博客
研究报告
深入的安全报告、事件分析和行业研究，涵盖 Web3 安全现状。
安全事件分析EraLend Incident AnalysisOn 25 July, 2023 EraLend was exploited in a read-only reentrancy attack, leading to a total loss of approximately $2.7 million. 
行业研究链上勒索软件 - 康迪集团：第一部分The Conti Group is a notorious ransomware gang that has left a trail of chaos in its wake. This report pulls back the curtain on Conti's operations, revealing a complex web of deception, financial gain, and potential connections to other criminal groups. Join us as we delve into the murky world of ransomware and explore the inner workings of one of its most infamous players.
安全事件分析Poly Network Incident AnalysisOn 1 July 2023, Poly Network was exploited by an attacker that was able to issue themselves $42 billion worth of assets across multiple chains. 
June Stats Graph The June Stats Graphic shows data from hacks, scams, and incidents in June 2023
安全事件分析Chibi Finance Incident AnalysisOn 27 June 2023, Chibi Finance team orchestrated an exit scam that led to the loss of over $1 million of investor funds.
May Stats GraphThe May Stats Graphic shows data from hacks, scams, and incidents in May 2023
安全事件分析CertiK's Update on the Merlin DEX RugpullWe want to provide the community with an update regarding the Merlin DEX incident that took place on April 25th, when Merlin insiders rugpulled their users for $1.8M.
April Stats GraphicThe April Stats Graphic shows data from hacks, scams, and incidents in April 2023
Data, Not Dollars: The Ongoing Threat of Data Breaches in Web3Cyber attacks and network breaches are a major threat to organizations and their customers, especially when they lead to the loss of sensitive personal data.
安全事件分析GDAC Incident AnalysisOn the morning of 10 April, South Korean exchange GDAC announced on their website that their exchange wallets had been compromised leading to the loss of $13 million worth of cryptocurrency. The company disclosed that this loss amounted to 23% of all of the exchange's holdings.
行业研究A Grey Area: Retroactive Bug Bounty NegotiationsBetween October 2020 and March 2023 there have been 25 exploits of Web3 projects where the impacted projects were later able to recover some or all of the funds lost. How did they recover nearly a billion dollars?
安全事件分析MEV Bot Incident AnalysisOn 3 April, CertiK was alerted to an incident involving a malicious validator front running multiple Miner Extractable Value (MEV) bots leading to a loss of just over $25 million.