Incidents by month
Crypto hacks and exploits in January 2024
14 incidents. Each links to a full write-up: timeline, OAK Techniques, attacker addresses and fund flow, with sources.
Incidents (14)
- Ripple (Jan 2024): $112.5M — 2024-01-31 · loss $112.5M · OAK-T7.002 CEX Deposit-Address Layering
- Concentric Finance multisig signing-key social-engineering compromise — Arbitrum — 2024-01-22 — 2024-01-22 · loss $1.7M · OAK-T11.002 Wallet-Software Distribution Compromise
- Socket/Bungee bridge exploit (Jan 2024): $3.3M — 2024-01-16 · loss $3.3M · OAK-T9.004 Access-Control Misconfiguration
- U.S. SEC verified X-account compromise and fake Bitcoin ETF approval — chain-agnostic — 2024-01-09 — 2024-01-09 · OAK-T15.006 Impersonation via Verified Social-Account Compromise
- Orbit Bridge exploit (Jan 2024): $81.5M — 2024-01-01 · loss $81.5M · OAK-T10.001 Validator / Signer Key Compromise
- Post-Tornado-Cash DeFi yield-protocol laundering shift — cross-chain — 2024 onward — OAK-T7.001 Mixer-Routed Hop
- NFT marketplace royalty-enforcement sunset and creator-revenue bypass — multi-chain (Ethereum, Solana, Bitcoin ordinals) — 2024 — OAK-T12.003 Royalty Bypass / Marketplace Manipulation
- KK Park compound-operated investment-fraud takedown — Myanmar/Thailand border — 2024 — OAK-T11.005.003 Compound-Operated Investment-Fraud Platforms
- HyperVerse / HyperFund hack (Jan 2024): $1.7B — loss $1.7B · OAK-T11.005.002 Fake-Custodian / Fake-Asset-Manager Fraud
- Gamma Strategies $3.4M Flash Loan Price Manipulation — 2024-01 — loss $3.4M · OAK-T9.001 Oracle Price Manipulation
- DPRK-attributed multi-stage chain-hop laundering via privacy-chain conversions — cross-chain — 2024 — OAK-T7.001 Mixer-Routed Hop
- Blue-chip DeFi yield-protocol laundering via LST and lending-market cover — Ethereum — 2024 — OAK-T7.001 Mixer-Routed Hop
- Email Impersonation Phishing Wave (Jan 2024): $580K — loss $580K
- CoinsPaid $37M Lazarus Group Attack (Jan 2024): $37M — loss $37M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise