블로그
리서치 보고서
Web3 보안 현황을 다루는 심층 보안 보고서, 사고 분석 및 산업 리서치.
보안 사고 분석EraLend Incident AnalysisOn 25 July, 2023 EraLend was exploited in a read-only reentrancy attack, leading to a total loss of approximately $2.7 million. 
산업 리서치온체인 랜섬웨어 - 콘티 그룹: 1부The Conti Group is a notorious ransomware gang that has left a trail of chaos in its wake. This report pulls back the curtain on Conti's operations, revealing a complex web of deception, financial gain, and potential connections to other criminal groups. Join us as we delve into the murky world of ransomware and explore the inner workings of one of its most infamous players.
보안 사고 분석Poly Network Incident AnalysisOn 1 July 2023, Poly Network was exploited by an attacker that was able to issue themselves $42 billion worth of assets across multiple chains. 
June Stats Graph The June Stats Graphic shows data from hacks, scams, and incidents in June 2023
보안 사고 분석Chibi Finance Incident AnalysisOn 27 June 2023, Chibi Finance team orchestrated an exit scam that led to the loss of over $1 million of investor funds.
May Stats GraphThe May Stats Graphic shows data from hacks, scams, and incidents in May 2023
보안 사고 분석CertiK's Update on the Merlin DEX RugpullWe want to provide the community with an update regarding the Merlin DEX incident that took place on April 25th, when Merlin insiders rugpulled their users for $1.8M.
April Stats GraphicThe April Stats Graphic shows data from hacks, scams, and incidents in April 2023
Data, Not Dollars: The Ongoing Threat of Data Breaches in Web3Cyber attacks and network breaches are a major threat to organizations and their customers, especially when they lead to the loss of sensitive personal data.
보안 사고 분석GDAC Incident AnalysisOn the morning of 10 April, South Korean exchange GDAC announced on their website that their exchange wallets had been compromised leading to the loss of $13 million worth of cryptocurrency. The company disclosed that this loss amounted to 23% of all of the exchange's holdings.
산업 리서치A Grey Area: Retroactive Bug Bounty NegotiationsBetween October 2020 and March 2023 there have been 25 exploits of Web3 projects where the impacted projects were later able to recover some or all of the funds lost. How did they recover nearly a billion dollars?
보안 사고 분석MEV Bot Incident AnalysisOn 3 April, CertiK was alerted to an incident involving a malicious validator front running multiple Miner Extractable Value (MEV) bots leading to a loss of just over $25 million.