博客
研究报告
深入的安全报告、事件分析和行业研究，涵盖 Web3 安全现状。
安全事件分析MEV Bot OxBAD... Incident AnalysisMEV bot 0xBAD... was exploited for $1,463,112.71 by 0xB9F78... after earlier taking advantage of a user who mistakenly executed a transaction. Whether the two incidents are related is unclear, but the MEV bot is getting no sympathy from the crypto community.
安全事件分析Boy X Highspeed Incident AnalysisBoy X Highspeed (BXH) – a financial services platform for Web3 and metaverse related assets – has suffered a loss of at least $2.4 million across its operations on BSC, Avalanche, and HECO Chain.
安全事件分析Wintermute HackWintermute has been hacked for ~$162.5m which appears to be due to a leaked (or brute forced) private key and not a smart contract vulnerability. At least ~$273,949,000 has been lost to private key compromises this year, making this one of the largest attack vectors this year. The exploiter used a privileged function with the private key leak to specify that the swap contract was the attacker controlled contract. However, Wintermute have announced that that over the counter trading and centralized exchange funds have not been affected.
安全事件分析New Free Dao Incident AnalysisOn Sep-08-2022 02:09:25 AM +UTC, CertiK’s Skynet detected a flashloan attack in progress on the BSC blockchain. New Free Dao ($NFD) experienced a flashloan exploit for a potential profit of ~$1.25M USD (4,481 BNB). 2,481 remains as BNB in the attacker’s wallet after they converted 2,000 BNB to 556,556 USDT. The token’s price has plummeted over 99% as a result of the attacker dumping a total of 6,838,792 NFD tokens.
New Free Dao has no apparent presence on social media and is not listed on CoinMarketCap.
安全事件分析Cauldron Flashloan Attack On Sep-06-2022 07:26:41 PM +UTC, a contract named CauldronV2 (address: 0xe767c...) suffered a loss of about ~$370K due to a vulnerability in the contract. 
安全事件分析Bill Murray Hacked WalletYesterday we heard news that Bill Murray’s personal wallet had been compromised leading to the loss of funds raised in the actor's charity NFT collection. Looking onchain, we can see that the exploiter wallet stole 112.05 wETH which was then swapped for ETH.
August 2022 Monthly Skynet Alerts ReportSo far in 2022, ~$2,3 billion has been lost to various scams and exploits in the Web3 world, with a decrease in exit scams, flashloan attacks, Discord/ NFT scams compared to July's stats.
8月统计图表The August Stats Graphic shows data from hacks, scams, and incidents in August 2022
Avalanche InfographicThe Avalanche Infographic shows the stats of Avalanche's market cap, monthly active users, and etc.
安全事件分析SudoRare Incident AnalysisSudoRare, a self proclaimed NFT AMM, committed an exit scam within 24 hours of deploying their smart contract that resulted in the loss of $852k. 
安全事件分析Curve Finance Hack Incident AnalysisCurve Finance was compromised on August 9, 2022 for approximately ~$612K in total loss due to a cloned malicious site
Cross-Chain Vulnerabilities & Bridge Exploits in 2022So far in 2022, five cross-chain bridge attacks have led to losses of $1,317,000,000, amounting to 57% of the total losses in Web3 in 2022. The security vulnerabilities inherent in cross-chain bridges coupled with the lack of expertise to defend against attacks are primary drivers for the amount of assets lost.