Ethereum has emerged as the most vulnerable blockchain, according to analysis of cyberscams carried out over the past year, based on analysis of the REKT Database of crypto hacks and scams, says cryptogambling information provider CryptoCasinos.

The estimated $74.4m loss attributable to phishing, is just part of the $1.7bn lost to various methods of scams operated by cybercriminals.

Such phishing scams see cybercriminals target users’ eWallet via schemes like fake websites, counterfeit tokens or coins, or fraudulent emails. Users are encouraged to share their private details or private keys, which scammers use to access and drain funds, CryptoCasions states, adding that "nobody who reported a loss due to phishing successfully regained their funds".

Some blockchains were found to be more vulnerable to phishing scams than others, with the majority of losses recorded last year for Ethereum ($65.5m), accounting for 91% of the total ($74.4m). Arbitrum ($5.2m) and Bitcoin ($0.8m lost) were also affected.

Other common scams reported last year included access control exploits and rug pull exit scams. Control exploits see scammers exploit a system vulnerability to gain direct access to user credentials or data. Last year, this resulted in some $852m lost.

Rug pull exit scams see scammers aggressively promote a token via fraudulent means and then liquidate invested funds without warning, resulting in losses of  some $412m last year.

Ethereum was the blockchain most affected by access control exploits, with users losing a huge $482.7m last year. The blockchain most vulnerable to rug pull exit scams came out as Binance, with users reporting $74.5m lost.

The five biggest cryptocurrency scams in 2023, based on lost funds 

Scam Type Total Funds Lost (All Blockchains) Most-Affected Blockchain
1 Access Control $851,841,105 Ethereum
2 Rug Pull $139,459,345 Binance
3 Oracle Issue $134,479,921 Polygon
4 Flash Loan Attack $275,624,495 Arbitrum
5 Phishing $74,487,764 Ethereum

As well as identifying which scam types result in the highest losses, the analysis reveals which blockchains are the most susceptible to cybercrime overall.

Ethereum was the most targeted blockchain in 2023, with a total of $730m lost. This is 273% higher than the average loss reported across all blockchains ($196m).

The second most affected blockchain was Bitcoin, with $266m lost. The most common scam Bitcoin users dealt with was access control attacks, followed by phishing. The third most targeted blockchain was Polygon, which saw users lose $124m.

Finally, crypto users who see funds stolen are unlikely to regain them, as just 10% of the total funds lost in 2023 were successfully returned.

CryptoCasinos commented: "As cryptocurrency continues to grow in popularity among investors, so does the appeal to scammers - especially among volatile blockchains or vulnerable users. However, there are some telltale signs to look out for that may indicate you’re being targeted."

"The most obvious sign is if someone is typing to gain access to your private information, like security codes or login details. Do not share your personal information unless you are 100% sure the request is safe - especially if you’ve been randomly contacted over text or email. Also, be wary of ‘too-good-to-be-true’ returns, discounts, or tokens. If you know a cryptocurrency is particularly volatile, exercise caution before accepting investment support."

"Ensure that you are aware of how cryptocurrencies and blockchains work so that you can identify any discrepancies that may allude to ulterior motives. Make sure you only trade via reputable exchanges and always use a secure eWallet to hold funds."