블로그
리서치 보고서
Web3 보안 현황을 다루는 심층 보안 보고서, 사고 분석 및 산업 리서치.
보안 사고 분석LV Metaverse (LV PLUS) Incident AnalysisOn Tuesday, June 21st, 2022, the LV Metaverse (LV PLUS) was rugpulled, causing a loss of around $1.5M USD.
보안 사고 분석Whale Loans Incident AnalysisOn 20 June, Whale Finance experienced two separate exploits on the project's stablecoin AMM contracts which has led to ~$12k in losses.
보안 사고 분석Inverse Finance Incident AnalysisOn 16 June 2022 a threat actor exploited Inverse Finance with a flash loan attack which netted them to ~53 bitcoin or $1.1 million, and ~10,000 tether (USDT).
보안 사고 분석Osmosis Incident Analysis On June 7, 2022 Osmosis suffered a funds loss of around $5M due to a code pitfall in function `MaximalExactRatioJoin`
보안 사고 분석Apollo X Incident AnalysisOn June 8, 2022 ApolloX token (APX) dropped by 52.12% resulting from a hack and loss of ~$1.5M
보안 사고 분석GYM Network Exploit AnalysisGYM Network deployed a new function to their smart contract, on June 08 2022, GYM Network was exploited. 
보안 사고 분석Bored Ape Yacht Club Discord Hit With Phishing AttackIn total, 32 NFTs were stolen from a variety of projects which included 2 MAYC, 1 BAYC, 1 BAKC and 5 Otherdeed.
보안 사고 분석May 2022 Monthly ReportSo far in 2022, ~ $1.8bn has been lost to various scams and exploits in the Web3 world, however May 2022 saw the lowest amount lost this year
보안 사고 분석Mirror Protocol Exploited Due to Incorrect Oracle PriceOutdated software leads to mispricing of mAssets.
보안 사고 분석FEG Token Flashloan Exploit AnalysisOn May-15–2022 08:22:49 PM +UTC, the FEG token has experienced a flurry of flashloan attacks on both Ethereum and BNBChain, leading to approximately $1.3M worth of assets loss.
보안 사고 분석Exploiting a Smart Contract without Security Vulnerabilities: Analysis of True Seigniorage Dollar Attack EventOn March 14th, the CertiK Security Team discovered a novel type of attack which was leveraged against the DeFi stablecoin project; True Seigniorage Dollar. The attack resulted in a total loss of approximated $16,600. In order to conduct this, the attacker took advantage of the principle of the Decentralized Autonomous Organization (DAO) mechanism in order to conduct an attack without manipulating conventional ‘vulnerabilities’.
보안 사고 분석PAID Network Post MortemThe following post mortem will outline the objective details of the incident