Report: 165 security incidents in the Web3 space so far in 2024, costing more than $2.30 billion
According to a report by Cyvers summarizing key security trends for 2024, Web3 cyber threats increased dramatically in 2024, with losses exceeding $2.30 billion and 165 security incidents. Losses, while 40% higher than in 2023 ($1.69 billion), are still $1.42 billion lower than in 2022 ($3.78 billion). Notably, $1.30 billion of stolen funds were recovered this year.
Cyvers said access control-related incidents (67) accounted for 81 percent of the $2.30 billion loss, with about 98 smart contract bugs totaling $456.30 million and one address poisoning incident resulting in more than $68 million.
When breaking down losses by attack vector over the past three years, the data shows that losses related to access control breaches have gradually increased from $769 million in 2022 to $1.90 billion by the end of 2024. In contrast, losses related to code exploits in 2023 and 2024 are much lower than losses of about $3 billion in 2022.