Threat Actors Stole Over $2.2 Billion From Crypto Platforms in 2024

In 2024, more than $2 billion worth of cryptocurrency was stolen from crypto platforms, marking the fifth consecutive year that thefts have exceeded $1 billion. The number of incidents increased to 303 in 2024, from 282 in 2023, with losses reaching $1.5 billion between January and July alone. This surge put the industry on track for $3 billion in thefts for the year, although the frequency and size of attacks diminished after significant breaches at Japanese platform DMM Bitcoin and Indian company WazirX. The DMM Bitcoin hack, resulting in a $305 million loss, forced the platform to shut down and sell its assets to SBI Group. The stolen funds were traced and laundered through various platforms, ultimately being cashed out on the Cambodian platform Huione Guarantee, linked to organized crime. Meanwhile, Indian authorities arrested a suspect in connection with the $235 million WazirX theft. North Korean hacking groups were responsible for a significant portion of these thefts, stealing $1.34 billion across forty-seven (47) incidents in 2024, a substantial increase from $660.50 million in twenty (20) attacks in 2023. The growing frequency and scale of North Korean crypto heists are of note, which the regime uses to bypass international sanctions and fund its ballistic missile programs. Notably, attacks valued between $50 million and over $100 million became more common in 2024 compared to previous years. Despite some of the largest hacks being attributed to North Korean actors, they have also begun targeting smaller amounts from minor platforms. However, a decline in attacks by North Korean groups was observed after July, attributed to a summit between Russian President Vladimir Putin and North Korean leader Kim Jong Un. Consequently, the DPRK’s stolen amounts decreased by approximately 53.73%, while non-DPRK thefts increased by 5%.