博客
研究报告
深入的安全报告、事件分析和行业研究，涵盖 Web3 安全现状。
安全事件分析The IEGT Exit Scam: A Complex Web of DeceptionOn July 22, 2023, IEGT orchestrated an exit scam, resulting in a $1.14 million loss. While not the largest fraudulent act of the year, its complexity was unparalleled, especially in the clever camouflage of team wallet balances.
Lazarus Group's Web3 RampageSince the $650 million exploit of the Ronin bridge in 2022, attention has firmly been on North Korea’s Lazarus Group—the culprits behind the operation.
August Stats GraphThe August Stats Graphic shows data from hacks, scams, and incidents in August 2023
行业研究Faint Traces: Unmasking a Million-Dollar ScammerCertiK analysts have been closely monitoring a scammer known as "Faint" since late 2022. This individual has been linked to numerous Discord compromises and phishing activities on both Ethereum and Solana.
安全事件分析Zunami Protocol Incident AnalysisOn 13 August, 2023 Zunami Protocol suffered an exploit via flash loan attack, resulting in a loss of ~$2.16 million
行业研究Chasing Shadows: A Decade of Criminal Crypto SeizuresAs cryptocurrency has risen in prominence over the past decade, governments worldwide have increasingly targeted illicit funds and criminal activity in the space. This pursuit has included arresting individuals involved and confiscating vast amounts of digital assets.
July Stats GraphThe July Stats Graphic shows data from hacks, scams, and incidents in July 2023
行业研究On-Chain Ransomware - The Ryuk Group: Part TwoTwo Russian cyber criminal gangs, Conti and Ryuk, dominated the ransomware scene between 2018 and 2022. Despite both groups operating within separate two year windows (Ryuk from 2018 to 2020; Conti from 2020 to 2022), our analysis has identified cryptocurrency wallets belonging to both groups that were active outside of these timelines.
安全事件分析Kokomo Finance On 26 March, 2023, Kokomo Finance (KOKO) on the Optimism Smart Chainconducted an exit scam and stole ~$4 million in user funds.
安全事件分析Vyper Incident AnalysisOn July 30, reports surfaced of vulnerabilities in Vyper versions 0.2.15, 0.2.16 and 0.3.0 which left many Curve pools vulnerable to a reentrancy attack.
安全事件分析Conic Finance Incident AnalysisOn 21 July, 2023 the Conic Finance ETH Omnipool was exploited for 1724 ETH (\$3.2 million) via a read-only reentrancy vulnerability. Despite having reentrancy guards in place, an incorrect assumption led to a reentrancy guard being bypassed. Conic paused the ETH Omnipool but a few hours later they lost a further \$300,000 to MEV arbitrage in the crvUSD Omnipool.
安全事件分析Palmswap Incident AnalysisOn 24 July, 2023 Palmswap fell victim to a flash loan exploit, resulting in the loss of 901,455 USDT.