In a recent blog post, blockchain analytics and security firm Chainalysis reported a decrease in cryptocurrency theft in 2023. According to the firm, the crypto market experienced a collective loss of $1.7 billion, marking a significant 54.3% reduction from the $3.7 billion stolen in 2022. This reduction can be attributed to a drop in decentralized finance (DeFi) hacking, which was the primary driver of stolen crypto in 2021 and 2022. While the decrease in fiat value is promising, there was still an increase in individual hacking incidents, with the number rising from 219 in 2022 to 231 in 2023.
Although the overall number of cryptocurrency hacks increased in 2023, the number of DeFi attack incidents specifically decreased by 17.2%. This decline can be seen as a positive development in the fight against cyber fraud. Chainalysis also highlighted the involvement of North Korea-backed hacking groups, such as the Lazarus Group and Kimsuky, in the crypto industry. These groups collectively stole $1 billion in 2023, compared to $1.7 billion in 2022.
The report revealed that cyberattack groups stole $428.8 million from DeFi platforms, $150 million from centralized crypto service operators, and $330.9 million from crypto exchanges. Additionally, crypto wallet service providers lost $127 million to North Korea-backed hackers. These figures emphasize the widespread impact of cryptocurrency theft across various sectors within the crypto industry.
Chainalysis disclosed that DeFi platform hacks fell by more than 63% in 2023, with only $1.1 billion stolen compared to $3.1 billion in the same period in 2022. The amount of digital tokens stolen on DeFi protocols also decreased, and the median loss per DeFi hack dropped by 7.4% over the past year. The report attributed this significant drop to both the lower amount of lost funds in the DeFi space and the improved security measures implemented by an increasing number of DeFi protocols.
The lower DeFi losses can be primarily attributed to the decrease in assets locked in the permissionless trading ecosystem. At the height of its popularity, the DeFi ecosystem had over $300 billion in total value locked (TVL). However, due to various challenges faced by the ecosystem, the current TVL is approximately $54 billion. This decrease in funds available to steal may have played a role in the decline of DeFi hacks.
Chainalysis provided insights into the favored methods used by hackers in DeFi hacks. The attack vectors are categorized into two groups: on-chain and off-chain. On-chain vulnerabilities originate from the online components of a DeFi protocol, such as smart contracts, rather than the underlying blockchain itself. Off-chain attack vectors focus on vulnerabilities outside the protocol, such as the storage of private keys on a faulty cloud storage solution.
Compromised private keys, price manipulation attacks, and smart contract exploitations were identified as the primary causes of DeFi hacks in 2023. These sophisticated and diverse attack vectors drove the losses incurred by the DeFi sector. Addressing these vulnerabilities and finding robust solutions can play a crucial role in preventing future DeFi hacks and protecting user assets.
While the decrease in cryptocurrency theft in 2023 is an encouraging sign for the crypto industry, it is essential to remain vigilant against evolving cyber threats. The decline in DeFi hacks, coupled with increased security measures, suggests progress in combating crypto theft. However, as hackers continue to refine their tactics, it is crucial for businesses and individuals to prioritize cybersecurity and implement robust measures to safeguard their assets in the ever-expanding world of cryptocurrencies.