Blog
Research reports
In-depth security reports, incident analyses, and industry research covering the state of Web3 security.
Incident analysisOWNLY Incident AnalysisOn May 10, 2022, the project OWNLY experienced an exploit to the "Stake-to-Own Mustachio Marauder NFT" staking contract. A total of 930M OWN tokens were drained during the attack which were then exchanged for roughly 115 BNB worth approximately ~$37K through a pair transaction.
Incident analysisDeribit Incident AnalysisOn November 2nd, 2022, Deribit Exchange’s hot wallet was compromised. A private key leak may have led to the loss of ~$28m in USDC.
Incident analysisMango Market Incident AnaylsisOn October 11, 2022 Mango Market was attacked causing a loss of $116M. The attacker was able to manipulate the price of MNGO token and borrowed more assets on the platform than permitted. 
Incident analysisJump Satoshi Exit ScamOn 09 October 2022 JUMPN aka Jump Satoshi, withdrew $1.1 million from their JST token by which all the project's socials, including their website had been taken down. Two days later, all contracts associated with Jump Satoshi were drained of assets in an exit scam totaling $3.9m.
Incident analysisLoser Coin Incident AnalysisOn May 14, 2022, loser coin ($lowb) experienced a flash loan attack, leading to approximately ~$10K USD worth of asset loss. 
Incident analysisSpace Dumpling Incident AnalysisOn May 15, 2022, the Space Dumpling token (SDUMP) was exploited, leading to a loss of 7.6 BNB around ~$2,000 at time of incident. The attacker took advantage of Space Dumpling anti-whale mechanism and drained funds from its liquidity pools. The attacker obfuscated the profits through Tornado Cash on June 1, 2022.
Incident analysisNovo Defi Incident AnalysisOn 29 May 2022, Novo Defi’s token, Novo, was exploited via a flash loan attack. The incident caused a loss of ~278 BNB
Incident analysisHackerdao Incident AnalysisOn May 24th 2022, the Hackerdao (Hackerdao) token was exploited by flashloan attacks, causing a loss of around 200 BNB, which was around $65K at the time of incident.
Incident analysisNirvana Finance Incident AnalysisOn July 28th, 2022, Nirvana Finance was exploited via flash loan attack with the attacker profiting 3.5M. 
Incident analysisMoola MarketOn October 18th, 2022 Celo-based Moola Market lending protocol was hacked for ~$8.4M through network manipulation
Incident analysisDFX FinanceOn Nov 10, 2022, DFX Finance's swapping contracts were attacked, leading to a loss of approximately $5M. 
Incident analysisThe Law Never Sleeps: $3.36 Billion Seized By Feds 10 Years After Silk Road ExploitThe U.S. Department of Justice announced on November 7, 2022 the seizure of $3.36 billion worth of Bitcoin in relation to a Silk Road investigation dating back to 2012.