🔐 March 2024 Blockchain Security Report
March was a quiet month with a relatively low amount of stolen funds ($124M vs. $398M in Feb), even more so when considering that $62M from Munchables was returned by the attacker, lowering the total losses for March to $62M.
Thread 🧵 > The Munchables attack was interesting due to its use of social engineering. The project, which runs on Blast, had an anon dev that controlled the keys for the main contract. This individual stole the funds and demanded $1M. After negotiations, all of the funds were returned.

Hi!

In previous threads, we have talked about SIM swap attacks and explained how they work. This method has gained popularity for being used to hack very famous people and organizations in the technology and finance industry.



Let's cover some of them 🧵

https://twitter.com/blockfence_io/status/1718844219085689339

Jack Dorsey - Ex Twitter CEO

In 2019 his Twitter account got hacked and used to tweet racial and antisemitic messages. This was achieved by a group called Chuckle Squad who had carried out several attacks on famous influencers on Youtube and Instagram.
theverge.com/2019/8/30/2084…

🔐 Telegram scam investigation 🕵️‍♂️
Our team has recently discovered a rug pull scam involving the deposit of around 300 ETH of stolen funds into Biget and Bybit. It has been discovered that fraudulent activity was carried out through the Telegram “NoLiquids”.
Small thread 🧵.. This group has nearly 43K members. As per our investigation of four fake tokens, approximately 1K users may have fallen into this scam. However, considering this group has been active since mid-2019, we believe the number of victims may be significantly higher.

🔐 January 2024 - Blockchain Security Report 📊
Check out our monthly security report on what happened during the first month of the year.
Here you have a brief summary or you can also download it (link in last message).
Let's go! 🧵... 📅 January began as a relatively quiet month with no significant attacks involving lost funds.

🚨 MASSIVE $32M RUG PULLS OPERATION UNVEILED 🔒
We are sharing an investigation conducted by our team, which resulted in:
- More than 1.300 different token rug pulls
- More than $32M stolen
- More than 42.000 victims
- Novel techniques used to avoid being detected
A thread 🧵 ... In this thread, we will provide a detailed explanation of how scammers carry out a series of rug pulls and the deceptive techniques they use to mislead traders while avoiding detection by scam detectors. We also traced some used funds to a well-known exchange.

🚨 Millions of dollars are being stolen daily due to private keys mismanagement.
🔑 How do they work?
🔏 What measures should you take to avoid getting hacked and having your wallet drained
A thread about this ...🧵 As you may already know, the security of the most used wallets nowadays, relies on private keys. Private keys are a string of alphanumeric characters that protect the assets in your wallet. If you lose it or it gets stolen, your coins are gone.

Last week, Mark Cuban's wallet was hacked for about USD 850K. What happened and what simple security measures can we take in order to avoid these risks?
Let's see them one by one👇

Due to the nature of the attack, where many different tokens were drained (USDC, USDT, ENS, stETH, etc.), it seems to be a clear case of stolen private key. When this happens, your funds in all EVM networks can be stolen as they share the same private key.