博客
研究报告
深入的安全报告、事件分析和行业研究，涵盖 Web3 安全现状。
A Shadowy Secret: Intelligence Infiltration of Web3 ProjectsCertiK recently uncovered indications that Iranian intelligence operatives could be actively attempting to infiltrate some crypto projects early in their development phase. In this article, our team of former law enforcement investigators and intelligence analysts share their findings and give their expert takeaways on how to preserve the integrity of the Web3 industry.
January 2023 Monthly Report So far in 2023, ~ $28 Million has been lost to various scams and exploits in the Web3 world and a total of 55 attacks recorded this year so far.
January Stats GraphThe January Stats Graphic shows data from hacks, scams, and incidents in January 2023
Exposing Wallet Drainer Scammers: Zentoh & Co.Scammers have increasingly utilizing a phishing kit known as Monkey Drainer. This kit is sold by malicious vendors to prospective scammers who are looking to steal user funds. The Monkey Drainer kit and similar phishing tools utilize a technique known as “ice phishing” to trick users into giving the scammers unlimited power to spend their tokens.
2022 Year in Review: Lending ProtocolsDeFi lending protocols suffered a number of major attacks in 2022. In this article, we recap these incidents and offer a number of proactive security solutions.
安全事件分析Yield Robot Exit ScamOn 17 January, 2023 the Yield Robot contract on the Binance Smart Chain (BSC) was drained of user deposits amounting to approximately $2.1 million. Initially, the Yield Robot team announced on social media channels that their project was exploited. However, clear on-chain evidence shows that this incident is an exit scam.
安全事件分析Sashimi Swap ExploitOn 30 December, 2021 at 09:06 UTC Sashimi Swap was hacked for a total loss of approximately $210,000. Sashimi Swap suffered a flash loan attack by a threat actor targeting their UniswapV2Router02. 
安全事件分析CirculateBUSD and CirculateWBNB Exit ScamContracts named CirculateBUSD, CirculateWBNB were drained of all assets due to a third party dependency that transferred all tokens to the contract deployer. The same actions took place on contracts named CirculateUSDC and CirculateWAVAX on Avalanche. 
安全事件分析BombFlower Backdoor: Uncovering an Evasive Fake Wallet CampaignCertiK has recently identified an organized scammer group that is actively deploying fake wallets in order to fool users. This group, which we have named BombFlower, stands out due to the particular evasive anti-forensic feature used by the group.
安全事件分析Raydium Protocol Exploit Incident AnalysisOn 16 December, 2022 Raydium Protocol experienced a private key compromise due to a trojan virus. In total, approximately $5.5 million worth of customer assets were stolen. 
行业研究The CV VC Top 50 Report 2022The CV VC Top 50 Report, in collaboration with Bank Frick, is a periodical report that analyzes the top 50 best-performing blockchain projects in Crypto Valley, based on market valuation, funding, and the number of employees.
安全事件分析Lendhub Incident AnalysisOn 13 January, 2023 the multi-chain lending protocol LendHub announced on their Twitter account that they had suffered an exploit on 12 January resulting in the loss of approximately $6 million. The exploiter took advantage of a discrepancy between a retired IBSV cToken and a new token, where the former had not been removed from the protocol's old market despite no longer being in use.