OKLink released the security monthly report for November 2024, stating that the total losses from on-chain security incidents across the network amounted to approximately 203 million USD. Losses from phishing scams accounted for 64.80% of the total losses, totaling approximately 131 million USD, with no significant Rug Pull incidents occurring. REKT incident losses accounted for 22.06%, totaling approximately 4.5 million USD.
On November 13, a user copied an incorrect address from contaminated transfer history, resulting in a loss of 129 million USD. One hour later, the attacker returned all the assets. On November 15, the v1 liquidity pool contract of the Aptos ecosystem project Thala was attacked due to a security vulnerability, resulting in a loss of 25.5 million USD. Subsequently, Thala negotiated with the attacker to recover all user assets through a bounty of 300,000 USD.
OKLink reminds everyone that when performing on-chain operations, it is essential to carefully verify the receiving address. Users have suffered losses exceeding 100 million due to copying incorrect addresses from contaminated transaction records. Please ensure to double-check the recipient's address when conducting on-chain operations and do not get into the habit of directly copying addresses from transaction records or chat logs. Additionally, learn to use Web3 on-chain tools to mitigate risks. OKLink provides tools for on-chain address queries, token authorization checks, and large transaction monitoring to easily ensure on-chain security, grasp market trends in real time, and alleviate on-chain anxiety. [Original link]