Highlight

Hack3d: The Web3 Security Quarterly Report - Q1 2024

Research Security Reports
Hack3d: The Web3 Security Quarterly Report - Q1 2024
  • A total of $502,522,934 was lost across 223 onchain security incidents in Q1 2024.
  • This represents a 54% increase in value lost compared to Q1 of 2023’s total of $326 million, though a minor 3.8% decrease from Q4’s losses of $522 million.
  • January was the most costly month of the quarter, with $193,132,537 lost in 78 onchain security incidents.
  • Private key compromises were once again the most costly attack vector, with $239,037,879 lost in just 26 incidents. This again represents nearly half of all financial losses, though key compromises accounted for just 11.7% of all security incidents.
  • Ethereum experienced the highest number of security incidents, with a total of 131 hacks, scams, and exploits leading to $139 million in losses.
  • $77,970,073 of value was ultimately returned, with the majority of this figure coming from the Munchables incident.
  • Hack3d investigates the ongoing prevalence of private key compromises, as well as Solidity rounding error exploits, the unprecedented inflows to the recently-approved Bitcoin ETFs, major financial institutions’ forays into onchain finance, and the effects of Ethereum’s successful Dencun upgrade on scaling L2s.

Hack3d Report 2024 Q1 - Incident Types and Financial Impact

Hack3d Report 2024 Q1 - Blockchain Incidents by Chain

Hack3d Report 2024 Q1 - Monthly Financial Impact of Security Breaches

Read the full report for free.

Related Blogs

CertiK Intel3D H1 2026 Wrench Attacks

CertiK Intel3D H1 2026 Wrench Attacks

52 verified wrench attacks and $124.1 million in recorded exposure in H1 2026: a 33.3% rise in incidents, an 11.8-fold rise in losses, and a threat that has narrowed into a Western European crisis.

CertiK Hack3D: H1 2026 Report

CertiK Hack3D: H1 2026 Report

Web3 security losses exceeded $1.31 billion in H1 2026 across 344 incidents, with wallet compromise emerging as the most financially destructive attack vector and phishing shifting toward fewer, higher-value social engineering attacks.

Introducing CertiK Hunt, The Invite-Only Security Platform for Web3 Projects and Top Security Researchers

Introducing CertiK Hunt, The Invite-Only Security Platform for Web3 Projects and Top Security Researchers

CertiK Hunt is an invite-only platform connecting elite security researchers with web3 projects through bug bounty programs, audit competitions, and AI challenges.