博客
研究报告
深入的安全报告、事件分析和行业研究，涵盖 Web3 安全现状。
安全事件分析Revisiting The Redemption Flashloan Attack Redemption suffered from a massive coordinated flash loan attack resulting in the loss of approximately 4 million 2OMB tokens, or $1,600,000 in equivalent, at the peak of the attack.
安全事件分析Revisiting The Day of Defeat RugpullOn May-05-2022 +UTC, approximately $1.35M worth of assets were stolen from the DoD token with two EOAs involved.
安全事件分析Crema Finance Exploit On 02 July 2022 08:08 PM +UTC, Crema Finance was hit with the first of multiple malicious flashloan attacks. Each flashloan targeted a different liquidity pool on the platform, with ~$8.8m drained.
安全事件分析British Army Twitter & YouTube Hack The British Army became an unlikely victim of a hack to promote NFTs with their official Twitter and YouTube accounts being compromised.
安全事件分析Starstream / Agora Incident On 07 April 2022, the Starstream Treasury was exploited leading to a total loss of ~$15m.
安全事件分析Revisiting DecentraWorld On May-24-2022 05:48:30 PM +UTC, the DecentraWorld token price dropped over 97%. DecentraWorld project was identified as rugpulled, leading to a little over >$1M USD loss (~3127 BNB). 
安全事件分析Fortress Loans Incident AnalysisAn attacker was able to manipulate the project’s oracle allowing them to borrow a number of different tokens with inflated collateral and swap them leading to a drain of ~$3M (1,048.1 ETH and 400,000 DAI).
安全事件分析Revisiting FEI Protocol IncidentOn 30 April 2022, Fei Protocol announced that they were aware of and looking into an exploit on various Rari Fuse pools, that turned out to be a common re-entrancy attack. 
安全事件分析Harmony Incident AnalysisA bridge exploit occurred on Harmony’s Horizon bridge amounting to the loss of approximately $97M. 
安全事件分析What Can We Learn from the Luna/Terra Crash?On May 7th 2022, in one of the biggest upsets in crypto history, the Luna/Terra ecosystem came crashing down. This article will take you through what happened in the Luna/Terra crash, the lessons to be learned from it, and what users and web3 projects can do to help better protect themselves from the fallout of such upheavals going forward.
安全事件分析Pragma Incident AnalysisIn total, ~$1.5m was removed from the Pragma Treasury and the Risk Free Value wallet by core members of the team before sending it to a Binance hot wallet on FTM. 
安全事件分析Inverse Finance 02 April 2022On Apr-02-2022 11:04:09 AM +UTC, Inverse Finance, which enables users to borrow assets against their tokens, was exploited, leading to ~$14.5M worth of asset loss.