Hackers steal $1.5 million a month from cryptocurrency funds

Research by Ernst & Young indicates that hackers stole about $400 million from 372 initial coin offerings over the last two years.

Alfred Ng Senior Reporter / CNET News
Alfred Ng was a senior reporter for CNET News. He was raised in Brooklyn and previously worked on the New York Daily News's social media and breaking news teams.
Alfred Ng
2 min read

Hackers stole about $400 million from cryptocurrency funds, according to new research.

James Martin/CNET

The rush of money heading to cryptocurrencies means more opportunities for hackers to get rich.

Researchers from Ernst & Young found that more than 10 percent of funds from initial coin offerings (ICOs) have been lost or stolen by hackers. That's about $400 million from $3.7 billion in funding between 2015 and 2017. The firm looked at 372 ICOs that were hit by attacks, highlighting cryptocurrency's risky market.

The majority of thefts happen through phishing, a common attack designed to trick victims into clicking on malicious links. Hackers stole up to $1.5 million from ICO funding per month, according to the report. The firm called for higher standards of security in cryptocurrency to stop the outbreak of thefts.

"Once new standards are in place that are accepted by all participants-allowing for improved transparency, fraud prevention, and legitimacy -- the protection of investors and users alike has a greater chance of success," said Greg Cudahy, Ernst & Young's global technology, media and entertainment and telecommunications leader.

As cryptocurrencies become more prevalent, with celebrities like the Wu-Tang Clan's Ghostface Killah creating their own ICO, the craze has set off a boom in investments. It's also meant agencies like the US Securities and Exchange Commission urge "extreme caution" with cryptocurrencies. The Chinese government has outright banned Bitcoin.  

The research indicated that hackers were attracted to cryptocurrency markets because of how quickly they were growing and the amount of money involved. It also noted that the frequency of attacks is increasing.  

Correction, 9:18 a.m. PT: The story headline was initially incorrect. The study found hackers steal $1.5 million a month from cryptocurrency funds.