블로그
리서치 보고서
Web3 보안 현황을 다루는 심층 보안 보고서, 사고 분석 및 산업 리서치.
보안 사고 분석MEV Bot OxBAD... Incident AnalysisMEV bot 0xBAD... was exploited for $1,463,112.71 by 0xB9F78... after earlier taking advantage of a user who mistakenly executed a transaction. Whether the two incidents are related is unclear, but the MEV bot is getting no sympathy from the crypto community.
보안 사고 분석Boy X Highspeed Incident AnalysisBoy X Highspeed (BXH) – a financial services platform for Web3 and metaverse related assets – has suffered a loss of at least $2.4 million across its operations on BSC, Avalanche, and HECO Chain.
보안 사고 분석Wintermute HackWintermute has been hacked for ~$162.5m which appears to be due to a leaked (or brute forced) private key and not a smart contract vulnerability. At least ~$273,949,000 has been lost to private key compromises this year, making this one of the largest attack vectors this year. The exploiter used a privileged function with the private key leak to specify that the swap contract was the attacker controlled contract. However, Wintermute have announced that that over the counter trading and centralized exchange funds have not been affected.
보안 사고 분석New Free Dao Incident AnalysisOn Sep-08-2022 02:09:25 AM +UTC, CertiK’s Skynet detected a flashloan attack in progress on the BSC blockchain. New Free Dao ($NFD) experienced a flashloan exploit for a potential profit of ~$1.25M USD (4,481 BNB). 2,481 remains as BNB in the attacker’s wallet after they converted 2,000 BNB to 556,556 USDT. The token’s price has plummeted over 99% as a result of the attacker dumping a total of 6,838,792 NFD tokens.
New Free Dao has no apparent presence on social media and is not listed on CoinMarketCap.
보안 사고 분석Cauldron Flashloan Attack On Sep-06-2022 07:26:41 PM +UTC, a contract named CauldronV2 (address: 0xe767c...) suffered a loss of about ~$370K due to a vulnerability in the contract. 
보안 사고 분석Bill Murray Hacked WalletYesterday we heard news that Bill Murray’s personal wallet had been compromised leading to the loss of funds raised in the actor's charity NFT collection. Looking onchain, we can see that the exploiter wallet stole 112.05 wETH which was then swapped for ETH.
August 2022 Monthly Skynet Alerts ReportSo far in 2022, ~$2,3 billion has been lost to various scams and exploits in the Web3 world, with a decrease in exit scams, flashloan attacks, Discord/ NFT scams compared to July's stats.
8월 통계 그래프The August Stats Graphic shows data from hacks, scams, and incidents in August 2022
Avalanche InfographicThe Avalanche Infographic shows the stats of Avalanche's market cap, monthly active users, and etc.
보안 사고 분석SudoRare Incident AnalysisSudoRare, a self proclaimed NFT AMM, committed an exit scam within 24 hours of deploying their smart contract that resulted in the loss of $852k. 
보안 사고 분석Curve Finance Hack Incident AnalysisCurve Finance was compromised on August 9, 2022 for approximately ~$612K in total loss due to a cloned malicious site
Cross-Chain Vulnerabilities & Bridge Exploits in 2022So far in 2022, five cross-chain bridge attacks have led to losses of $1,317,000,000, amounting to 57% of the total losses in Web3 in 2022. The security vulnerabilities inherent in cross-chain bridges coupled with the lack of expertise to defend against attacks are primary drivers for the amount of assets lost.