博客
研究报告
深入的安全报告、事件分析和行业研究，涵盖 Web3 安全现状。
安全事件分析LV Metaverse (LV PLUS) Incident AnalysisOn Tuesday, June 21st, 2022, the LV Metaverse (LV PLUS) was rugpulled, causing a loss of around $1.5M USD.
安全事件分析Whale Loans Incident AnalysisOn 20 June, Whale Finance experienced two separate exploits on the project's stablecoin AMM contracts which has led to ~$12k in losses.
安全事件分析Inverse Finance Incident AnalysisOn 16 June 2022 a threat actor exploited Inverse Finance with a flash loan attack which netted them to ~53 bitcoin or $1.1 million, and ~10,000 tether (USDT).
安全事件分析Osmosis Incident Analysis On June 7, 2022 Osmosis suffered a funds loss of around $5M due to a code pitfall in function `MaximalExactRatioJoin`
安全事件分析Apollo X Incident AnalysisOn June 8, 2022 ApolloX token (APX) dropped by 52.12% resulting from a hack and loss of ~$1.5M
安全事件分析GYM Network Exploit AnalysisGYM Network deployed a new function to their smart contract, on June 08 2022, GYM Network was exploited. 
安全事件分析Bored Ape Yacht Club Discord Hit With Phishing AttackIn total, 32 NFTs were stolen from a variety of projects which included 2 MAYC, 1 BAYC, 1 BAKC and 5 Otherdeed.
安全事件分析May 2022 Monthly ReportSo far in 2022, ~ $1.8bn has been lost to various scams and exploits in the Web3 world, however May 2022 saw the lowest amount lost this year
安全事件分析Mirror Protocol Exploited Due to Incorrect Oracle PriceOutdated software leads to mispricing of mAssets.
安全事件分析FEG Token Flashloan Exploit AnalysisOn May-15–2022 08:22:49 PM +UTC, the FEG token has experienced a flurry of flashloan attacks on both Ethereum and BNBChain, leading to approximately $1.3M worth of assets loss.
安全事件分析Exploiting a Smart Contract without Security Vulnerabilities: Analysis of True Seigniorage Dollar Attack EventOn March 14th, the CertiK Security Team discovered a novel type of attack which was leveraged against the DeFi stablecoin project; True Seigniorage Dollar. The attack resulted in a total loss of approximated $16,600. In order to conduct this, the attacker took advantage of the principle of the Decentralized Autonomous Organization (DAO) mechanism in order to conduct an attack without manipulating conventional ‘vulnerabilities’.
安全事件分析PAID Network Post MortemThe following post mortem will outline the objective details of the incident