Complete Gate Post tasks to upgrade your rank

Credit Ranking

[//]:content-type-MARKDOWN-DONOT-DELETE
![](https://gimg2.gateimg.com/image/article/1700024128RDZZ 1.jpeg)
Malicious actors stole cryptocurrencies worth more than $356 million in November 2023. 

Crypto hacks led to losses amounting to $335.63 million, phishing scams around $14.6 million and rugpulls about $6.3 million.

To prevent hacks and other crypto crimes DeFi projects should improve their crypto securities measures by conducting timely audits. 

Keywords: crypto rug pulls, crypto hackers, crypto crime, crypto losses, crypto security tips, crypto hacks, crypto phishing, phishing scams, crypto scammer, crypto scam, crypto fraud
## Introduction
Investing in cryptocurrencies come with various risks which include high price volatility, hacks, [phishing](https://www.gate.io/blog_detail/1425/what-is-phishing-and-how-to-protect-ourselves-from-phishing-attacks "phishing") and rug pulls, among others. Crypto hacks and rugpulls are not spread evenly throughout the year. They occur during certain periods or crypto seasons

In 2023 [there were many hacks](https://www.gate.io/blog_detail/1008/15-biggest-crypto-hacks-and-heists "there were many hacks"), rug pulls and phishing incidents in November. In this article we discuss some of these incidents. We will also explore ways in which crypto investors may protect themselves from such risks. 

Read also: [The Biggest Crypto Heist in History](https://www.gate.io/blog_detail/2158/the-biggest-crypto-heist-in-history "The Biggest Crypto Heist in History")

## Surge in Hacks, Rugpulls and Phishing Incidents in November
November had many incidents of hacks, rugpulls and phishing which resulted in loss of cryptocurrencies worth over $356 million. In fact, there were a total of 26 crypto security incidents during the month. 

In summary, hack attacks led to a loss of about $335.63 million, phishing scams around $14.6 million and rugpulls approximately $6.3 million. Notably, the losses from breaches and scams increased by 6.9% in November over October. 
## Loss from hack attacks
As noted above, much of the loss from exploits and other malicious actions was through hacks. There were two serious hacking incidents where crypto assets worth more than $100 million were lost in each case. 

Specifically, Poloniex, a crypto exchange, lost $126 million while hackers stole cryptocurrencies worth $100 million from HTX, formerly <a href="/price/huobi-ht" target="_blank" class="blog_inner_link">Huobi</a> Global. HECO Bridge, a cross-chain bridge affiliated to HTX, lost $110 million worth of crypto assets. These incidents constituted about 66% of the total losses arising from bad actors in November. 

Examples of DeFi projects that were hacked are KyberSwap and Raft Fi. The major contributing factor for successful hacks were poor smart contract security measures. 
## Phishing Scams
In total, phishing scams led to the loss of crypto assets that exceed $1 million. In simple terms, phishing scams involve fraudulently accessing personal or platform details such as private keys. Examples of affected platforms are <a href="/price/dydx-dydx" target="_blank" class="blog_inner_link">dYdX</a>, KyberSwap, Poloniex, HTX and CoinSpot.

Read also: [How to Protect Yourself From Seed Phrase Scams](https://www.gate.io/learn/articles/how-to-protect-yourself-from-seed-phrase-scams/59 "How to Protect Yourself From Seed Phrase Scams")
## Centralized and Decentralized Exchanges  
The malicious actors exploited both centralized exchanges (CEXs) and decentralized ones (DEXs)resulting in loss of crypto assets. In short, these crypto exchanges lost a total of $215 million in November alone. As highlighted above, dYdX, KyberSwap, Poloniex, HTX and CoinSpot are among the affected exchanges. These exchanges need to improve their security systems to prevent similar exploitations in the future. 
## How the Exploits Occurred
Previously, we  mentioned some hacking incidents that led to loss of funds. Now, let’s analyse a few of these hacking and phishing incidents in detail. 

**Kronos Research**: On 19 November crypto hackers exploited Kronos Research resulting in loss of cryptocurrencies worth $25.65 million. The hackers compromised Kronos’ application programming interface (API) keys.

It lost various crypto assets including USDC, ETH and USDT in the process. API keys are an alternative to passwords or a form of authentication. Therefore, anyone who gets hold of blockchain based projects’ APIs can access their digital assets.  

**Poloneix**: During the same month, November, a crypto hacker exploited Poloneix, a cryptocurrency exchange, stealing coins and tokens worth $126 million. In fact, the bad actor accessed the exchange’s private keys for hot wallets. 

The fact is that once a hacker accesses an individual or organization’s digital wallet private key he/she can send tokens from the wallet. Based on the way the attack unfolded some analysts believe that the Lazarus Group, linked to the North Korean government, was responsible for the exploitation. 

**KyberSwap**: The hacker attacked the KyberSwap Elastic which enabled him/her to access cryptocurrencies worth about $48 million. In this case, the attacker manipulated price differentials between different crypto markets. In other words, it was a direct attack on the exchange’s liquidity pools. However, that error could have been prevented through smart contract auditing.

**Attack on dYdX**: With this crypto crime, the attacker drained 40% of the insurance fund used for protecting users from backstopping other traders' losing trades. 

Specifically, the hacker manipulated the Yearn Token market which normally has very low trading volumes. He/she took advantage of the flaws in the dYdX's risk management system. 

**HTX Exchange**: On 22 November, HTX exchange lost cryptocurrencies worth over $13.6 million due to compromised hot wallets. Most of the cryptocurrencies were converted to ETH and drained from its three wallets. In all, the exchange lost 78 million USDC, 1,240 ETH, 62,200 <a href="/price/link-ln" target="_blank" class="blog_inner_link">LINK</a> and 7.3 million USDT.
## Other DeFi Platforms that Lost Cryptocurrencies
There are many more DeFi platforms that lost much crypto assets. The following table list some of them and the different causes of the exploits.  
![](https://gimg2.gateimg.com/image/article/17024392641.png)
November Crypto Hacks and Losses - Defillama

It is important to note that the above list is not exhaustive of the crypto crimes that occurred during November. However, it captures the main ones  for the month. 
## Phishing Scams and Rugpulls
Apart from the list of crypto hacks we have so far listed and discussed there were several other phishing scams and rugpulls in November. For Example, on 15 November a wallet lost $3.4 million as a result of phishing. The owner was enticed to sign what the crypto scammer termed an “increaseAllowance" transaction.

On 23 November there was a rug pull on the <a href="/price/bnb-bnb" target="_blank" class="blog_inner_link">BNB</a> chain where a “deployer” removed liquidity worth $1.7 million. Also, on 27 November, Inferno Drainer, a fraud service provider, announced that it was closing down. In that crypto scam incident the users lost crypto assets worth over $80 million. 

Again, another rug pull occurred on the BNB chain on 30 November when the Fuding Token project closed down, disappearing with over $520,000. Further to this, [there are other rug pull](https://www.gate.io/blog_detail/488/ "there are other rug pull") and phishing scams we have not listed here. 

After discussing the above crypto crimes and the related crypto losses, it is clear that both DeFi projects and their users should put in place various measures to prevent similar cases in the future. 

Related news: [North Korean hackers stolen over $200M in Crypto in 2023](https://www.gate.io/blog_detail/3094/daily-news-a-new-vulnerability-in-ios-16-may-cause-crypto-devices-to-be-hacked-north-korean-hackers-stolen-over-200m-in-crypto-in-2023-7-trending-tokens-are-about-to-be-unlocked "North Korean hackers stolen over $200M in Crypto in 2023")
## Cybersecurity Tips from Gate.io Experts
There is no question that some of the crypto fraud and crime incidents, we have discussed, would have been avoided through strong security measures. This is because most of the DeFi platforms that were compromised had flaws in their smart contracts. 

Read also: [What is Cryptojacking?](https://www.gate.io/learn/articles/what-is-cryptojacking/871 "What is Cryptojacking?")

Therefore, to reduce crypto crime incidents these DeFi projects should have regular security audits and clear plans to deal with emergencies in case of crypto hacks and other crypto crimes. They should also train their employees on security issues. 

In addition, it is important to have constant checks when their smart contracts are running. More importantly, the projects should improve their private key management systems. Such measures may help to reduce the number of crypto security incidents and the crypto losses they incur if there are system breaches.  
## Crypto Security Tips for Users
Crypto users should maintain vigilance when working online to [avoid security traps that include phishing](https://www.gate.io/learn/course/crypto-security-fraud-safety-and-hack "avoid security traps that include phishing"). Basically, phishing scammers aim to access the users’ personal details that include email addresses, private keys and seed phrases. They use different methods to get such data.

To prevent phishing the users should avoid opening links sent by people they do not know. It is also important to avoid replying to emails from unknown senders. In addition, never give people your PINs, 2FA codes and private keys, no matter what. That will protect your digital assets. 

And never provide your important information to websites whose owners and purposes you are not conversant with. In the past, for Example, many users fell prey to fake airdrops thereby losing their digital assets. 

Another important thing is to avoid using public Wi-Fi when making crypto transactions or when using electronic gadgets that have essential information like private keys and passwords. If you use a public Wi-Fi ensure to use VPN and never open pop-up windows. 

One should always adhere to commonplace security measures like using strong passwords and regularly changing them. In addition, always update your applications and browsers as that entails improving your security measures. Similarly, it is very wise to store most of your digital assets in cold wallets. 

Every investor should also know how to identify and stay safe from rugpulls. For Example, it is very vital to invest in reputable blockchain platforms like crypto exchanges. This is because most exchanges are diligent in vetting the cryptocurrencies they list. 

Furthermore, if you are new to cryptocurrencies the best thing to do is to invest in established cryptocurrencies like <a href="/price/bitcoin-btc" target="_blank" class="blog_inner_link">Bitcoin</a> and ETH. Again, some exchanges have their coins and tokens like BNB and Gate Coin which are more secure than the others. Trying to invest in newly launched cryptocurrencies may lead to much loss. 
## Conclusion 
During 2023 November was the worst month in terms of crypto crimes like hacks, rug pulls and phishing scams. DeFi projects and crypto investors incurred more that $356 million in crypto losses as a result of security breaches and crypto frauds. DeFi projects can prevent such crimes through improving their crypto security measures. 


<div class="blog-details-info">
<div>Author:** Mashell C.**, Gate.io Researcher
<div class="info-tips">\*This article represents only the views of the researcher and does not constitute any investment suggestions.
<div>\*Gate.io reserves all rights to this article. Reposting of the article will be permitted provided Gate.io is referenced. In all cases, legal action will be taken due to copyright infringement.
</div>

简体中文

English

Tiếng Việt

Español

Русский язык

Français

ภาษาไทย

日本語

Indonesia

Deutsch

عربي

Português (Portugal]

Português (Brasil]

繁體中文

Українська

There was a 6.9 fold increase in crypto crimes in November over October which led to losses of more than $356 million.

福利中心

小红花-Learn & Explore-博客

小红花-Learn & Explore-快讯

币圈-币圈-未来事件

小红花-Learn & Explore-聊天室

小红花-Learn & Explore-直播

小红花-Learn & Explore-动态

币圈

Gate OTC

芝麻金融-更多-财富管理

机构-APIs

机构-大宗交易服务

机构-经纪商项目

全球做市商计划

机构-托管和资产管理

机构借贷

机构-做市商项目

小红花-Promotions-机构和VIP服务

量化基金

机构-基础架构

机构-交易

机构-金融

结构化产品

机构-主页

衍生品-统一账户

芝麻金融-更多-抵押借币

vip服务

机构

策略跟单

现货跟单

交易-合约跟单

跟单

量化策略-探索

量化策略-进阶

量化策略-基础

交易-机器人广场

创建机器人

探索机器人

杠杆网格

无限网格

期现套利

组合指标策略

智能调仓

现货马丁格尔

合约网格

现货网格

交易机器人

芝麻金融-更多-ETH2.0挖矿

芝麻金融-更多-法币理财

链上赚币

芝麻金融-理财-双币宝

芝麻金融-理财-定期理财(屯币)

芝麻金融-理财-结构性理财

芝麻金融-理财-理财宝

芝麻金融-理财-余币宝

GT挖矿

芝麻金融-更多（理财产品）

芝麻金融-理财（打新）

launchpool

launchpad

赚币-HODLer Airdrop

candy_drop

web3 Airdrop

赚币

模拟交易

衍生品-期权

衍生品-交割合约

衍生品-永续合约

合约入门

合约活动

衍生品

交易-杠杆ETF

交易-杠杆交易

交易-闪兑

交易-现货交易

交易-创新交易

交易-交易工具

交易-交易类型

交易-盘前交易

交易

行情

买币-gateCard

卖币

买币-快捷交易

买币

买币-paywith

法币定投

小红花-推广

新手指南

活动中心

小红花-Learn & Explore-学院

小红花-Exchange-最新公告

小红花-Exchange-帮助中心

gate商店

小红花-Promotions-邀请计划

小红花-promotions-代理商

储备金

合作伙伴

cextg小程序

小红花

web3

November Crypto Incidents: Users bear heavy Losses of $356 Million Due to Hacks, Phishing and Rug Pulls