What Happened In the third quarter of 2023, the crypto industry witnessed a significant surge in hacking incidents, with total losses nearing $1.2 billion. Among the platforms that fell victim to these cyber attacks were Bitget and Liquid, two major exchanges that were compromised through a series of sophisticated exploits. According to Hacken, a cybersecurity firm, compromised suppliers and developer tools were responsible for about 77% of the quarter’s total losses. These tools and infrastructure components, often overlooked in regular security audits, became the weak points through which hackers accessed sensitive information and executed their exploits.

Bitget and Liquid are not alone in their vulnerability to these sophisticated attacks. The crypto ecosystem, which has been rapidly expanding, has also seen an increase in the complexity and sophistication of hacking methods. Hackers have shifted their focus from directly attacking exchanges to targeting third-party services and infrastructure components that support these exchanges, making the hacks harder to detect and prevent. This shift underscores the evolving nature of cybersecurity threats in the crypto space, which now requires a more comprehensive approach to security.

Why the Structure Matters The structure of the crypto ecosystem, particularly the interconnectedness of various components like exchanges, wallets, and third-party services, plays a crucial role in the success of these hacks. Each component represents a potential entry point for attackers, and the reliance on third-party services can inadvertently introduce vulnerabilities. For instance, a compromised software development kit (SDK) used by an exchange can provide hackers with the keys to access sensitive user data, even if the exchange’s own security measures are robust.

Moreover, the decentralized nature of the crypto ecosystem means that vulnerabilities can propagate quickly across the network. A single compromised node or component can lead to widespread damage, affecting multiple platforms and users. This interconnectedness highlights the need for a holistic approach to security, where each component of the ecosystem must be rigorously audited and secured to prevent such breaches. The reliance on third-party services and the complexity of the ecosystem make it imperative for all players to adopt a proactive stance on security, rather than a reactive one.

What Can Fail In the context of these crypto hacks, several aspects can fail, leading to significant losses. First, the failure of third-party services and infrastructure components to maintain adequate security measures can provide an entry point for hackers. These services, often overlooked in regular audits, can be exploited if they do not implement robust security protocols. For example, a software library or a developer tool that is not properly secured can be the weak link in an otherwise secure system.

Second, the failure to update security protocols and practices can also contribute to these hacks. As the crypto industry evolves, so do the methods and tools used by hackers. Security measures that were effective in the past may no longer be sufficient to protect against modern threats. Regular updates and continuous monitoring are essential to stay ahead of potential threats. Additionally, the failure to implement multi-factor authentication (MFA) and other security best practices can leave platforms vulnerable to attacks. The combination of these factors can lead to significant financial losses and damage to user trust, highlighting the critical need for continuous improvement and vigilance in security practices.

What the Desk Watches The crypto desk closely monitors the evolving landscape of security threats and the strategies employed by hackers to exploit vulnerabilities in the ecosystem. This includes keeping an eye on emerging trends in hacking methods, the security of third-party services and infrastructure components, and the overall resilience of the crypto ecosystem against cyber attacks. The desk also watches for signs of potential breaches and works to mitigate risks by recommending enhanced security measures and best practices to exchanges and other platforms.

One key area of focus is the security of third-party services that support exchanges and wallets. The desk closely examines the security protocols and practices of these services to ensure they do not become weak points in the ecosystem. Additionally, the desk monitors for any signs of compromised infrastructure components, such as SDKs and developer tools, which can provide entry points for hackers. By staying vigilant and proactive, the desk aims to protect the integrity of the crypto ecosystem and prevent significant financial losses from cyber attacks.

Bitget, Liquid Exploits Push Q3 Crypto Hacks Toward $1.2B