The Crypto Hack Storm: Massive Funds Stolen and North Korean Attack Tactics Evolving
According to PeckShields monitoring statistics, in August 2024, over 10 hacking incidents occurred in the crypto sector, resulting in a loss of approximately $313.86 million. The two largest hacks involved unauthorized transfers (phishing), accounting for 93.5% of the total stolen funds, amounting to $293.4 million. Top 5 hacking incidents in August: Phishing: $238 million (BTC) Phishing: $55.4 million (DAI) Ronin: $12 million (recovered) Unauthorized transfer: $5.1 million Nexera: $1.83 million The data shows that the average monthly stolen funds in the crypto sector exceeded $200 million this year.First Major Hack in September: Penpie Attack According to Beosin Alert, the DeFi protocol Penpie, built on Pendle, suffered a hack resulting in the theft of approximately $27 million in crypto assets. Beosins analysis revealed that the attacker exploited the claimRewards function in the market contract, using a reentrancy attack to inflate the staking contract balance and extract surplus staked assets. Summary of the attack process: 1. The attacker created an attack contract and built the corresponding market contract via the official factory. 2. The attacker called the batchHarvestMarketRewards function to update market rewards. 3. During the reward update, the claimRewards function was called back, allowing the attacker to stake flash-loaned assets, creating a discrepancy in the staking contract and extracting the surplus. 4. The attacker