블로그
리서치 보고서
Web3 보안 현황을 다루는 심층 보안 보고서, 사고 분석 및 산업 리서치.
보안 사고 분석Wormhole Bridge Exploit Incident Analysis TL;DR
On February 02, 2022 at 5:58 PM +UTC, a malicious actor launched multiple attacks aiming to bypass the verification process of the Wormhole bridge on Solana. The attacker carried out the second-largest crypto theft from a DeFi protocol ever, which resulted in the loss of roughly 120,000 Wormhole Ethereum (WeETH) worth over $320M. 
보안 사고 분석Nomad Bridge Exploit Incident Analysis Nomad Bridge, a cross-chain bridge between Ethereum, Moonbeam, Avalanche, Evmos and Milkomeda was exploited for ~$190M.
보안 사고 분석CertiK's Response to KYC Rug - Zoro InuIn June 2022, CertiK found evidence that CertiK KYC Badge client, Zoro Inu ($zoro), rug pulled. Here is how CertiK responded to the event and why the CertiK KYC makes it possible for malicious actors to be held accountable in the event of alleged criminal activity.
July Stats GraphicThe July Stats Graphic shows data from hacks, scams, and incidents in July 2022
보안 사고 분석Revisiting Beanstalk Farms ExploitA flash loan exploit occurred on April 17, 2022 on Beanstalk Farms. Approximately $182 million was lost, with the attacker gaining $76 million as profit. 
보안 사고 분석BAYC Discord Hack ConnectionsWe have been logging Discord hacks as they occur, and can confirm that at least 30 phishing hacks are connected. This includes the BAYC Discord hack and the Beeple Twitter hack with profits over $1.3m
보안 사고 분석Revisiting Rikkei Finance Exploit In this article we will take a look back at the exploit that occurred on Rikkei Finance which took place on 15 April 2022. The hacker was able to change the oracle to a malicious smart contract due to a lack of control measures to access the SetOracleData causing a loss of $1.1m.
보안 사고 분석Tiger Incident AnalysisOn 2022-07-15 09:50:19 EST, project TIGER was rugged for approximately $4.518M. 
보안 사고 분석PREMINT NFT Incident Analysis At 8:00 AM UTC, Premint announced on their Twitter page that their website was compromised. They advised all users to not sign any transactions requiring them to indicate “Set Approval For All” as a setting. In total, 6 exploited wallets have been identified thus far. The profits gained from the attack at this point are ~$375k, making it one of the largest NFT hacks this year. 
산업 리서치5 Definitive Red Flags in Crypto-InvestmentIn order to protect yourself from falling for the wrong crypto project, we have developed this simple safety check-list, which should help quickly screen out of your watch-list any projects exhibiting one of these 5 red flags
보안 사고 분석Revisiting The My Farm Pet Flashloan On 06 October 2021, MyFarmPet was hit by a malicious flashloan attack which profited ~31k BUSD and 100 BNB (~$22k) being deposited into Tornado Cash.
보안 사고 분석Uniswap Phishing Incident AnalysisOn 11 July 2022, an attack that impersonated Uniswap occurred, resulting in the exploiter gaining 3,278 ETH (~$3.6M) and 240 WBTC (~$4.7M) from Positions NFTs in a phishing campaign.