According to the latest Web3 security report by the blockchain security auditor Hacken, there were a total of 117 hacks in Q3 of 2023 while the value of funds stolen in this period topped $720 million. For context, there were 131 hacks in the preceding quarter yet only $327 million was stolen.

As noted in the study report, access control breaches were again the most financially damaging attacks “causing $449 million in losses from just 8 incidents.” The report added that the category’s average losses of tens of millions of dollars per incident again show that “the human factor remains the most exposed part of the crypto industry.”

While the losses ($49.80 million) from rug-pull incidents are significantly lower than the $449 million lost via access control and reentrancy, the study data shows rug-pulling incidents as the most prevalent form of attack.

“Another glaring trend is the prevalence of rug pulls – a type of exit scam characterised by a sudden withdrawal of liquidity, often accompanied by changes in tokenomics or the project’s smart contract. Understanding the anatomy of this scam is crucial because they make up most exploits this year. Despite the relatively low average check cashed by the malicious actors of $638,594, it’s one of the simplest scams to prevent,” the report stated.

On why cybercriminals still siphon user funds via this tactic, the Hacken report revealed that approximately 15%, or 12 out of 78, examined rug pull incidents had been audited. Furthermore, the report noted that many users often overlook a project’s poor audit score. However, such a score may sometimes indicate an even deeper problem.

To illustrate, the Hacken report cites the audit findings from Magnate Finance, which unequivocally declared that “a deployer could manipulate the token.” Unfortunately, many users “continued to participate in protocol for almost 3 months after the audit results.” As a result, the deployer was able to “remove LPs in multiple transactions” and more than $5 million was stolen.

Meanwhile, the report urged users to analyze token ownership, liquidity conditions, and audit outcomes before investing their funds. Users should also prioritize projects with renounced admin controls and community-led finances, the report added.

免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。