Crypto Scams and Hacks Surge to $370M in January: CertiK

TheNewsCrypto發佈於 2026-02-02更新於 2026-02-02

文章摘要

In January, cryptocurrency scams and hacks surged to $370.3 million, marking the highest monthly loss in 11 months and a fourfold increase from January of the previous year. The majority of the stolen funds came from a single social engineering scam that resulted in a $284 million loss. Phishing attacks accounted for over $311.3 million of the total. The month's largest incidents included a $28.9 million hack on Step Finance, a $26.4 million exploit of the Truebit protocol due to a smart contract bug, and a $13.3 million attack on SwapNet. Overall, 16 major hacks were recorded, causing $86.01 million in losses—a slight decrease from the previous year but a 13% rise from December. The figures represent a 214% increase from December's losses and highlight a significant escalation in crypto security breaches.

The total value of stolen cryptocurrencies via exploits and scams extended to $370.3 million last month, the biggest monthly figure hit in 11 months and around a fourfold increase from January of last year.

CertiK, the biggest Web3 security service provider, stated on January 31 that out of 40 scam incidents that happened in January, the major portion of the total value stolen came from one victim that lost about $284 million because of a social engineering scam.

Around over $370 million stolen was accounted for by phishing scams, which stole over $311.3 million over the month. This month’s figure is the biggest loss, followed by the Bybit hack in February 2025.

In February 2025, the hackers swept off around $1.5 billion overall over the month, a major portion of which came from the $1.4 billion hack on crypto exchange Bybit. The recent amount marks over a 277% surge from January 2025, when attackers swept in and stole $98 million.

The Biggest Surge

CertiK also mentioned that it is also a 214% surge from December, witnessing $117.8 million lost to crypto theft. The blockchain security and data analytics company, PeckShield, revealed on February 1 that the hack of Step Finance in the last month of January was the biggest for the month.

Attackers swept $28.9 million in the attack on the decentralised finance portfolio tracker, where a lot of its treasury wallets were risked, having over 261,000 Solana (SOL) taken. After this, the biggest exploit for the month was the $26.4 million attack on the Truebit protocol on January 8, when a bug in a smart contract permitted an attacker to mint tokens almost for free. This also banged the price of the Truebit (TRU) token.

PeckShield also highlighted the $13.3 million hack on liquidity provider SwapNet on January 26 and the $7 million hack against the blockchain protocol Saga on January 21. The firm mentioned that there were around 16 hacks overall in January, equating to $86.01 million in losses, a 1.42% fall from a year ago, but over a 13% rise from December.

Highlighted Crypto News Today:

CrossCurve Bridge Exploit Exposes $3 Million Loss in Cross-Chain Security Breach

TagsCertiKHackScam

相關問答

QWhat was the total value of stolen cryptocurrencies in January according to CertiK?

A$370.3 million

QWhich single incident accounted for the majority of the stolen funds in January?

AA social engineering scam that resulted in a loss of about $284 million to one victim.

QWhat was the most significant hack prior to January's surge, as mentioned in the article?

AThe Bybit hack in February 2025, where approximately $1.4 billion was stolen.

QAccording to PeckShield, which was the largest individual hack incident in January?

AThe $28.9 million hack of Step Finance.

QWhat type of attack was responsible for the majority of the stolen funds in January?

APhishing scams, which stole over $311.3 million.

你可能也喜歡

Hook Summer真的来了？sato、Lo0p、FLOOD引爆Uniswap v4新叙事

近期，以太坊生态Meme币热度回升，sato、Lo0p、FLOOD等基于Uniswap v4 Hook协议的新代币成为市场焦点。Hook是Uniswap v4为流动性池设计的“插件式智能合约”，允许开发者在流动性操作的关键节点注入自定义逻辑，实现更智能的流动性管理。 其中，sato市值曾超3800万美元，通过v4曲线机制铸造与销毁；Lo0p主打内置借贷功能，旨在提升LP池中闲置ETH的资本效率；FLOOD则将用户买入产生的储备资产接入Aave v3获取收益，试图通过利息长期支撑价格。尽管这些项目展示了Hook的创新潜力，但其作为早期实验品，也存在风险与波动。 整体来看，Hook生态的发展为Uniswap v4带来了新的叙事和流动性，长期可能利好UNI代币的基本面。但目前v4的总锁仓价值仍低于v2和v3，生态成熟仍需时间。短期而言，这些代币的热潮更多是市场催化剂，对UNI币价的直接推动力有限。投资者需注意相关代币的早期风险。

marsbit8 分鐘前

Hook Summer真的来了？sato、Lo0p、FLOOD引爆Uniswap v4新叙事

marsbit8 分鐘前

Hook Summer真的来了？sato、Lo0p、FLOOD引爆Uniswap v4新叙事

近期，以太坊生态Meme币热度再起，以Uniswap v4 Hook协议为基础的代币如sato、sat1、Lo0p和FLOOD成为市场焦点。Hook是Uniswap v4为流动性池设计的“插件式智能合约”，允许在关键操作节点注入自定义逻辑，实现可编程的自动化做市商。 sato利用v4曲线机制铸造与销毁，市值曾超3800万美元；sat1作为“优化版sato”概念币，市值一度突破千万但随后大幅缩水；Lo0p主打基于Hook的借贷AMM协议，旨在提升LP池中闲置ETH的资本效率；FLOOD则通过将储备资产存入Aave生息，试图长期推高代币价格。 这些Hook机制代币为Uniswap生态带来了新的流动性和关注度，长期看有助于UNI代币的基本面。Uniswap已开启费用开关，部分手续费用于销毁UNI。然而，短期来看，这些实验性代币的波动性、生命周期及市场整体状况等因素，使其更像是生态发展的“催化剂”，而非直接推动UNI价格上涨的“助推剂”。目前Uniswap v4的总锁仓价值（TVL）约为5.95亿美元，仍低于v3和v2，其广泛采用仍需时间。 请注意，上述代币均为早期实验性项目，可能存在未知风险，不构成投资建议。

Odaily星球日报20 分鐘前

Hook Summer真的来了？sato、Lo0p、FLOOD引爆Uniswap v4新叙事

Odaily星球日报20 分鐘前

专访 Michael Saylor：我是说了要卖币，但绝不会是净卖

迈克尔·塞勒在近期访谈中澄清了其公司MicroStrategy可能出售比特币支付股息的表态。他强调，公司虽不排除出售比特币，但绝不会成为“净卖家”，即卖出比特币的同时会买入更多，以实现比特币持仓的持续净增长。例如，公司通过发行STRC等数字信用工具筹集资金，将其大量用于购买比特币，仅将比特币增值部分的一小部分作为股息支付。塞勒解释，这种模式类似于利用资产升值进行再投资的房地产公司，旨在利用比特币作为“数字资本”的高增值特性，通过发行数字信用工具套利，从而不断扩大比特币持仓。他还指出，比特币市场流动性极强，单笔大额交易难以影响价格，而比特币作为数字资本，其杀手级应用正是成为数字信用的抵押品，由此催生的数字信用工具（如STRC）已成为市场上表现优异的优先股产品。最后，塞勒分享了自己童年受科幻小说激励的经历，并重申对比特币长期价值的信念没有改变。

链捕手24 分鐘前

专访 Michael Saylor：我是说了要卖币，但绝不会是净卖

链捕手24 分鐘前

被暴击的SK海力士中国员工：奖金不到韩国人的5%

SK海力士因AI存储需求暴增，业绩预测亮眼，韩国总部员工被传人均年终奖或高达数百万元人民币，成为社会热议话题。然而，其中国员工的奖金水平却与之形成巨大落差。 据一位入职超十年的中国技术员工透露，韩国员工奖金若达300万元，中国同事的奖金连其5%都不到，约15万元左右，且需根据KPI评级调整，该员工本人最高仅拿过10万出头。此外，中国员工奖金一年发放两次，而韩国为一年一次。在2023年行业低谷时，中国员工甚至曾有过奖金为零的时期。 文章指出，所谓“人均高额奖金”并不具普遍参考性，实际分配中高管与普通员工差距巨大。SK海力士在中国的业务包括无锡、大连、重庆的工厂及多地销售支持机构。招聘信息显示，中国工程师月薪多在1至3.5万元区间，享有13薪等常规福利，但缺乏股票激励。该中国员工还表示，管理层职位基本由韩国人担任。 行业分析认为，未来几年HBM等高端存储需求将持续旺盛，推动SK海力士业绩增长。但这主要源于企业级（to B）市场，可能加剧消费级存储产品供应紧张和价格上涨。尽管中国本土管理人才有望逐渐成长，但当前中韩员工在薪酬激励和职业发展上的差异依然显著。

链捕手38 分鐘前

被暴击的SK海力士中国员工：奖金不到韩国人的5%

链捕手38 分鐘前

Y-Combinator CEO的AI使用指南：未来属于会搭建复利型系统的人

本文核心观点：未来竞争力属于能围绕个人知识和工作流，搭建具备“复利”效应的AI系统的人，而非仅仅会使用AI工具的人。 Y Combinator CEO Garry Tan分享了他的实践：他不再将AI视为聊天工具，而是将其构建成个人的“操作系统”和“第二大脑”。这套系统能持续积累并结构化其所有的会议、阅读、人脉和信息，使其相互关联，形成可不断迭代和增强的知识网络。 关键实践包括： 1. **书籍镜像**：AI能深度消化书籍内容，并将其核心观点与他的个人经历、职业背景具体关联，生成专属的读书笔记。 2. **技能化**：将重复性工作流抽象为可复用的“技能”，并通过“元技能”不断创造和优化新技能，实现能力积累。 3. **知识库系统**：他维护着一个约10万页的结构化“大脑”，涵盖人物、公司、会议、阅读等所有信息，并能主动为会议等场景提供深度背景准备。 4. **架构理念**：采用“厚技能、厚数据、薄框架”的架构。模型（引擎）可替换，真正的价值在于沉淀个人数据的知识库和封装个人工作模式的技能库。 Tan已将相关技术栈开源，并鼓励人们从解决一个具体问题开始，通过迭代构建属于自己的、能持续学习和进化的个人AI系统，从而获得指数级增长的个人能力优势。

marsbit45 分鐘前

Y-Combinator CEO的AI使用指南：未来属于会搭建复利型系统的人

marsbit45 分鐘前

交易

現貨
合約
活动图片

熱門分類right-arrow

熱門標籤right-arrow