Sep 7EAC Hack AnalysisSummary We notice a hack incidence on BSC mainnet in transaction https://bscscan.com/tx/0x477f9ee698ac8ae800ffa012ab52fd8de39b58996245c5e39a4233c1ae5f1baa Attacker depolyed attack smart contract (https://bscscan.com/address/0x20dcf125f0563417d257b98a116c3fea4f0b2db2) and take out a flash loan in DODO X. Callback function DPPFlashLoanCall in attacker’s smart contract using 300,000 BSC-USD swap 2,320.81 EAC in Pancakeswap, then attacker call EAC project’s own contract (https://bscscan.com/address/0xa08a40e0f11090dcb09967973df82040bff63561) swap…Web34 min readWeb34 min read
Aug 6Pool attack event0x01 Event Background on July 30 to on July 31, a large-scale attack occurred on the chain, resulting in the loss of funds in multiple Curve pools. The root cause of the bugs are all due to a reentrancy lock failure in certain versions of Vyper 0x02 Attack analysis Through the preliminary analysis of the transaction…Attack5 min readAttack5 min read
Jun 19Benefit Guide:Lunaray Blockchain SecurityBenefit Guide: We can provide: 20% discount on security audit services 20% discount on stolen asset tracking and monitoring services Free consultation service for stolen assets Free use of Token security detection Free security bounty posting services Project and Function Introduction: Lunaray is a company focused on the security of…2 min read2 min read
Jun 4Analysis of Jimbos Protocol Attack IncidentEvent Background On May 28, 2023, the Jimbos Protocol project on the ARBITRUM chain was attacked by hackers. The attacker profited approximately 7.76 million US dollars. The attacker’s address is 0x102be4bccc2696c35fd5f5bfe54c1dfba416a741, and the stolen funds were transferred to the ETH chain and then moved to the address 0x5F3591e2921D5c9291F5b224E909aB978A22Ba7E. Attack Steps …3 min read3 min read
May 30Analysis of the EDE Finance Attack Event0x01 Event Background on May 30, 2023, the EDE Finance project on the Arbitrum chain was subjected to a hacker attack. The attacker profited 597,694 USDC and 86,222 USDT, with the attacker’s address identified as 0x80826e9801420e19a948b8ef477fd20f754932dc. After the attack, the perpetrator left a message on the chain claiming it was a white hat…5 min read5 min read
May 4April Security ReportThe total loss of various attacks in April was about 94.07 million US dollars, a decrease from March In April 2023, the number of various security incidents and the amount involved decreased compared with March, and the total loss of various attack incidents was about 94.07 million US dollars. The…Secutiy3 min readSecutiy3 min read
Apr 13Sushiswap RouteProcessor2 Attack Event AnalysisEvent Background: The Sushiswap project was attacked on April 9, 2023, and suffered a loss of approximately 1800 ETH, about 3.34 million US dollars. 0x02 Vulnerability and Core: The contract did not check the incoming parameter “router”, allowing attackers to perform subsequent operations by maliciously constructing the “router”.Hacking2 min readHacking2 min read
Apr 8Allbridge attack analysis0x01 Event Background On April 1, the BSC chain Allbridge cross-chain bridge was hacked, the attacker profited XX, the attacker address is 0xc578d755cd56255d3ff6e92e1b6371ba945e3984, the stolen funds were transferred to Tornado.cash mixed coin platform 0x02 Contract Vulnerability The exchange operation function swapToVUsd in the contract calculates the exchange result as the difference between the current recorded BUSD…Attack3 min readAttack3 min read
Apr 1Euler Finance Attack Event Analysis0x01 Event Background On March 14, Euler Finance on the ETH chain was hacked, the attacker made a profit of about $197 million, the attacker’s address is 0xb66cd966670d962c227b3eaba30a872dbfb995db, the stolen funds 100ETH transferred to the mixed coin platform Tornado.Cash, …Security Services3 min readSecurity Services3 min read
Mar 202023, Entrance Wars: Private Keys in the Back, Transactions in the FrontThe story of crypto has been narrated from 2008 to 2023 web3, in just a decade the story of fortune on the chain jumped back and forth from various Tokens, and the market went to bust and boom in one cycle after another, during which one eye-catching topic was born…Wallet Development7 min readWallet Development7 min read
