Crystal Blockchain, a blockchain analytics firm, has published a comprehensive study detailing security breaches, fraud, and scams in the cryptocurrency and DeFi space. According to the report, approximately $16.7 billion worth of crypto assets have been stolen since 2011 across 461 incidents in 45 countries.
2022 Losses Hit $4.17 Billion
Last year alone, Crystal’s intelligence team documented 199 incidents resulting in $4.17 billion in stolen assets, making 2022 the second-worst year on record. So far this year (as of March 21, 2023), 19 incidents have led to losses of $136 million. The breakdown shows 231 DeFi hacks, 135 security attacks, and 95 fraudulent schemes. Scams caused the highest total value—over $7.5 billion—while DeFi hacks accounted for $4.81 billion.
US Most Frequent, China Suffers Largest Losses
The United States recorded the highest number of incidents targeting crypto companies and bad actors. However, China topped the value chart due to the massive PlusToken Ponzi scheme in 2019 and the Wotoken Ponzi in 2020. Prior to 2021, centralized exchange (CEX) security breaches were the most common, but attackers have since shifted focus to decentralized finance (DeFi). In 2022, the ratio of CEX to DEX hacks was as high as 1:13, making CEX attacks the least damaging financially.
Largest DeFi Hack and Money Laundering Trends
The biggest DeFi exploit to date remains the Ronin Network bridge hack in March 2022, with losses exceeding $650 million. Most of the stolen funds were moved to Tornado Cash, still the most popular mixer on Ethereum for laundering illicit funds. The top 10 DeFi exploits alone accounted for over $2.61 billion in lost assets last year. Additionally, NFT rug pulls surged in 2022, with Crystal counting 48 successful scams during the year.
The full report is available on Crystal Blockchain’s website. The findings underscore the urgent need for stronger security measures, especially in the rapidly growing DeFi sector.