Blog
Research reports
In-depth security reports, incident analyses, and industry research covering the state of Web3 security.
Incident analysisSanta Coin Incident AnalysisOn October 24, 2022, the Santa Coin team conducted an exit scam on \$SANTA token and stole 765 BNB (~\$209K) from \$SANTA holders.
Incident analysisOWNLY Incident AnalysisOn May 10, 2022, the project OWNLY experienced an exploit to the "Stake-to-Own Mustachio Marauder NFT" staking contract. A total of 930M OWN tokens were drained during the attack which were then exchanged for roughly 115 BNB worth approximately ~$37K through a pair transaction.
Incident analysisDeribit Incident AnalysisOn November 2nd, 2022, Deribit Exchange’s hot wallet was compromised. A private key leak may have led to the loss of ~$28m in USDC.
Incident analysisMango Market Incident AnaylsisOn October 11, 2022 Mango Market was attacked causing a loss of $116M. The attacker was able to manipulate the price of MNGO token and borrowed more assets on the platform than permitted. 
Incident analysisJump Satoshi Exit ScamOn 09 October 2022 JUMPN aka Jump Satoshi, withdrew $1.1 million from their JST token by which all the project's socials, including their website had been taken down. Two days later, all contracts associated with Jump Satoshi were drained of assets in an exit scam totaling $3.9m.
Incident analysisLoser Coin Incident AnalysisOn May 14, 2022, loser coin ($lowb) experienced a flash loan attack, leading to approximately ~$10K USD worth of asset loss. 
Incident analysisSpace Dumpling Incident AnalysisOn May 15, 2022, the Space Dumpling token (SDUMP) was exploited, leading to a loss of 7.6 BNB around ~$2,000 at time of incident. The attacker took advantage of Space Dumpling anti-whale mechanism and drained funds from its liquidity pools. The attacker obfuscated the profits through Tornado Cash on June 1, 2022.
Industry researchUnveiling the KYC Actor IndustryCertiK has unveiled an underground ring of KYC actors for hire, used by rogue developers to scam Web3 communities.
Incident analysisNovo Defi Incident AnalysisOn 29 May 2022, Novo Defi’s token, Novo, was exploited via a flash loan attack. The incident caused a loss of ~278 BNB
Incident analysisHackerdao Incident AnalysisOn May 24th 2022, the Hackerdao (Hackerdao) token was exploited by flashloan attacks, causing a loss of around 200 BNB, which was around $65K at the time of incident.
Incident analysisNirvana Finance Incident AnalysisOn July 28th, 2022, Nirvana Finance was exploited via flash loan attack with the attacker profiting 3.5M. 
Incident analysisMoola MarketOn October 18th, 2022 Celo-based Moola Market lending protocol was hacked for ~$8.4M through network manipulation