![\"\"](\"https:\/\/de.fi\/blog\/wp-content\/uploads\/2023\/06\/00D6yfYNveK4lnPT.png\")
<\/p>\n2021 has been an exciting year for the DeFi space and the cryptocurrency ecosystems it is built upon. Not only have we seen an explosive increase in the amount of funds now in DeFi, from approximately $19 Billion to $258 Billion, but we\u2019ve also seen the largest coins by market cap experience huge price rallies, such as BTC to $69k and ETH to $4.8k.<\/p>\n
The Ethereum and EVM ecosystem has seen an equally exciting rise in new technologies as well, with layer 2 solutions such as Polygon, Optimism and Arbitrum rapidly gaining traction, as well as new chains leveraging EVM compatibility to new heights, such as the new Avalanche C-Chain and Fantom chains.<\/p>\n
The increase in NFTs and GameFi have also not gone unnoticed \u2014 with art being sold for millions if not hundreds of millions of dollars, major brands getting involved and play-to-earn game tokens reaching billions in market cap.<\/p>\n
This accelerating and uncontrolled growth of DeFi does come with a few downsides however; the amount of funds lost to scammers, exploiters and hackers has increased exponentially:<\/p>\n
<\/p>\n
With increasingly more money moving into DeFi, scammers abuse users\u2019 FOMO (Fear Of Missing Out) with deceptive marketing and obscure documentation, not to mention hackers that abuse vulnerabilities in new dapps in order to steal as much money as possible. These are even more appealing to exploit than web 2.0 apps due to the ease of which one can remain anonymous when doing so.<\/p>\n
![\"\"](\"https:\/\/de.fi\/blog\/wp-content\/uploads\/2023\/06\/0DDzgbaBxMhIRgFCE.png\")
<\/p>\n
The chart above demonstrates the massive increase in usage of TornadoCash in 2021, one of the most popular mixer protocols on Ethereum. These enable privacy-oriented transactions through breaking the connection between two wallet addresses, and while not perfect, can impact the ease of tracking down these exploiters.<\/p>\n
De.Fi`s Research Lab has developed our very own Rekt Database<\/a>, which has been picked up by major news outlets such as Investing.com<\/a> and Yahoo Finance<\/a>. Our database makes it is easy to achieve a comprehensive view of all the scams, hacks and exploits that have taken place in 2021. In total, these amount to over $2.5 Billion in funds lost, even when accounting for some funds that have been returned in good faith.<\/p>\n The following are some charts on data compiled by our team that depict these unfortunate REKT events of 2021:<\/p>\n While it makes sense that Ethereum would be the largest share of the above chart due to its market cap and ecosystem size comparatively to other chains, the amount lost on the Binance Smart Chain and Polygon is quite worrying. Due to the chains\u2019 low fees and\/or affiliation with popular exchanges, it is likely a lot of users new to DeFi find their way there, leading to these exorbitant statistics of scams and exploits.<\/p>\n When taking into account the difference in current TVL between Ethereum and the other chains displayed above, we see the following:<\/p>\n A significant spike in scams and exploits\u2019 activity can be seen in August and September of 2021. At the time, the markets had major downside in the previous months, and was just about regaining strength that ultimately led to new all-time-highs for many coins and tokens in the following weeks\/months.<\/p>\n This meant a lot of new money finding its way into the market, as well as many new projects wanting to launch during the long-awaited period of bullishness.<\/p>\n The amount of funds stolen during this period show a slightly different story. We do observe the same peak in August of 2021, but a way better outcome in September, where even though the number of exploits taking place was extremely high, the protocols affected were either protecting themselves better or scammers\/exploiters were targeting smaller fish.<\/p>\n In a number of exploits, protocols were able to convince attackers to return a portion of \u2014 if not all \u2014 funds stolen. This scenario was not the majority of cases as can be clearly be seen above. Regardless, it is comforting to know these cases exist, even if the reason for most to do so would be to avoid criminal persecution for the rest of their lives.<\/p>\n From this large dataset of scams and exploits in DeFi, we can clearly observe trends in the types of attacks conducted in 2021. These are the following:<\/p>\n It makes sense that exit scams would be at the top of the list for 2021, seeing as it is the least technically challenging attack vector to exploit. This does highlight the need for project research before investing in any given one, seeing as they are by far the most common type of scam.<\/p>\n Even though exit scams are the most common, we can see above that by far the most funds stolen were taken through platform-specific exploits. This means large, trusted platforms were targeted for their large amount of funds.<\/p>\n The following is a list of the top 10 incidents in 2021, taken from De.Fi`s Rekt Database, based on how many funds were compromised:<\/p>\n The largest incident in 2021 was Poly Network\u2019s, whom had their CrossChainManager contract exploited resulting in funds being drained from multiple chains. Fortunately, all funds were returned after this event.<\/p>\n Next on the list is Vulcan Forged, a protocol that kept private keys on behalf of users with new wallets, which were subsequently leaked. The 96 wallets affected were drained of all funds.<\/p>\n At Boy X Highspeed, a leaked administrative private key was compromised, leading to a massive amount of funds being stolen from their many liquidity pools.<\/p>\n A classic flash loan exploit allowed a malicious actor to manipulate asset oracle prices on one of Cream Finance\u2019s vaults with a small amount of TVL, allowing them to steal a large amount of funds.<\/p>\n Access to BadgerDAO\u2019s front-end was exploited in order to make users approve tokens to be spent by the attacker\u2019s wallet address. Once enough victims had set the malicious approval, the attacker stole all funds from such users.<\/p>\n Due to many issues with Venus\u2019 price oracles during a day of high volatility in the market, mass unexpected liquidations occurred, leaving many in profit and others with a much emptier wallet.<\/p>\n An unfortunate bug on proposal 62\u2019s execution resulted in many users receiving far more COMP tokens than they should from the change in reward distribution percentages. Regardless of pleads to return the funds, the majority of users held on to their recently acquired fortune.<\/p>\n After a quite successful fundraising event, all funds were transferred to the AnubisDAO owner\u2019s wallet and they were never heard from again. Classic exit scam.<\/p>\n Similarly to our 3rd entry on this list, an administrative key was compromised, allowing an attacker to drain EasyFi\u2019s liquidity pools as well as a large amount of EASY tokens.<\/p>\n A bug in Uranium Finance\u2019s pool contracts allowed an attacker to withdraw almost all tokens through swap events, leading to the project being abandoned shortly after.<\/p>\n It is important to keep in mind that even if a project has had an audit performed by an external auditing firm, it is by no means a guarantee that that project\u2019s contracts are safe. For example:<\/p>\n The chart above displays the auditing firms, which portfolio contains the number of affected projects due to security breaches in 2021. Keep in mind it may be the case that the contract exploited was not part of the auditing scope for any given project.<\/p>\n The world of centralized finance in terms of cryptocurrency is very appealing to newcomers to the space, as well as institutions without proper infrastructure to manage their own funds in private wallets. Surely these centralized infrastructures are safer than the bleeding-edge decentralized technologies, right? Turns out that\u2019s not really the case:<\/p>\n 2021 has seen some major breaches in popular centralized finance platforms, as well as a major exit scam; Africrypt. The amount of funds lost in CeFi eclipses that of DeFi this year, by approximately $1.5B. Some CeFi companies of very high regard have seen significant losses this year, such as Fireblocks or Circle \u2014 mostly through incredibly alarming lapses of security.<\/p>\n Our team at De.Fi compiled a quick list of simple yet effective tips to help you keep safe in the wild world of DeFi in 2022 and beyond:<\/p>\n As DeFi grows, it is increasingly important for us to be knowledgeable and aware of all the risks that come with this new revolutionary financial ecosystem. In order to push it into the mainstream, we need to ensure new users are not fearful of the industry, and thus a lot of work needs to be done to turn it into the safe haven of decentralized finances that we all want it to become.<\/p>\n 2021 was an amazing year of major innovation in the space, and we hope 2022 continues to push our standards of security and transparency further than ever before.<\/p>\n We at De.Fi wish you all safe investments and a happy 2022!<\/em><\/strong><\/p>\n Tezos Ultimate Yield Farming Guide [Infographics]<\/a> And join us on twitter <\/a>and telegram!<\/a><\/p>\n Good luck in farming!<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":" Introduction 2021 has been an exciting year for the DeFi space and the cryptocurrency ecosystems it is built upon. Not only have we seen an explosive increase in the amount of funds now in DeFi, from approximately $19 Billion to $258 Billion, but we\u2019ve also seen the largest coins by market cap experience huge price […]<\/p>\n","protected":false},"author":3,"featured_media":814,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[6,16,5,7],"class_list":["post-813","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-defi","tag-blockchain","tag-crypto-scam-reports","tag-cryptocurrency","tag-defi"],"acf":[],"yoast_head":"\n![\"\"](\"https:\/\/de.fi\/blog\/wp-content\/uploads\/2023\/06\/1weDf8xhsajsMnBycKbAsLQ.png\")
<\/p>\n\n
![\"\"](\"https:\/\/de.fi\/blog\/wp-content\/uploads\/2023\/06\/11kMDlO8Q5cD6vrm7q9Lc_A.png\")
<\/p>\n![\"\"](\"https:\/\/de.fi\/blog\/wp-content\/uploads\/2023\/06\/1VMdRM9URVDgCW-5drXf3BA.png\")
<\/p>\n![\"\"](\"https:\/\/de.fi\/blog\/wp-content\/uploads\/2023\/06\/1qVchHT17ES_rzPWJzN0c2Q.png\")
<\/p>\n![\"\"](\"https:\/\/de.fi\/blog\/wp-content\/uploads\/2023\/06\/13Yrvg6MmkhXZBCrLg9KhlQ.png\")
<\/p>\n![\"\"](\"https:\/\/de.fi\/blog\/wp-content\/uploads\/2023\/06\/0aSV2F70qr7Zfm-2Z.png\")
<\/p>\nCommon Attack Vectors<\/h2>\n
\n
![\"\"](\"https:\/\/de.fi\/blog\/wp-content\/uploads\/2023\/06\/1MIaTZupkfqo1Er8TKwNVCw.png\")
<\/p>\nLargest Incidents<\/h2>\n
1. Poly Network (August 10, $602M)<\/h2>\n
2. Vulcan Forged (December 12, $140M)<\/h2>\n
3. Boy X Highspeed (October 30, $139M)<\/h2>\n
4. Cream Finance (October 27, $130M)<\/h2>\n
5. BadgerDAO (December 2, $120M)<\/h2>\n
6. Venus (May 18, $77M)<\/h2>\n
7. Compound Labs (September 30, $71M)<\/h2>\n
8. AnubisDAO (October 29, $60M)<\/h2>\n
9. EasyFi (April 19, $59M)<\/h2>\n
10. Uranium Finance (April 28, $57M)<\/h2>\n
\n
![\"\"](\"https:\/\/de.fi\/blog\/wp-content\/uploads\/2023\/06\/1VJx56JlmuCYRJguU5cb7Hw.png\")
<\/p>\nHow Does CeFi Compare?<\/h2>\n
![\"\"](\"https:\/\/de.fi\/blog\/wp-content\/uploads\/2023\/06\/0r2JNs6RLgEMu5bbC.png\")
<\/p>\n![\"\"](\"https:\/\/de.fi\/blog\/wp-content\/uploads\/2023\/06\/0yoBWokDKdXaqWhBw.png\")
<\/p>\nTop 10 Safety Tips<\/h2>\n
\n
Check our guides:<\/h2>\n
\nSolana Network Ultimate Yield Farming Guide [Infographics]<\/a>
\nFantom Network Ultimate Yield Farming Guide [Infographics]<\/a>
\nHuobi ECO Chain Ultimate Guide for Yield Farming<\/a>
\nPolygon Network Ultimate Guide for Yield Farming<\/a>
\nBinance Chain Ultimate Guide for Yield Farming<\/a>
\nEOS Ultimate Yield Farming Guide<\/a>
\nArbitrum Ultimate Guide<\/a> [Infographics]
\nThe Ultimate Yield Farming Guide For Terra Blockchain (Luna) [Infographics]<\/a>
\nThe Ultimate Guide to Avalanche Network<\/a>
\nUltimate Guide to Yield Farming on Harmony (with infographics)<\/a>
\nUltimate Guide to Tron Network<\/a> [Infographics]
\nThe Ultimate Yield Farming Guide For Moonriver Network<\/a>
\nThe Ultimate Yield Farming Guide For Celo<\/a>
\nThe Ultimate Yield Farming Guide For KuCoin Community Chain<\/a>
\nThe Ultimate Yield Farming\u00a0 Guide For NEAR Protocol<\/a><\/p>\n