February 2023 has proven to be a brutal month for cryptocurrency security, with CertiK reporting $51.4 million lost across 70 attacks — an alarming 83.4% increase from January. As Bitcoin hovers around $24,188 and Ethereum trades at $1,643, the growing value of digital assets continues to attract increasingly sophisticated threat actors. For anyone holding or transacting in cryptocurrency, understanding and implementing robust security practices has never been more critical.
The Threat Landscape
The CertiK February 2023 monthly report paints a stark picture. Flash loan attacks reached a record high of 22 incidents in a single month, resulting in $15.9 million in losses — the highest number of aggregated flash loan attacks since 2021. Discord server compromises surged by 36%, with 49 servers hacked, targeting project communities where unsuspecting members are often lured into clicking malicious links.
Exit scams accounted for $11.4 million across 28 incidents, representing 23.2% of total February losses. The largest was the fRiENDSiES Ai NFT project, flagged by on-chain investigator ZachXBT, which accounted for 48% of confirmed exit scam losses. Meanwhile, the MyAlgo wallet hack on the Algorand blockchain resulted in $9.2 million stolen through an apparent private key compromise, though only $1.5 million has been recovered so far.
On February 22, CertiK Alert also flagged suspicious movement of previously stolen Gate.io funds on Ethereum, a reminder that stolen assets continue circulating through the ecosystem long after the initial breach.
Core Principles
Protecting your cryptocurrency holdings starts with understanding the fundamental security triad: custody, authentication, and vigilance. Custody means controlling your own private keys whenever possible. Not your keys, not your coins remains the most important maxim in cryptocurrency security.
Authentication requires implementing multi-factor authentication on every exchange account and wallet service. Hardware-based 2FA tokens, such as YubiKey, provide the strongest protection against phishing attacks. SMS-based 2FA, while better than nothing, is increasingly vulnerable to SIM-swapping attacks.
Vigilance means maintaining constant awareness of the attack vectors currently in play. The surge in Discord compromises means that even official-looking announcements in project communities should be verified through independent channels before clicking any links or connecting wallets.
Tooling and Setup
Hardware wallets remain the gold standard for cryptocurrency storage. Devices from Ledger and Trezor store private keys offline, requiring physical confirmation for every transaction. This makes remote attacks, including the clipper malware currently being distributed through fake ChatGPT applications, completely ineffective.
For daily trading activities, consider using a dedicated device or a secure browser profile exclusively for cryptocurrency transactions. Browser extensions like EAL or CryptoScamDB can identify known phishing sites in real-time. Password managers with built-in credential monitoring add another layer of defense.
Smart contract interaction should be limited to audited protocols. Before approving any token spend, verify the contract address through multiple sources. Tools like Token Approval Checker on Etherscan allow users to review and revoke unnecessary approvals that could be exploited later.
Ongoing Vigilance
Security is not a one-time setup but a continuous process. Regularly review wallet approvals and revoke access to protocols you no longer use. Monitor your wallets using blockchain explorers or portfolio trackers that alert you to unauthorized transactions.
Stay informed about current attack trends. With flash loan attacks at record levels, be cautious about providing liquidity to unaudited protocols. The 22 flash loan attacks in February alone demonstrate that attackers are becoming more proficient at exploiting price oracle vulnerabilities and reentrancy bugs.
Community hygiene matters as well. With 49 Discord servers compromised in February, verify any announcement through the project’s official Twitter account, website, or Telegram admin before interacting. Never click wallet-connect links shared in Discord channels, even from seemingly trusted moderators.
Final Takeaway
The $51.4 million lost in February 2023 underscores a harsh reality: cryptocurrency security is an arms race, and individual users are on the front lines. The tools and knowledge to protect yourself exist, but they require consistent application. Hardware wallets, multi-factor authentication, contract approval hygiene, and community awareness form the foundation of a robust defense. In an ecosystem where a single misclick can result in irreversible financial loss, investing time in security practices yields the highest returns of all.
Disclaimer: This article is for informational purposes only and does not constitute financial or security advice. Always conduct your own research and consult with security professionals regarding your specific situation.
fRiENDSiES NFT doing 48% of all exit scam losses in february alone is wild. zachxbt flagged it early but most holders didnt listen
zachxbt was literally posting warnings on twitter for days before the rug. at some point you cant help people who wont help themselves
zachxbt calls out rugs on a near daily basis and people still aped in. the nft community had zero due diligence culture
paperhandz zachxbt flagged fRiENDSiES days before the rug and people still bought in. at some point you cant protect people from themselves
certik_skeptic the fRiENDSiES founder literally deleted everything after the last mint. biggest exit scam of the month and barely made the news
fRiENDSiES doing 48% of all exit scam losses alone. one NFT project caused more damage than every DeFi protocol combined that month
Aicha B. one NFT project causing 48% of all exit scam losses in a month. fRiENDSiES was literally a social experiment that worked too well
fRiENDSiES taking 48% of exit scam losses at 11.4M total is wild. one nft project accounted for half the rug pulls that month
Discord hacks up 36% and people still click random links in server announcements. the social engineering angle keeps getting more sophisticated
discord is the weakest link in every crypto project. one compromised admin account and the entire community gets phished
discord is a security nightmare. no 2fa requirement for admins, no session management, no audit log for permission changes. its 2023 and the attack surface keeps growing
phish_food_ discord still hasnt fixed the admin security model in 2026. same attack vector, different year
Discord hacks up 36% because every project uses the same bot stack and compromised admin tokens cascade across servers. the tooling has not improved since 2023
49 discord servers hacked and projects still run communities there in 2026. the admin token model is fundamentally broken
discord_physh_ 49 servers hacked because the same bot framework gets compromised and every project uses it. single point of failure across the entire space
49 discord servers hacked in one month and projects still run their communities there in 2026. move to telegram or signal already
22 flash loan attacks in a single month and defi protocols still werent adding reentrancy guards. 2023 was the year of preventable losses
22 flash loan attacks in one month and protocols still skipping reentrancy guards. its literally a modifier that costs 5000 gas. inexcusable
reentrancy_ghost_ a modifier that costs 5000 gas and protocols still skip it. 22 flash loans in february proves some teams never learn
reentrancy_ghost_ a modifier that costs 5000 gas and protocols still skip it. 22 flash loan attacks in one month is self-inflicted
22 flash loan attacks in one month and the total was only 15.9m. protocols got better at capping exposure even if they still havent fixed the root cause
Bruno K. 15.9M from 22 flash loan attacks means individual protocol exposure is shrinking even as attack frequency rises. small wins
22 flash loan attacks in one month and protocols still werent adding reentrancy guards. some bugs never get fixed they just get exploited by different people
83% jump from january and protocols still skipping audits. the certik numbers are just the reported stuff too, real losses are way higher
294759 the reported vs actual gap is massive. small protocols that get drained for 200k dont even bother filing reports anymore