블로그
리서치 보고서
Web3 보안 현황을 다루는 심층 보안 보고서, 사고 분석 및 산업 리서치.
2022 Year in Review - Crypto Wallet Security IncidentsThe past year has been a painful one for many in crypto. Malicious actors drained over $3.7 billion worth of assets from Web3 protocols in 2022, representing a 189% increase over the $1.3 billion lost in 2021.
2022 Year in Review - StakingStaking is a process in which users provide their coins or tokens to a project or protocol in order to receive rewards for their participation.
보안 사고 분석FUT Incident AnalysisOn 4 January, 2023 we observed the first major exit scam of the year. The scam resulted in a loss of approximately $2.6 million.
HACK3D: The Web3 Security Quarterly Report - Q4 2022The main event of the fourth quarter of 2022 has been – by far – the almost-overnight collapse of FTX.
December Stats GraphThe December Stats Graphic shows data from hacks, scams, and incidents in December 2022
2022 Crypto Investigations Wrap-UpIn 2022, several notable federal indictments, sentences, and seizures related to cryptocurrency were made public in the United States. To understand the extent and nature of government activity in Web3, CertiK has conducted research and analysis on the state of federal and regulatory crypto investigations in 2022.
2022 Solana Exploits OverviewIn 2022, Solana Blockchain has lost approximately $523 Million in stolen funds in exploits.
Ice Phishing Scams Phishing is one of the popular methods scammers employ to steal victims assets. However, a type of phishing unique to the Web3 space, known as ice phishing, is a significant threat to the community. Instead of acquiring users' private keys and seed phrases, scammers instead trick victims into approving the transfer of assets to the scammers wallet. This method has been used to steal users tokens and NFTs worth millions of dollars.
보안 사고 분석Mu Coin Incident AnalysisOn 10 December, 2022 at 1:21:34 AM UTC, Mu Coin was flash loan attacked for approximately 45 ETH ($57K) on AVAX. The attack took advantage of differences in price between the token in the LP pools and the token price obtained by buying bonds, resulting in a smart contract that is vulnerable to economic arbitrage. Mu coin founder Jon Vaughn acknowledged the attack and is attempting to raise the price back to levels similar before the incident. 
보안 사고 분석Lodestar Finance Incident Analysis On 10 December , 2022 Lodestar Finance’s protocol was exploited with deposits drained due to a vulnerability in the GLPOracle calculation. The exploiter profited approximately $6.5m
보안 사고 분석OpenSea Phishing Incident AnalysisBack in February 2022, OpenSea users were targeted by an elaborate phishing attack through emails that tricked users into signing permissions with a malicious contract. In total, 28 wallets had NFTs stolen that were worth $2 million making it the second most profitable NFT phishing attack in 2022, just behind the Bored Ape Yacht Club (BAYC) Instagram compromise in April 2022.
보안 사고 분석Redruby DAO Exploit Incident AnalysisOn October 4th, 2022 Redruby DAO was exploited by an unknown actor and lost approximately $91,020. At time of writing, Redruby DAO is still active.