$364 Million Lost in April to Crypto Hacks, Scams: CertiK

New CertiK estimates suggest about $364 million was lost through crypto hacks, scams and exploits in April alone.

The cybersecurity firm says the vast majority of this total, $337 million, is related to phishing attacks.

And most of these illicit gains were generated from a single incident, after sophisticated social engineering tactics were used to steal 3,520 BTC from a wallet.

According to on-chain investigator ZachXBT, the funds were quickly laundered through at least six instant exchanges and swapped for Monero, causing XMR's price to surge by 50%.

On Wednesday, ZachXBT confirmed that the victim was "an elderly individual in the U.S." who had held onto the crypto since 2017.

Other notable incidents across April included a $7.5 million attack on the decentralized exchange KiloEX, which was linked to a "price oracle exploit."

A further $5.8 million was stolen from Loopscale, with over $5 million drained from an airdrop contract belonging to Ethereum scaling protocol ZKsync.

According to CertiK, all three of these crypto platforms have managed to recoup funds from white-hat hackers.

April's data is a marked jump from the $28.8 million in losses confirmed in March. But it pales in comparison to the record-breaking $1.5 billion stolen in February, when Bybit was targeted in an audacious hack by North Korean hacking outfit Lazarus Group.

ZKsync Hacker Accepts Bounty, Returns Nearly $5M in Stolen Crypto

A hacker who drained nearly $5 million from Ethereum scaling protocol ZKsync’s airdrop contract has returned the stolen funds within the project’s 72-hour deadline, closing the chapter on the recent exploit. “We’re pleased to share that the hacker has cooperated and returned the funds within the safe harbor deadline,” ZKsync posted on X, formerly Twitter. “The case is now considered resolved.” The recovered assets, consisting of over 44.6 million ZK tokens and nearly 1,800 ETH, are now under the...

CertiK's findings come days after its co-founder Ronghui Gu warned that the security challenges facing blockchain remain "severe," despite this technology becoming "critical global financial infrastructure" in recent years.

He noted that $1.67 billion was stolen by malicious actors between January and March—a quarter-on-quarter increase of 303%—with most attacks targeting the Ethereum ecosystem.

ETH

+6.27%$2,795.27

---

24H7D1M1YMAX

Price data by

ETH price

The cyber security firm says phishing attacks are still on the rise, meaning crypto businesses and investors must take extra care in verifying whether URLs and smart contracts are authentic before transfers are made.

Other top tips include utilizing cold storage that's disconnected from the internet, and not sharing information about crypto holdings on social media.