There is a lot of talk about Web 3.0 and how it will disrupt how the internet is operated and run. 

In a nutshell, the evolution of the internet was marked by Web 1.0, which was read only. Then came Web 2.0, which spawned social media and gave us the read-write version of the internet that allowed anyone to create and publish their own content. 

The latest wave that is predicted to come down and hit us like a tsunami is Web 3.0, which combines not just read-write, but also gives users ownership over their content, data and assets. That ownership piece of the equation is powered by cryptocurrencies, NFTs, smart contract computing, decentralised hardware infrastructure, decentralised finance (DeFi), decentralised autonomous organisations (DAOs) and other elements. Now depending on where you sit, you either find these things utterly confusing, the future of the web or the most elaborate long con in the history of humankind. 

I am not qualified enough to argue either way, and neither am I here to convince you to rush out and set up a crypto wallet. But, I do believe that Web 3.0, or at least many of the components which make it up are here already and will continue to grow. Whether that will actually disrupt the traditional web is another thing entirely. 

What we are seeing though, is what we see with any new innovation or technology. Criminals will rush to the scene and try to take advantage of the lack of controls and the lack of user awareness as to what constitutes a normal transaction. 

According to the FBI’s annual crime statistics, 2021 saw over 20 incidents where at least $10 million was stolen in digital currencies from a crypto exchange or project. In December, Crypto-exchange BitMart lost over $150 million.

Users are also increasingly targeted, largely through social engineering attacks. In October of last year, Coinbase disclosed that a threat actor stole cryptocurrency from 6,000 customers after exploiting a vulnerability in its SMS multi factor authentication service. 

But stealing cryptocurrencies are not the only thing criminals target. As NFTs gain popularity, we are seeing more creative attacks. In a recent case aired on Twitter, an unsuspecting victim unwittingly paid for a stolen NFT.  

The depressing thought is that none of these attack types or methods are new. These have been around since Web 1.0 and largely rely on exploiting weak credentials, unpatched software or socially engineering people into making the wrong decisions. 

New platforms and offerings built on Web 3.0 will improve their security over time, perhaps regulators will help the process along. But alongside them, it is important that people remain vigilant at all times. While the landscape may be new, the threats manifest themselves in very much the same way. As the adage goes, if something appears too good to be true, it usually is. So it is important to remain vigilant and look out for red flags.