Blog
Research reports
In-depth security reports, incident analyses, and industry research covering the state of Web3 security.
Incident analysisLV Metaverse (LV PLUS) Incident AnalysisOn Tuesday, June 21st, 2022, the LV Metaverse (LV PLUS) was rugpulled, causing a loss of around $1.5M USD.
Incident analysisWhale Loans Incident AnalysisOn 20 June, Whale Finance experienced two separate exploits on the project's stablecoin AMM contracts which has led to ~$12k in losses.
Incident analysisInverse Finance Incident AnalysisOn 16 June 2022 a threat actor exploited Inverse Finance with a flash loan attack which netted them to ~53 bitcoin or $1.1 million, and ~10,000 tether (USDT).
Incident analysisOsmosis Incident Analysis On June 7, 2022 Osmosis suffered a funds loss of around $5M due to a code pitfall in function `MaximalExactRatioJoin`
Incident analysisApollo X Incident AnalysisOn June 8, 2022 ApolloX token (APX) dropped by 52.12% resulting from a hack and loss of ~$1.5M
Incident analysisGYM Network Exploit AnalysisGYM Network deployed a new function to their smart contract, on June 08 2022, GYM Network was exploited. 
Incident analysisBored Ape Yacht Club Discord Hit With Phishing AttackIn total, 32 NFTs were stolen from a variety of projects which included 2 MAYC, 1 BAYC, 1 BAKC and 5 Otherdeed.
Incident analysisMay 2022 Monthly ReportSo far in 2022, ~ $1.8bn has been lost to various scams and exploits in the Web3 world, however May 2022 saw the lowest amount lost this year
Incident analysisMirror Protocol Exploited Due to Incorrect Oracle PriceOutdated software leads to mispricing of mAssets.
Incident analysisFEG Token Flashloan Exploit AnalysisOn May-15–2022 08:22:49 PM +UTC, the FEG token has experienced a flurry of flashloan attacks on both Ethereum and BNBChain, leading to approximately $1.3M worth of assets loss.
Incident analysisExploiting a Smart Contract without Security Vulnerabilities: Analysis of True Seigniorage Dollar Attack EventOn March 14th, the CertiK Security Team discovered a novel type of attack which was leveraged against the DeFi stablecoin project; True Seigniorage Dollar. The attack resulted in a total loss of approximated $16,600. In order to conduct this, the attacker took advantage of the principle of the Decentralized Autonomous Organization (DAO) mechanism in order to conduct an attack without manipulating conventional ‘vulnerabilities’.
Incident analysisPAID Network Post MortemThe following post mortem will outline the objective details of the incident