Crypto Crime Takes a Breather: Web3 Theft Hits a Low Point in October

In a refreshing turn of events, the world of Web3 experienced a significant decline in theft during the month of October. Losses amounted to a mere $32.2 million, marking a notable improvement in cybersecurity measures. This represents a quarter of the monthly average and the second-lowest figure recorded for the year, surpassed only by January. While the drop in theft is a positive sign for the industry, caution is still warranted as new threats continue to emerge.

Decrease in Web3 Theft in October

The month of October brought encouraging news as the Web3 ecosystem saw a significant reduction in theft incidents. Losses totaling $32.2 million indicate a substantial decline compared to previous months. This is not only a quarter of the monthly average but also the second-lowest recorded figure for the year, marking a positive trend for the industry.

Reduction in number of incidents in October

October witnessed a quantitative low in the number of crypto crime incidents. A total of 38 incidents were reported during the month, further underscoring the downward trend. This is a significant improvement compared to previous months, providing a glimmer of hope for increased security in the Web3 space.

Increase in exit scams

While the overall number of crypto crime incidents decreased in October, there was an alarming rise in exit scams. Exit scams, characterized by fraudulent projects suddenly disappearing or shutting down, were four times more prevalent compared to the previous month. This highlights the need for thorough due diligence and caution when investing in unfamiliar projects.

Peak in exploits in September

Although October witnessed a decline in Web3 theft, the previous month had seen a peak in exploits. The breach of Mixin Network resulted in losses totaling $200 million, contributing significantly to the surge in September. While this incident remains a poignant reminder of the vulnerabilities within the ecosystem, the subsequent drop in exploits in October suggests that security measures are being reinforced.

Rise of crypto scams using social media

Crypto scams are increasingly leveraging social media platforms to defraud unsuspecting individuals. Disturbingly, almost half of all cryptocurrency scams reported in the past 18 months were tied to social media. This highlights the need for users to exercise caution, thoroughly vet investment opportunities, and remain vigilant against fraudulent schemes.

Dominance of the North Korean Lazarus Group

The North Korean Lazarus Group continues to be the dominant threat actor in the realm of crypto crime. This sophisticated hacking group, known for its involvement in high-profile cyberattacks, remains a formidable adversary. Their ability to orchestrate large-scale thefts and exploit vulnerabilities underscores the importance of proactive security measures within the Web3 ecosystem.

Decline in incidents according to CertiK’s third-quarter report

CertiK’s third-quarter report further supports the notion of a decrease in crypto crime incidents. The report reveals a decline in incidents from July to September, indicating that efforts to enhance security and awareness are yielding positive results. However, it is crucial to remain vigilant and continuously update security protocols to stay ahead of cybercriminals.

Major incidents in October with relatively lower losses

Despite a decrease in crypto crime incidents, October did witness some noteworthy incidents. However, these incidents did not result in any single loss exceeding $7 million. While this comparatively lower figure is encouraging, it is essential to remain cautious as threats and vulnerabilities persist within the Web3 ecosystem.

October offered a welcome respite from the spike in crypto crime incidents. The decline in Web3 theft, coupled with a reduction in the number of incidents, signifies progress in the battle against cybercriminals. However, the increase in exit scams and the rise of crypto scams on social media are reminders that the landscape remains fraught with risks. Ongoing vigilance, constant security enhancements, and a commitment to education and awareness are crucial as Web3 continues to evolve. As the industry matures, staying one step ahead of cybercriminals is paramount to ensuring the long-term viability and security of the Web3 ecosystem.

Explore more

Cyberattacks Surging Across Medical Device Industry

Cardiology teams were forced to rely on manual data interrogation and in-person clinic visits after a cyberattack disabled the remote monitoring links for heart patients. This specific failure underscored a broader vulnerability within the healthcare infrastructure as the industry faces a surge in sophisticated digital incursions. Throughout the summer and early fall, high-profile organizations—including industry giants such as Medtronic, Stryker,

How Is eBay Securing Its Community After Recent Phishing?

The sudden suspension of private messaging on eBay’s newly redesigned community forum highlights the persistent vulnerability of e-commerce social infrastructures to targeted phishing attacks. As the platform attempted to modernize its user engagement tools, cybercriminals identified a lucrative window of opportunity within the transition period. The irony of the situation lies in the fact that the very features designed to

Iranian Group Nimbus Manticore Targets Tech Sector With New Malware

By installing a fraudulent GitHub Copilot Helper extension in Visual Studio Code, the hacking collective maintains a permanent foothold directly within the primary development environment of its targets. This recent surge in activity marks a calculated departure from the traditional espionage tactics previously employed by the Iranian-linked threat actor known as Nimbus Manticore. In 2026, security analysts have observed the

Australia Needs to Strategically Site Its Data Centers

The sheer scale of upcoming data center projects means that decisions made today will lock in Australia’s industrial energy footprint for several decades. Current discussions regarding Australia’s digital infrastructure are heavily focused on how to power massive data centers with renewable energy, yet the critical factor of physical location remains dangerously overlooked. While political leaders have hit a stalemate over

How to Modernize Hybrid Cloud Orchestration with AWS?

The core objective of modern hybrid orchestration is bridging the gap between cloud-native agility and the physical constraints of bare-metal hardware. Leveraging AWS serverless technologies such as Lambda, Step Functions, and DynamoDB allows these organizations to bridge the gap between cloud-native efficiency and on-premises stability. The goal is to move away from manual, site-specific maintenance and toward an automated, event-driven