
SlowMist|6月 03, 2025 09:26
🚨May 2025 Web3 Security Recap🚨
📊According to SlowMist’s Hacked(https://hacked.slowmist.io):
⚠️15 hacks ➡️ ~257M lost
❄️~162M recovered/frozen
🎣Phishing losses via @realScamSniffer:
7,164 victims ➡️ ~9.6M stolen
Major incidents:
• Cetus Protocol lost 230M in a math overflow attack
• Cork Protocol exploited for 12M+ due to insufficient validation of user-supplied data
• BitoPro lost 11.5M; funds laundered via Tornado Cash, Thorchain, and Wasabi
• Demex lost 950K from an oracle manipulation targeting a deprecated vault
• Zunami Protocol lost 500K; root cause under investigation
Security Highlights:
⚠️Contract vulnerabilities caused 95% of total hack losses
🎭Account takeovers surged again
😈Lazarus Group is now targeting individuals—one victim lost 5.2M to malware
✍️Full report:
https://slowmist.medium.com/slowmist-monthly-security-report-may-estimated-losses-at-266-million-347917804a51