CRYPTO LOSSESIN FEBRUARY 2024
PREPARED BY IMMUNEFICrypto Losses: February 2024
ANALYSIS• In total, we have seen a loss of $200,478,412 to hacks and rug pulls in 2024
YTD across 32 specific incidents. This represents a 15.4% increase whencompared with the same period in 2023 at $173,693,675.

February 2024 vs. January 2024
$133,412,617• In February 2024, $67,065,795 was lost due to hacks and fraud across 12
specific incidents. This represents an almost 2x decrease from January 2024,
when registered losses were $133,412,617.

$67,065,795• Most of the sum was lost in two specific projects: PlayDapp, a crypto gaming
platform, which incurred a loss of $32,350,000, and FixedFloat, a
decentralized crypto exchange, with a $26,100,000 loss.
• In February 2024, DeFi was the main target for exploits, while CeFi did notwitness a single major attack.
• Hacks continued to be the predominant cause of losses as compared to fraud.
A total of $65,413,795 was lost due to hacks across 10 specific incidents. Twofraud events happened in February, totaling $1,652,000.

January 2024

February 2024

PREPARED BY IMMUNEFI• The most targeted chain in February 2024 was Ethereum.

2Top 10 Losses in February 2024
PlayDapp$32,350,000.00

FixedFloat$26,100,000.00

Duelbits$4,600,000.00

RiskOnBlast$1,496,000.00

Blueberry Protocol*$1,350,000.00

Miner$466,000.00

xPET$254,000.00

DeezNutz_404$170,000.00

The Not Found (404)$156,000.00

Rugged Art$70,000.00

PREPARED BY IMMUNEFI

3

Hacks vs. Fraud Analysis
In February 2024, hacks continued to be the predominant cause of losses ascompared to fraud. An analysis of the losses shows that fraud accounts for only
2.46% of the total losses in February 2024, while hacks account for 97.54%.

Hacks vs. Fraud
February 2024
Fraud
2.46%

OVERVIEW• Hacks
In total, we have seen a loss of $65,413,795 to hacks in February 2024 across 10
specific incidents.
• Fraud
In total, we have seen a loss of $1,652,000 to fraud in February 2024 across 2
specific incidents.

Hacks
97.54%
PREPARED BY IMMUNEFI4

DeFi vs. CeFi AnalysisDeFi vs. CeFi
February 2024

In February 2024, DeFi again became the main target for exploits in terms of funds
lost, compared to CeFi. This was primarily led by the high-profile attacks on
PlayDapp, FixedFloat and Duelbits. In contrast, CeFi did not witness a single major
exploit.

OVERVIEW• DeFi
DeFi suffered $67,065,795 in total losses in February 2024 across 12 incidents.

• CeFi
CeFi did not suffer from an attack in February 2024.

DeFi
100%
PREPARED BY IMMUNEFI

5Losses by Chain
Losses by ChainFebruary 2024

The most targeted chains in February 2024 were Ethereum, BNB Chain, andBitcoin.

OVERVIEW• Ethereum suffered the most individual attacks, with 12 incidents representing
85.71% of the total losses across targeted chains. Bitcoin and BNB Chain
witnessed 1 incident each, representing 7.14% respectively.

Bitcoin
1BNB Chain
1Ethereum
12PREPARED BY IMMUNEFI

6

Crypto Losses February 2024
HACKS VS. FRAUDTOTAL LOSSES YTD$200,478,412$65,413,795

Hacks
Fraud

IN FEBRUARY$1,652,000$67,065,795
DEFI VS. CEFI
MAJOR LOSSES

DeFi$32,350,000

CeFi$67,065,795$0$26,100,000

TOP LOSSES BY CHAIN$4,600,000$1,496,000 $1,350,000*locotorPyrr
ebeul
Btsal
Bn
O
ksiR

sti
bleuD

taol
FdexiFppa
DyalP

For more information about the Crypto Losses Report, please visit immunefi.com/research.

85.71%

Ethereum
BNB Chain

7.14%

Bitcoin7.14%

Immunefi
Immunefi is the leading bug bounty and security services
platform for web3 protecting over $60 billion in user funds.
Immunefi features a massive community of whitehat hackers
who review projects’ blockchain and smart contract code, findand responsibly disclose vulnerabilities, and get paid formaking crypto safer. With Immunefi, whitehat hackers are
rewarded based on the severity of the vulnerability that they
discover, creating incentives for as many experts as possible
to examine project code for vulnerabilities.
Immunefi has pioneered the scaling web3 bug bounties
standard, meaning that rewards should be priced accordinglywith the severity of an exploit and the volume of funds at risk,
which resulted in the company building the largest communityof security talent in the web3 space.

TOTAL BOUNTIES PAID

Immunefi has paid out over $90 million in total bounties, while saving over $25
billion in user funds.

TOTAL BOUNTIES AVAILABLE

Immunefi offers over $157 million in available bounty rewards.

SUPPORTED PROJECTS

Trusted by established, multi-billion dollar projects like Synthetix, Chainlink,Polygon, LayerZero, MakerDAO, TheGraph, Wormhole, Optimism and more,
Immunefi now supports more than 300 projects across multiple crypto sectors.

LARGEST BUG BOUNTY PAYMENTS IN THE
HISTORY OF SOFTWARE

Immunefi has facilitated the largest bug bounty payments in the history ofsoftware:• $10 million for a vulnerability discovered in Wormhole, a generic cross-chain
messaging protocol.
• $6 million for a vulnerability discovered in Aurora, a bridge, and a scaling
solution for Ethereum.
• $2.2 million for a vulnerability discovered in Polygon, a decentralized
Ethereum scaling platform that enables developers to build scalable, userfriendly dApps.

Disclaimer:• Immunefi uses publicly available data and news reports in order to access and collect alleged fraud, scams, and rug pulls. Including such incidents
in this report does not constitute a determination from Immunefi that a fraud, scam, or rug pull event did occur.
Notes:• Immunefi assesses the volume of crypto funds lost by the community due to hacks and scams by reviewing, validating, and classifying publicly
available data. In this report, Immunefi considered only rug pulls for its fraud category. A rug pull is a project that creates an image of credibility
and attracts outside capital through token sales or other means with the sole purpose of stealing deposited user funds and disappearing.
• Blueberry Protocol later recovered $1.08 million of the funds stolen.
More:• If you’re a developer thinking about a bug-hunting career in web3, we got you. Check out our Web3 Security Library, and start taking home someof the over $157M in rewards available on Immunefi — the leading bug bounty platform for web3.
For more information, please visit https://immunefi.com/