Blog
Research reports
In-depth security reports, incident analyses, and industry research covering the state of Web3 security.
Incident analysisWormhole Bridge Exploit Incident Analysis TL;DR
On February 02, 2022 at 5:58 PM +UTC, a malicious actor launched multiple attacks aiming to bypass the verification process of the Wormhole bridge on Solana. The attacker carried out the second-largest crypto theft from a DeFi protocol ever, which resulted in the loss of roughly 120,000 Wormhole Ethereum (WeETH) worth over $320M. 
Incident analysisNomad Bridge Exploit Incident Analysis Nomad Bridge, a cross-chain bridge between Ethereum, Moonbeam, Avalanche, Evmos and Milkomeda was exploited for ~$190M.
Incident analysisCertiK's Response to KYC Rug - Zoro InuIn June 2022, CertiK found evidence that CertiK KYC Badge client, Zoro Inu ($zoro), rug pulled. Here is how CertiK responded to the event and why the CertiK KYC makes it possible for malicious actors to be held accountable in the event of alleged criminal activity.
July Stats GraphicThe July Stats Graphic shows data from hacks, scams, and incidents in July 2022
Incident analysisRevisiting Beanstalk Farms ExploitA flash loan exploit occurred on April 17, 2022 on Beanstalk Farms. Approximately $182 million was lost, with the attacker gaining $76 million as profit. 
Incident analysisBAYC Discord Hack ConnectionsWe have been logging Discord hacks as they occur, and can confirm that at least 30 phishing hacks are connected. This includes the BAYC Discord hack and the Beeple Twitter hack with profits over $1.3m
Incident analysisRevisiting Rikkei Finance Exploit In this article we will take a look back at the exploit that occurred on Rikkei Finance which took place on 15 April 2022. The hacker was able to change the oracle to a malicious smart contract due to a lack of control measures to access the SetOracleData causing a loss of $1.1m.
Incident analysisTiger Incident AnalysisOn 2022-07-15 09:50:19 EST, project TIGER was rugged for approximately $4.518M. 
Incident analysisPREMINT NFT Incident Analysis At 8:00 AM UTC, Premint announced on their Twitter page that their website was compromised. They advised all users to not sign any transactions requiring them to indicate “Set Approval For All” as a setting. In total, 6 exploited wallets have been identified thus far. The profits gained from the attack at this point are ~$375k, making it one of the largest NFT hacks this year. 
Industry research5 Definitive Red Flags in Crypto-InvestmentIn order to protect yourself from falling for the wrong crypto project, we have developed this simple safety check-list, which should help quickly screen out of your watch-list any projects exhibiting one of these 5 red flags
Incident analysisRevisiting The My Farm Pet Flashloan On 06 October 2021, MyFarmPet was hit by a malicious flashloan attack which profited ~31k BUSD and 100 BNB (~$22k) being deposited into Tornado Cash.
Incident analysisUniswap Phishing Incident AnalysisOn 11 July 2022, an attack that impersonated Uniswap occurred, resulting in the exploiter gaining 3,278 ETH (~$3.6M) and 240 WBTC (~$4.7M) from Positions NFTs in a phishing campaign.