Share

Cyber criminals steal $225m as Ethereum ICOs surge

accreditation
Hacker.
Hacker.

Hong Kong - Here’s another reason to be leery of the initial coin offerings being done at a staggering pace in the cryptocurrency world: there’s a one-in-10 chance you’ll end up a victim of theft.

Phishing scams have helped push up criminal losses to about $225m on this year, according to Chainalysis, a New York-based firm that analyzes transactions and provides anti-money laundering software. In such scams, investors are tricked into sending money to internet addresses pretending to be funding sites for digital token offerings related to the ethereum blockchain technology.

More than 30 000 people have fallen prey to ethereum-related cyber crime, losing an average of $7 500 each, with ICOs amassing about $1.6 billion in proceeds this year, Chainalysis estimates.

“It’s a huge amount of money to generate in such a short period of time,” said Jonathan Levin, co-founder of Chainalysis, whose software and database are used by some of the largest bitcoin companies and US law enforcement agencies. “The cryptocurrency phishers are doing pretty good against all the other types of criminals that are out there.”

Indeed, the huge amount of wealth that has fallen prey to cyber criminals is approaching the losses incurred by robberies in the US for the entire year of 2015, which stood at $390m, according to statistics released by the Federal Bureau of Investigation.

ICOs are digital token sales typically that raise ether, with users transferring the funds to addresses provided by startups. Investors, sometimes eager to get early access to new token offerings have been tricked into providing their credentials to fake websites through targeted email campaigns, twitter posts and Slack messages, said Levin.

Ether rose 0.1% to $324.17 on Thursday, according to data from coindesk, while bitcoin rose 0.2% to $4,201.

Most attacks involve creating websites or social media accounts that sound similar to the real ICO project. Levin gave the fictional example of a project named "illuminate," which an imposter might fake by spelling it as "iIIuminate." Using the fake account, they would solicit potential investors to send money to the criminal’s address.

His firm compiled the data by identifying so-called digital wallets used by scam artists. That information is usually public because criminals widely circulate it, hoping to fool investors into sending them money.

Other common forms of crime involve tapping into project loopholes. The DAO, or decentralised autonomous organisation, is a smart contract project built on top of ethereum that was intended to democratise how ethereum projects are funded. A bug in the system was exploited and that led to the theft of $55m worth of ether at the time.

Levin didn’t provide data for bitcoin-related cybercrime, and not because it is any safer. He said such data is harder to track as scams are usually specific attacks on individual holders, rather than ICO-related campaigns which try to dupe many people at once.

“The overall figures mean there are infrastructure that we need to build to help prevent people from getting abused,” said Levin.

SUBSCRIBE FOR FREE UPDATE: Get Fin24's top morning business news and opinions in your inbox.

Read Fin24's top stories trending on Twitter:

We live in a world where facts and fiction get blurred
Who we choose to trust can have a profound impact on our lives. Join thousands of devoted South Africans who look to News24 to bring them news they can trust every day. As we celebrate 25 years, become a News24 subscriber as we strive to keep you informed, inspired and empowered.
Join News24 today
heading
description
username
Show Comments ()
Rand - Dollar
18.90
+0.2%
Rand - Pound
23.86
+0.2%
Rand - Euro
20.36
+0.3%
Rand - Aus dollar
12.31
+0.2%
Rand - Yen
0.12
+0.2%
Platinum
908.05
0.0%
Palladium
1,014.94
0.0%
Gold
2,232.75
-0.0%
Silver
24.95
-0.1%
Brent Crude
87.00
+1.8%
Top 40
68,346
0.0%
All Share
74,536
0.0%
Resource 10
57,251
0.0%
Industrial 25
103,936
0.0%
Financial 15
16,502
0.0%
All JSE data delayed by at least 15 minutes Iress logo
Company Snapshot
Editorial feedback and complaints

Contact the public editor with feedback for our journalists, complaints, queries or suggestions about articles on News24.

LEARN MORE
Government tenders

Find public sector tender opportunities in South Africa here.

Government tenders
This portal provides access to information on all tenders made by all public sector organisations in all spheres of government.
Browse tenders