in this way, they have to put a substantial amount of money at risk. A "rogue" Ethereum <button class="define-target" id="mining">validator</button> appeared to replace some of the transactions that were being executed by the bot, leading to a loss of WBTC, USDT, Dai, and WETH totaling a bit over $25&nbsp;million.</p>

"Ethereum Bot Gets Attacked for $20M as Validator Strikes Back"

"Ethereum MEV bots lose over $25 million in sophisticated attack"

Theft from MEV bot

Over $25&nbsp;million taken from an MEV bot by malicious validator

Two fraudsters capitalized on the hype around both cryptocurrency and artificial intelligence, advertising an "artificial intelligence automated trading bot" that they promised would earn large returns for their investors. Instead, however, the fraudsters spent the money on themselves, paying for private chartered jet flights, luxury hotel accommodations, private mansion rentals, a personal chef, and private security guards.<p>In addition to pulling off the original scam, the fraudsters <i>also</i> came up with a fake investigative agency called the "Federal Crypto Reserve", where they directed victims who were seeking to recover their losses.</p><p>The scammers were charged with wire fraud, money laundering, and obstruction of justice, which carry hefty maximum prison terms.</p>

"Two Men Charged for Operating $25M Cryptocurrency Ponzi Scheme"

"AI-powered" crypto ponzi

Fraudsters steal more than $25&nbsp;million in "AI-powered" crypto ponzi

A crypto <button class="define-target" id="phishing">phisher</button> hit it big today when they lured in a victim with a massive wallet balance. The victim wallet was drained of 4,851&nbsp;rETH and 9,579&nbsp;stETH, both <button class="define-target" id="wrapped-token">wrapped</button> versions of ETH used for <button class="define-target" id="staking">staking</button>. Altogether, the tokens are priced at around $24&nbsp;million.<p>The wallet address used by the phisher has been associated with multiple crypto phishing websites which attempt to convince users to authorize transactions, often by impersonating known crypto projects or promising token <button class="define-target" id="airdrop">airdrops</button>.</p>

0x13e38 phished

Victim loses around $24&nbsp;million in phishing scam

The Singapore-based Bitrue crypto exchange suffered a hack on April 14 in which attackers siphoned tokens including Ethereum, Shiba Inu, and MATIC (the token for the Polygon network). Altogether the stolen funds were estimated at around $23&nbsp;million.<p>Bitrue didn't release details on how the attack had been achieved, but explained that one of their hot wallets had been impacted. They announced that they would be pausing withdrawals for several days as they investigated the incident, and that they would be compensating affected users.</p>

Bitrue hack

Bitrue crypto exchange hacked for $23&nbsp;million

There was surprise in an Austrian courtroom when a defendant suddenly gave up any pretense of innocence, proclaiming, "I've run out of steam, I've finished driving... I plead guilty in full and ask for a lenient and speedy sentence". The judge then had to back up and understand what exactly he was pleading guilty to. The same defendant had earlier admitted to some guilt, but denied the fraud had been planned from the start. Later, he said that he had indeed planned from the beginning to steal the funds.<p>The scam in question was a Ponzi scheme  called EXW, in which the eight defendants stole at least €17.6&nbsp;million (~$19.3&nbsp;million) from at least 40,000 victims in late 2019 and 2020. The fraud later resurfaced under a different name. However, in court, the ex-girlfriend of the main defendant testified that the scam had actually brought in €80–100&nbsp;million ($88—$110&nbsp;million).</p><p>One of the defendants, who from reports seems to be the same one who just admitted his guilt in court, reportedly feigned being autistic when he was arrested by police, somehow earning himself enough time to erase the contents of his phone.</p><p>He and seven other defendants have been charged with fraud, money laundering, running a pyramid scheme, and operating a criminal organization.</p>

"EXW Wallet indictments, arrests &amp; criminal trial in Austria"

, <i>Salzburger Nachrichten</i> (in German)

"EXW-Prozess: Hauptangeklagter bekennt sich schuldig"

"Angeklagter bekennt sich im Prozess um Kryptobetrug vollumfänglich schuldig"

EXW fraud

Crypto scammer suddenly pleads guilty in trial surrounding EXW fraud

A scam Hong Kong cryptocurrency platform called Hounax swindled its customers out of HK$148&nbsp;million (US$19&nbsp;million). The group drew in customers by offering financial expertise on social media and awarding prize money to those who signed up to the platform. While some customers successfully tested whether they could withdraw their funds earlier on, the platform later stopped allowing customers to withdraw, or told them they would need to pay additional fees to do so.<p>The Hong Kong Securities and Futures Commission added Hounax to its warning list on November 1, a move that victims have criticized as much too late to stop the damage.</p>

"Hounax scam: Hongkongers who lost HK$148 million to cryptocurrency platform say watchdog warning came too late"

Hounax scam

Hounax crypto scam steals $19&nbsp;million

Holders of the $PEPE <button class="define-target" id="memecoin">memecoin</button> sold en masse after the PEPE <button class="define-target" id="multisig">multisig</button> wallet transferred more than 16&nbsp;trillion $PEPE (~$16.9&nbsp;million) to crypto exchanges. Although the multisig previously required five of eight signatories to approve transactions, just before the massive transfer, the multisig was changed to require only two of eight signatures — a much lower level of security.<p>The transfers and change to the multisig sparked fears that the project was <button class="define-target" id="rug-pull">rug pulling</button>, or had been hacked. This led to a massive $PEPE sell-off, with the token plunging around 17%.</p><p>A day after the transfers, a PEPE team member posted on the project's Twitter account, alleging that the transfers were indeed theft by three of the project's other team members.</p>

"PEPE Plummets 17% as Team Transfers Millions to Exchanges"

Suspicious PEPE transfers

Members of $PEPE team allegedly dump $16.9&nbsp;million worth of tokens

<i>TechCrunch</i> reported that attackers were able to gain access to AT&amp;T email accounts which they then used to gain access to customers' cryptocurrency accounts. Various customers reported their accounts at exchanges including Coinbase and Gemini had been drained. One individual victim lost $134,000 from their Coinbase account.<p>An anonymous source corresponding with <i>TechCrunch</i> claims that the total amount of cryptocurrency stolen is somewhere between $15&nbsp;million and $20&nbsp;million. The tipster also claimed that the hackers have the ability to gain access to any AT&amp;T account via the AT&amp;T employee portal; AT&amp;T has denied this and instead claimed that "the bad actors used an API access."</p>

"Hackers are breaking into AT&amp;T email accounts to steal cryptocurrency"

AT&amp;T customer wallet compromises

AT&amp;T customers suffer crypto wallet compromises reportedly totaling $15–$20&nbsp;million

Blockchain security firm SlowMist has reported that a phishing website appearing to be the real cryptocurrency exchange HitBTC has stolen more than $15&nbsp;million worth of Bitcoin, Tether, and Ether from users believing it to be the real thing. Users who didn't notice they were accessing a site with the URL <code>hitbt2c.lol</code> instead of <code>hitbtc.com</code> approved transactions to swap their crypto assets, only to find the site drained their wallets.

HitBTC phishing website

Traders lose more than $15&nbsp;million to phishing website impersonating crypto exchange HitBTC

The institutional cryptocurrency broker Floating Point Group (FPG) announced to customers on June 14 that they would be suspending all activity on their platform following a "cyber security incident" that had occurred on June 11. "While the loss at this point is still being investigated and analyzed, the number as we understand it today is between $15M-$20M in cryptocurrencies lost," they wrote on Twitter.<p>The group announced that they were working with "the FBI, the Department of Homeland Security, our regulators and Chainalysis" to investigate the attack. The group had previously earned <a href="https://us.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc2report" target="_blank">SOC 2</a> certification for its cybersecurity controls.</p>

"Crypto Prime Broker FPG Loses Up to $20M in Cyber Attack"

FPG hack

FPG halts withdrawals after $15–20&nbsp;million hack

Hackers made off with 61&nbsp;BTC, 350.5&nbsp;ETH, 10&nbsp;million&nbsp;WEMIX, and 220,000&nbsp;USDT from a <button class="define-target" id="hot-wallet">hot wallet</button> belonging to the South Korean cryptocurrency exchange GDAC. Altogether, the assets are notionally worth around $13&nbsp;million. The stolen assets represented 23% of funds custodied on the GDAC exchange.<p>GDAC halted deposits and withdrawals shortly after the attack, and stated that they had reported the exploit to South Korean law enforcement to investigate.</p>

"S. Korean Crypto Exchange Gdac Hacked for Nearly $13M"

"South Korean crypto exchange GDAC hacked for nearly $14M"

GDAC hack

GDAC exchange hacked for assets notionally worth more than $14 million

The Exactly Protocol, an attempt to "decentralize the credit market" built on the Optimism <button class="define-target" id="layer-2">layer-2</button> network, was exploited. The protocol announced a pause to investigate a security issue, after they were alerted to suspicious transactions.<p>An attacker has siphoned more than 7,160&nbsp;ETH (~$12&nbsp;million) from the project, which they've <button class="define-target" id="bridge">bridged</button> back to the Ethereum main chain. The Exactly Protocol's <button class="define-target" id="tvl">TVL</button> plunged from $37&nbsp;million to under $12&nbsp;million following the attack.</p><p>Exactly writes on their website that they had been <button class="define-target" id="audit">audited</button> by four different firms: Chainsafe, Coinspect, ABDK, and Cryptecon.</p>

"Optimism-Based Exactly Protocol Hacked: Over $12M in Ether Drained"

Exactly Protocol hack

Exactly Protocol hacked for at least $12&nbsp;million

A bug in a token issued by the Yearn Finance <button class="define-target" id="defi">defi</button> protocol resulted in a loss that has been estimated at around $11.6&nbsp;million. An attacker was able to use a 10,000 USDT deposit to mint more than 1.2&nbsp;quadrillion yUSDT, a <button class="define-target" id="wrapped-token">wrapped</button> version of the Tether (USDT) <button class="define-target" id="stablecoin">stablecoin</button>. Losses were limited somewhat by the fact that only older versions of the Yearn protocol were vulnerable to the bug, and the version had been "frozen" since December 2022.<p>The attacker began swapping tokens out for other stablecoins shortly after the exploit, moving them into lending projects like Aave and laundering them through the Tornado Cash cryptocurrency <button class="define-target" id="tumbler">mixer</button>. There were early concerns that Aave itself was impacted by an exploit, but it was later clarified that Aave had simply been used to swap tokens involved in the Yearn exploit, and did not appear to itself be vulnerable.</p><p>This is not the first exploit involving Yearn Finance, which was <a href="https://web3isgoinggreat.com/?id=yearn-finance-loses-11-million" target="_blank">hacked for $11 million</a> in 2021, and which <a href="https://web3isgoinggreat.com/?id=over-35-million-lost-as-contagion-from-euler-hack-spreads-throughout-defi" target="_blank">lost around $1.4&nbsp;million</a> in connection to the <a href="https://web3isgoinggreat.com/?id=euler-finance-exploited-for-almost-200-million" target="_blank">massive Euler Finance attack</a> in March 2023.</p>

"DeFi Protocol Yearn Finance Impacted in Nearly $11M Exploit That Occurred Via Aave Version 1"

Yearn Finance hack #2

Yearn Finance exploited for more than $11&nbsp;million

The name Poly Network may ring a bell, because in August 2021 they were <a href="https://web3isgoinggreat.com/?id=611-million-stolen-from-poly-network" target="_blank">exploited</a> for an (at the time) record-setting $611&nbsp;million.<p>Now, it's happened again, and some reports are throwing around even more massive numbers like $42&nbsp;billion. In reality, the exploiters were able to <button class="define-target" id="mint">mint</button> massive quantities of tokens on multiple networks, with their wallet balances showing numbers in the billions. However, complete lack of liquidity for these tokens meant their "billions" are worth substantially less.</p><p>According to crypto research firm Beosin, the attackers have so far cashed out around 5,196&nbsp;ETH (~$10.1&nbsp;million) in liquid assets. Poly Network suspended services shortly after the attack.</p>

"Poly Network Attacker Issues 'Worthless' Billions in SHIB, BNB, BUSD in Latest Crypto Hack"

Poly Network hack #2

Poly Network exploited again

The Estonian crypto exchange CoinLoan announced they were immediately suspending all operations, including withdrawals. The action came after CoinLoan was declared insolvent by an Estonian court, which mandated they suspend activities pending permission from the court.<p><i>Protos</i> speculated that the suspension could be related to Vauld, an exchange that <a href="https://web3isgoinggreat.com/?id=vauld-seeks-protection-against-creditors" target="_blank">collapsed last July</a>. Vauld is rumored to have tens of millions of assets on CoinLoan.</p><p>The same day as Vauld's collapse, <a href="https://web3isgoinggreat.com/?id=coinloan-crypto-lending-platform-reduces-account-withdrawal-limit" target="_blank">CoinLoan implemented a withdrawal limit</a> of $5,000/day.</p>

"Did Vauld drive CoinLoan into court-ordered liquidation?"

Event	Date	Amount More info	Recovered More info
Genesis bankruptcy	January 19, 2023	around $5,100,000,000 in liabilities
HyperVerse scam	December 13, 2023	$1,300,000,000
Himachal Pradesh scam	November 6, 2023	$300,000,000
Crypto romance scam in Southeast Asia	November 20, 2023	$225,000,000
Mixin Network hack	September 23, 2023	$200,000,000
Euler Finance hack	March 13, 2023	$197,000,000	$197,000,000
JPEX collapse	September 25, 2023	$191,000,000
Multichain suspected hack #2	July 6, 2023	$130,000,000
Dog noseprint Ponzi scheme	June 22, 2023	$127,000,000
Poloniex hack	November 10, 2023	$126,000,000
Coin Cloud bankruptcy	February 7, 2023	at least $123,600,000 in liabilities
HTX and Heco Chain hack	November 22, 2023	$115,000,000
Multichain theft #3	July 10, 2023	$107,000,000
Atomic Wallet hacks	June 3, 2023	$100,000,000
Vyper vulnerability affecting Curve	July 30, 2023	$88,000,000 – $102,000,000	$52,300,000
Prime Trust insolvency	June 26, 2023	$83,660,000
Shenzhen Shikongyun Technology scheme	August 15, 2023	$83,300,000
Orbit Bridge hack	December 31, 2023	$81,000,000
$80 million romance scam	December 13, 2023	$80,000,000
BitLucky collapse	May 20, 2023	$75,700,000
CoinEx hack	September 12, 2023	$70,000,000
Alphapo hack	July 22, 2023	at least $60,000,000
Create2 wallet drainer	November 12, 2023	$60,000,000
MS drainer	December 21, 2023	$58,980,000
KyberSwap hack #2	November 22, 2023	$54,700,000	$4,700,000
Stake hack	September 4, 2023	$41,300,000
Euler Finance contagion	March 13, 2023	$37,600,000
CoinsPaid hack #1	July 25, 2023	$37,300,000
Fabric CFO funds misappropriation	May 17, 2023	$35,000,000
Stolen LastPass vaults possibly cracked	September 5, 2023	$35,000,000
Morgan DF Fintoch exit scam	May 23, 2023	$31,600,000
Binance-linked wallet hacked	November 12, 2023	$27,000,000
Kronos breach	November 18, 2023	$26,000,000
BALD rug pull	July 31, 2023	$25,600,000
Theft from MEV bot	April 3, 2023	$25,389,731
"AI-powered" crypto ponzi	December 12, 2023	$25,000,000
0x13e38 phished	September 6, 2023	$24,000,000
Bitrue hack	April 14, 2023	$23,000,000
EXW fraud	December 13, 2023	$19,300,000 – $110,000,000
Hounax scam	November 27, 2023	$19,000,000
Suspicious PEPE transfers	August 24, 2023	$16,900,000
AT&T customer wallet compromises	April 26, 2023	$15,000,000 – $20,000,000
HitBTC phishing website	May 15, 2023	$15,000,000
FPG hack	June 15, 2023	$15,000,000
GDAC hack	April 10, 2023	$13,000,000
Exactly Protocol hack	August 18, 2023	$12,000,000
Yearn Finance hack #2	April 13, 2023	$11,600,000
Poly Network hack #2	July 2, 2023	$10,100,000
CoinLoan suspends withdrawals	April 25, 2023	at least $10,000,000
Wallet draining operation	April 18, 2023	$9,877,350