According to cybersecurity firm Certik, nearly $1 billion in cryptocurrency has been pilfered due to scams, rug pulls, and exploits throughout 2023. The company highlighted that the combined incidents in August alone led to a loss of $45.8 million. Certik’s analysis breaks down the three primary categories of attacks — exit scams, flash loans, and general exploits — painting a troubling picture of the crypto security landscape.
August Losses Hit $45.8 Million: PEPE Exit Scam Dominates
In August, the largest single incident was the PEPE token exit scam, which resulted in $13.2 million in losses. This was followed by the Exactly Protocol exploit at $7.3 million. The Zunami Protocol flash loan attack emerged as the most significant flash loan event of the month. Overall, exit scams accounted for $26 million in August losses, flash loan attacks contributed $6.4 million, and general exploits added $13.5 million.
2023 Overview: Exploits Lead, Flash Loan Spike in March
For the full year through August, exploits remain the dominant threat, totaling $596 million, or roughly 60% of the $997 million total. Exit scams have cumulatively drained $137 million, with their peak month in May, though August came close due to the PEPE incident. Flash loan attacks have amassed $261 million in 2023, with a remarkable spike in March when over $200 million was stolen via flash loans alone — accounting for nearly 80% of the year's flash loan losses.
July Was the Worst Month for Exploits
According to Certik, July stands out as the highest-loss month for exploits in 2023. While August saw a resurgence of exit scams and flash loan attacks, the overall exploit volume decreased compared to July. The report underscores that security vulnerabilities persist across all layers of the crypto ecosystem, from DeFi protocols to cross-chain bridges and even meme coins. Certik urges project teams to prioritize rigorous smart contract audits and advises users to exercise caution with high-yield offerings, particularly those with opaque histories or suspicious token mechanics. As regulatory scrutiny increases and industry awareness grows, the security landscape will remain a critical factor for the market’s health in the months ahead.