In 2024, decentralized finance (DeFi) has seen a 40% reduction in losses, while centralized finance (CeFi) has experienced a troubling increase in security issues, with losses doubling to reach $694 million. A recent security review by Galxe identified and resolved a critical vulnerability in the widely used zero-knowledge proofs (ZKP) library, snarkjs, which could have allowed attackers to bypass verification and expose financial and identity risks. Additionally, the Starknet-based protocol zkLend suffered a hack on February 11, resulting in a loss of $9.57 million due to a decimal precision vulnerability in its smart contracts. This breach highlights a shift in hacker tactics, as 81% of stolen funds in 2024 originated from access control breaches, contributing to a total loss of $1.9 billion, a 76% year-over-year increase. In contrast, losses from smart contract exploits have decreased by 25%.
🔒 Web3's Biggest Security Shift in 2024 🔒 Hackers are moving from smart contract exploits to access control breaches—where the real money is. 🚨 81% of stolen funds came from access control hacks 📈 $1.9B lost (+76% YoY) 📉 Smart contract exploit losses down 25% 🔥 Weak key… https://t.co/xQaEPTfg3V
⚠️ Exposed or forgotten assets are prime hacker targets. In 2024, over 60% of breaches started with small, overlooked assets like old subdomains. Learn how Attack Surface Management (ASM) helps you detect changes in real time and secure vulnerable assets. Read:… https://t.co/1B7KTmL3i5
🚨 Inside the @zkLend Hack On Feb 11, @zkLend got drained for $9.6M due to a rounding vulnerability. The attacker tried to cover their tracks via Railgun’s privacy tech—but things didn’t go as planned. Watch our full breakdown of the exploit 👇 🎥 https://t.co/jbPnIzHkT7