In our previous video, we discussed Advanced Formal Verification of ZKP: Verifying a ZK Instruction. By formally verifying each zkWasm instruction, we were able to completely verify the technical security and correctness of the entire zkWasm circuit. In this video, we will focus on the bug discovery aspect, examining specific bugs encountered during the process and the lessons learned.

In 2023, the Web3 security landscape experienced significant changes, as detailed in CertiK's Annual Report. The year saw a notable decrease in financial losses due to hacks, scams, and exploits, down to $1.8 billion, which is 51% less than in 2022 and 65% lower than in 2021. Despite this positive trend, the number of incidents rose to 751, indicating ongoing vulnerabilities. November emerged as the costliest month, with losses totaling $363 million. Private key compromises were identified as a primary cause, responsible for half of the year's losses. The report also explores intriguing cases like KyberSwap and analyzes the correlation between DeFi’s Total Value Locked (TVL) and the losses incurred. CertiK's achievements in 2023 included launching the SkyInsights platform, earning accolades for mobile security, and receiving a significant bug bounty from SUI. This highlights the company’s proactive approach in the evolving field of Web3 security.

In the past week, the crypto world has been rocked by a series of high-profile incidents, resulting in a staggering $12.6 million in losses! Stars Arena, a FriendTech-inspired social platform, was hit by a devastating security breach, losing $3 million in AVAX tokens. However, they managed to recover 90% of the stolen funds, marking an intriguing turn of events. On the Avalanche network, Platypus Finance fell victim to three attacks, losing $2.2 million, with flash loans wreaking havoc once again. And if that wasn't enough, the FinSoul token team orchestrated a $1.3 million exit scam, leaving investors in shock. Stay tuned as we dive deeper into these crypto rollercoaster events and explore the dark underbelly of the blockchain world in next week's investigation. Don't miss out on this wild ride!