블로그
리서치 보고서
Web3 보안 현황을 다루는 심층 보안 보고서, 사고 분석 및 산업 리서치.
보안 사고 분석2020/08/13 Yam Finance Smart Contract Bug Analysis & Future PreventionIn the case of this bug, an excess of YAM tokens would be printed, causing a larger supply to dilute the intended price, meaning that the value of each YAM token would decrease--hurting investors.
보안 사고 분석An Analysis of How Attackers Stole 337 BTC From Cashaa’s Bitcoin WalletsIn just half a day, attackers stole a total of 337 BTC stored in Cashaa-owned wallets. CertiK’s security researchers investigate and analyze the attack in detail.
보안 사고 분석Copycat Attack on Balancer: Why DeFi Needs to ChangeUnlike the prior Balancer attack, attackers cleverly used the Compound financial model and spontaneously generated COMP tokens. Because these three attacks on Balancer occurred within a span of just two days, it certainly raises concerns about the future of DeFi.
보안 사고 분석Little Pains, Great Gains: How the Balancer DeFi Contract Was DrainedOn June 28th at 6:03PM UTC (2:03PM EDT), the CertiK Skynet found that block 10355807 on the Balancer DeFi contract was abnormal. Our team of security researchers acted quickly to investigate; however, the attack had already happened.
보안 사고 분석How CertiK's Formal Verification Engine Could Have Detected ICX's EnableTokenTransfer IssueOn Jun 16th 2018, reports have emerged that a bug was found in ICON's smart contract code. This error was exploited by malicious actors to disable ICX token transfer, which halted thousands of transactions.
보안 사고 분석How Formal Verification Could Have Prevented the Loss of 2 Billion EduCoinAn undetected smart contract exploit resulted in the loss of 2 billion EDU tokens. CertiK breaks down what happened and how its Formal Verification Engine would have detected the bug before it went live.