博客
研究报告
深入的安全报告、事件分析和行业研究，涵盖 Web3 安全现状。
安全事件分析Santa Coin Incident AnalysisOn October 24, 2022, the Santa Coin team conducted an exit scam on \$SANTA token and stole 765 BNB (~\$209K) from \$SANTA holders.
安全事件分析OWNLY Incident AnalysisOn May 10, 2022, the project OWNLY experienced an exploit to the "Stake-to-Own Mustachio Marauder NFT" staking contract. A total of 930M OWN tokens were drained during the attack which were then exchanged for roughly 115 BNB worth approximately ~$37K through a pair transaction.
安全事件分析Deribit Incident AnalysisOn November 2nd, 2022, Deribit Exchange’s hot wallet was compromised. A private key leak may have led to the loss of ~$28m in USDC.
安全事件分析Mango Market Incident AnaylsisOn October 11, 2022 Mango Market was attacked causing a loss of $116M. The attacker was able to manipulate the price of MNGO token and borrowed more assets on the platform than permitted. 
安全事件分析Jump Satoshi Exit ScamOn 09 October 2022 JUMPN aka Jump Satoshi, withdrew $1.1 million from their JST token by which all the project's socials, including their website had been taken down. Two days later, all contracts associated with Jump Satoshi were drained of assets in an exit scam totaling $3.9m.
安全事件分析Loser Coin Incident AnalysisOn May 14, 2022, loser coin ($lowb) experienced a flash loan attack, leading to approximately ~$10K USD worth of asset loss. 
安全事件分析Space Dumpling Incident AnalysisOn May 15, 2022, the Space Dumpling token (SDUMP) was exploited, leading to a loss of 7.6 BNB around ~$2,000 at time of incident. The attacker took advantage of Space Dumpling anti-whale mechanism and drained funds from its liquidity pools. The attacker obfuscated the profits through Tornado Cash on June 1, 2022.
行业研究Unveiling the KYC Actor IndustryCertiK has unveiled an underground ring of KYC actors for hire, used by rogue developers to scam Web3 communities.
安全事件分析Novo Defi Incident AnalysisOn 29 May 2022, Novo Defi’s token, Novo, was exploited via a flash loan attack. The incident caused a loss of ~278 BNB
安全事件分析Hackerdao Incident AnalysisOn May 24th 2022, the Hackerdao (Hackerdao) token was exploited by flashloan attacks, causing a loss of around 200 BNB, which was around $65K at the time of incident.
安全事件分析Nirvana Finance Incident AnalysisOn July 28th, 2022, Nirvana Finance was exploited via flash loan attack with the attacker profiting 3.5M. 
安全事件分析Moola MarketOn October 18th, 2022 Celo-based Moola Market lending protocol was hacked for ~$8.4M through network manipulation