Blog
Research reports
In-depth security reports, incident analyses, and industry research covering the state of Web3 security.
Incident analysisRevisiting The Redemption Flashloan Attack Redemption suffered from a massive coordinated flash loan attack resulting in the loss of approximately 4 million 2OMB tokens, or $1,600,000 in equivalent, at the peak of the attack.
Incident analysisRevisiting The Day of Defeat RugpullOn May-05-2022 +UTC, approximately $1.35M worth of assets were stolen from the DoD token with two EOAs involved.
Incident analysisCrema Finance Exploit On 02 July 2022 08:08 PM +UTC, Crema Finance was hit with the first of multiple malicious flashloan attacks. Each flashloan targeted a different liquidity pool on the platform, with ~$8.8m drained.
Incident analysisBritish Army Twitter & YouTube Hack The British Army became an unlikely victim of a hack to promote NFTs with their official Twitter and YouTube accounts being compromised.
Incident analysisStarstream / Agora Incident On 07 April 2022, the Starstream Treasury was exploited leading to a total loss of ~$15m.
Incident analysisRevisiting DecentraWorld On May-24-2022 05:48:30 PM +UTC, the DecentraWorld token price dropped over 97%. DecentraWorld project was identified as rugpulled, leading to a little over >$1M USD loss (~3127 BNB). 
Incident analysisFortress Loans Incident AnalysisAn attacker was able to manipulate the project’s oracle allowing them to borrow a number of different tokens with inflated collateral and swap them leading to a drain of ~$3M (1,048.1 ETH and 400,000 DAI).
Incident analysisRevisiting FEI Protocol IncidentOn 30 April 2022, Fei Protocol announced that they were aware of and looking into an exploit on various Rari Fuse pools, that turned out to be a common re-entrancy attack. 
Incident analysisHarmony Incident AnalysisA bridge exploit occurred on Harmony’s Horizon bridge amounting to the loss of approximately $97M. 
Incident analysisWhat Can We Learn from the Luna/Terra Crash?On May 7th 2022, in one of the biggest upsets in crypto history, the Luna/Terra ecosystem came crashing down. This article will take you through what happened in the Luna/Terra crash, the lessons to be learned from it, and what users and web3 projects can do to help better protect themselves from the fallout of such upheavals going forward.
Incident analysisPragma Incident AnalysisIn total, ~$1.5m was removed from the Pragma Treasury and the Risk Free Value wallet by core members of the team before sending it to a Binance hot wallet on FTM. 
Incident analysisInverse Finance 02 April 2022On Apr-02-2022 11:04:09 AM +UTC, Inverse Finance, which enables users to borrow assets against their tokens, was exploited, leading to ~$14.5M worth of asset loss.