Analyze the most significant Web3 security breaches of 2024 and the lessons they offer for strengthening the ecosystem.

CertiK Hack3d 2024 Part 2 - Uncovering Major Incidents

Read and Learn

Attackers impersonated Google and Gemini employees, tricking a Genesis creditor into resetting their 2FA. Using AnyDesk, they accessed private keys in a Bitcoin Core wallet, causing massive losses.


The $243 Million Social Engineering Heist

In this exploit, attackers mimicked trusted wallets in transaction histories, leading to the theft of 4,502.9 BTC. This forced DMM Bitcoin to shut down.


DMM Bitcoin’s $304 Million Address Poisoning Incident

After stealing $129 million in an address poisoning attack, an attacker unexpectedly returned the funds, likely fearing legal repercussions or community scrutiny.

The Rare $129 Million Refund Case

Hackers accessed $20 million in seized Bitfinex funds, converting assets into Ether and laundering them through decentralized platforms.

The U.S. Government Wallet Breach

Many major breaches, including fake job offers and phishing traps, involved phishing as a critical tactic, emphasizing its importance as a top threat.