博客
研究报告
深入的安全报告、事件分析和行业研究，涵盖 Web3 安全现状。
安全事件分析Wormhole Bridge Exploit Incident Analysis TL;DR
On February 02, 2022 at 5:58 PM +UTC, a malicious actor launched multiple attacks aiming to bypass the verification process of the Wormhole bridge on Solana. The attacker carried out the second-largest crypto theft from a DeFi protocol ever, which resulted in the loss of roughly 120,000 Wormhole Ethereum (WeETH) worth over $320M. 
安全事件分析Nomad Bridge Exploit Incident Analysis Nomad Bridge, a cross-chain bridge between Ethereum, Moonbeam, Avalanche, Evmos and Milkomeda was exploited for ~$190M.
安全事件分析CertiK's Response to KYC Rug - Zoro InuIn June 2022, CertiK found evidence that CertiK KYC Badge client, Zoro Inu ($zoro), rug pulled. Here is how CertiK responded to the event and why the CertiK KYC makes it possible for malicious actors to be held accountable in the event of alleged criminal activity.
July Stats GraphicThe July Stats Graphic shows data from hacks, scams, and incidents in July 2022
安全事件分析Revisiting Beanstalk Farms ExploitA flash loan exploit occurred on April 17, 2022 on Beanstalk Farms. Approximately $182 million was lost, with the attacker gaining $76 million as profit. 
安全事件分析BAYC Discord Hack ConnectionsWe have been logging Discord hacks as they occur, and can confirm that at least 30 phishing hacks are connected. This includes the BAYC Discord hack and the Beeple Twitter hack with profits over $1.3m
安全事件分析Revisiting Rikkei Finance Exploit In this article we will take a look back at the exploit that occurred on Rikkei Finance which took place on 15 April 2022. The hacker was able to change the oracle to a malicious smart contract due to a lack of control measures to access the SetOracleData causing a loss of $1.1m.
安全事件分析Tiger Incident AnalysisOn 2022-07-15 09:50:19 EST, project TIGER was rugged for approximately $4.518M. 
安全事件分析PREMINT NFT Incident Analysis At 8:00 AM UTC, Premint announced on their Twitter page that their website was compromised. They advised all users to not sign any transactions requiring them to indicate “Set Approval For All” as a setting. In total, 6 exploited wallets have been identified thus far. The profits gained from the attack at this point are ~$375k, making it one of the largest NFT hacks this year. 
行业研究5 Definitive Red Flags in Crypto-InvestmentIn order to protect yourself from falling for the wrong crypto project, we have developed this simple safety check-list, which should help quickly screen out of your watch-list any projects exhibiting one of these 5 red flags
安全事件分析Revisiting The My Farm Pet Flashloan On 06 October 2021, MyFarmPet was hit by a malicious flashloan attack which profited ~31k BUSD and 100 BNB (~$22k) being deposited into Tornado Cash.
安全事件分析Uniswap Phishing Incident AnalysisOn 11 July 2022, an attack that impersonated Uniswap occurred, resulting in the exploiter gaining 3,278 ETH (~$3.6M) and 240 WBTC (~$4.7M) from Positions NFTs in a phishing campaign.