Immunefi: crypto users lost $1.8B in hacks and scams in 2023, down 54% YoY, as single incidents grew 90% YoY to 319; Lazarus remained the most prolific attacker
Context & Ripple Effects
The reported decline follows a 2022 high-water mark, when related coverage put crypto theft at $3.8 billion and tied much of it to DeFi protocols and North Korea-linked actors. A separate post-year assessment likewise found more than $1.8 billion in 2023 losses, reinforcing the broad direction despite differing incident counts.
The key tension is that lower aggregate losses coincided with a larger number of reported individual incidents. Lazarus's continued prominence keeps the security story tied to a persistent, named threat actor rather than a one-off market-cycle anomaly.
First-order effects
- Crypto users and platforms faced lower reported aggregate losses in 2023, but security teams had to contend with 319 individual hacks and scams—90% more than a year earlier.
- Lazarus remained the most prolific attacker in Immunefi's accounting, keeping attention on defenses against a repeat adversary.
Second-order effects
- More incidents despite lower total losses shifts the burden toward continuous monitoring, incident response, and vulnerability remediation across a wider set of crypto services.
- The figures make loss totals alone a less complete security benchmark: platforms, users, and risk assessors must also weigh attack frequency and concentration of losses.
Third-order effects
- If this pattern persists, crypto security may be judged less by whether annual losses fall and more by whether the ecosystem can reduce the recurring cadence of compromises.
- The result underscores the post-2022 security challenge for crypto: loss cycles can improve without eliminating persistent attacker activity, sustaining the sector's legitimacy gap.
The trend: Crypto is moving from a period defined by a few enormous breaches toward a security challenge where lower aggregate losses can coexist with more frequent incidents and persistent sophisticated attackers.