博客
研究报告
深入的安全报告、事件分析和行业研究，涵盖 Web3 安全现状。
安全事件分析Euler Finance Incident AnalysisOn 13 March 2023, Euler Finance was exploited leading to a loss of approximately $197 million
安全事件分析Platypus Finance Incident AnalysisOn 16 February, 2023, at 07:16:54 PM UTC, Platypus Finance, the project behind the USP stablecoin, was attacked for approximately $8.5 million. The attack caused a large decline in the price of \$USP of \$0.33, (or down more than 66% compared to its intended \$1 peg. The project’s native PTP token also lost a quarter of its value in a day. The attacker minted 40 million USP tokens from the MasterPlatypusV4 contract using 44 million Platypus LP-USDC tokens as collateral. So far, the team has been able to recover approximately \$2.4 million USDC from the attack contract.
安全事件分析ElasticSwap Incident AnalysisOn 13 December, 2022, at 02:23:05 AM +UTC, an unknown attacker utilized flash loans to drain approximately $850,000 from ElasticSwap. 
安全事件分析Hope FinanceOn 20 February, 2023, Hope Finance had users funds drained from their Genesis Rewards Pool. Overall $1.86 million was stolen. This incident is the largest exit scam that occurred on Arbitrum this year. 
安全事件分析LianGo Protocol Incident AnalysisOn 7 February, 2023 CertiK detected a slippage on the LianGo Protocol’s token (LGT) which dropped 97%. Upon investigation it was discovered that the incident was made possible due to the owner of the LGT Pool contract setting a malicious contract as the LP token. However, it is likely that the wallet owning the LGT Pool contract was compromised. The stolen LGT tokens were then swapped for Tether (USDT), causing the 97% slippage. Approximately $1.6 million was taken. 
安全事件分析Yield Robot Exit ScamOn 17 January, 2023 the Yield Robot contract on the Binance Smart Chain (BSC) was drained of user deposits amounting to approximately $2.1 million. Initially, the Yield Robot team announced on social media channels that their project was exploited. However, clear on-chain evidence shows that this incident is an exit scam.
安全事件分析Sashimi Swap ExploitOn 30 December, 2021 at 09:06 UTC Sashimi Swap was hacked for a total loss of approximately $210,000. Sashimi Swap suffered a flash loan attack by a threat actor targeting their UniswapV2Router02. 
安全事件分析CirculateBUSD and CirculateWBNB Exit ScamContracts named CirculateBUSD, CirculateWBNB were drained of all assets due to a third party dependency that transferred all tokens to the contract deployer. The same actions took place on contracts named CirculateUSDC and CirculateWAVAX on Avalanche. 
安全事件分析BombFlower Backdoor: Uncovering an Evasive Fake Wallet CampaignCertiK has recently identified an organized scammer group that is actively deploying fake wallets in order to fool users. This group, which we have named BombFlower, stands out due to the particular evasive anti-forensic feature used by the group.
安全事件分析Raydium Protocol Exploit Incident AnalysisOn 16 December, 2022 Raydium Protocol experienced a private key compromise due to a trojan virus. In total, approximately $5.5 million worth of customer assets were stolen. 
安全事件分析Lendhub Incident AnalysisOn 13 January, 2023 the multi-chain lending protocol LendHub announced on their Twitter account that they had suffered an exploit on 12 January resulting in the loss of approximately $6 million. The exploiter took advantage of a discrepancy between a retired IBSV cToken and a new token, where the former had not been removed from the protocol's old market despite no longer being in use.
安全事件分析FUT Incident AnalysisOn 4 January, 2023 we observed the first major exit scam of the year. The scam resulted in a loss of approximately $2.6 million.