블로그
리서치 보고서
Web3 보안 현황을 다루는 심층 보안 보고서, 사고 분석 및 산업 리서치.
보안 사고 분석Euler Finance Incident AnalysisOn 13 March 2023, Euler Finance was exploited leading to a loss of approximately $197 million
보안 사고 분석Platypus Finance Incident AnalysisOn 16 February, 2023, at 07:16:54 PM UTC, Platypus Finance, the project behind the USP stablecoin, was attacked for approximately $8.5 million. The attack caused a large decline in the price of \$USP of \$0.33, (or down more than 66% compared to its intended \$1 peg. The project’s native PTP token also lost a quarter of its value in a day. The attacker minted 40 million USP tokens from the MasterPlatypusV4 contract using 44 million Platypus LP-USDC tokens as collateral. So far, the team has been able to recover approximately \$2.4 million USDC from the attack contract.
보안 사고 분석ElasticSwap Incident AnalysisOn 13 December, 2022, at 02:23:05 AM +UTC, an unknown attacker utilized flash loans to drain approximately $850,000 from ElasticSwap. 
보안 사고 분석Hope FinanceOn 20 February, 2023, Hope Finance had users funds drained from their Genesis Rewards Pool. Overall $1.86 million was stolen. This incident is the largest exit scam that occurred on Arbitrum this year. 
보안 사고 분석LianGo Protocol Incident AnalysisOn 7 February, 2023 CertiK detected a slippage on the LianGo Protocol’s token (LGT) which dropped 97%. Upon investigation it was discovered that the incident was made possible due to the owner of the LGT Pool contract setting a malicious contract as the LP token. However, it is likely that the wallet owning the LGT Pool contract was compromised. The stolen LGT tokens were then swapped for Tether (USDT), causing the 97% slippage. Approximately $1.6 million was taken. 
보안 사고 분석Yield Robot Exit ScamOn 17 January, 2023 the Yield Robot contract on the Binance Smart Chain (BSC) was drained of user deposits amounting to approximately $2.1 million. Initially, the Yield Robot team announced on social media channels that their project was exploited. However, clear on-chain evidence shows that this incident is an exit scam.
보안 사고 분석Sashimi Swap ExploitOn 30 December, 2021 at 09:06 UTC Sashimi Swap was hacked for a total loss of approximately $210,000. Sashimi Swap suffered a flash loan attack by a threat actor targeting their UniswapV2Router02. 
보안 사고 분석CirculateBUSD and CirculateWBNB Exit ScamContracts named CirculateBUSD, CirculateWBNB were drained of all assets due to a third party dependency that transferred all tokens to the contract deployer. The same actions took place on contracts named CirculateUSDC and CirculateWAVAX on Avalanche. 
보안 사고 분석BombFlower Backdoor: Uncovering an Evasive Fake Wallet CampaignCertiK has recently identified an organized scammer group that is actively deploying fake wallets in order to fool users. This group, which we have named BombFlower, stands out due to the particular evasive anti-forensic feature used by the group.
보안 사고 분석Raydium Protocol Exploit Incident AnalysisOn 16 December, 2022 Raydium Protocol experienced a private key compromise due to a trojan virus. In total, approximately $5.5 million worth of customer assets were stolen. 
보안 사고 분석Lendhub Incident AnalysisOn 13 January, 2023 the multi-chain lending protocol LendHub announced on their Twitter account that they had suffered an exploit on 12 January resulting in the loss of approximately $6 million. The exploiter took advantage of a discrepancy between a retired IBSV cToken and a new token, where the former had not been removed from the protocol's old market despite no longer being in use.
보안 사고 분석FUT Incident AnalysisOn 4 January, 2023 we observed the first major exit scam of the year. The scam resulted in a loss of approximately $2.6 million.