In web3 security, a vulnerability refers to anything that can be leveraged by a hacker to exploit the protocol. …

Web3 is a term given to a broad range of technological advances that constitute a huge evolution in the nature of the internet and our online lives. There are multiple lenses through which we can view web3. …

Projects and networks that are not fully decentralized require accounts that have access to critical network controls. Privileged access management risk refers to the risk of compromise surrounding these accounts, and the catastrophic losses that can occur when access to them is compromised. Having accounts with privileged access provides hackers…

Entering the world of cryptocurrency for the first time can be a daunting experience. For some, it’s a way to get to grips with an exciting new technology, whilst others are enticed by the promise of huge returns (ignoring the warnings of equally huge losses). Yet whilst cryptocurrency can be…

Summary On May-16–2022 11:31:29 +UTC, the FEG token has experienced flashloan attacks on both BNBChain and Ethereum, leading to approximately $1.9M worth of asset loss in total. Exploit Transactions Sample exploit transaction(BNBChain): https://bscscan.com/tx/0xe956da324e16cb84acec1a43445fc2adbcdeb0e5635af6e40234179857858f82 Sample exploit transaction(Ethereum): https://etherscan.io/tx/0xc0031514e222bf2f9f1a57a4af652494f08ec6e401b6ae5b4761d3b41e266a59

Summary On May-15–2022 08:22:49 PM +UTC, the FEG token has experienced a flurry of flashloan attacks on both Ethereum and BNBChain, leading to approximately $1.3M worth of assets loss. This vulnerability is due to a flaw in the “swapToSwap()” function that directly takes user input “path” as a trusted party yet…

Rugpulls are notorious for being the bane of any new crypto investor trying to make it big. CertiK’s data shows that the attack remains the most popular hack for scammers, with $6.3 million in crypto assets exfiltrated in April alone. Honest and worthwhile projects will go to great lengths to…

As the internet has increasingly become the primary space for financial exchange, hackers and malicious actors have taken every chance they can get to exploit vulnerabilities in the technology for their self-interest. One of the promises of blockchain technology is its ability to bolster the safety of online activity through…

Incident Summary From Apr-30–2022 09:01:35 AM +UTC to Apr-30–2022 09:35:24 AM +UTC, Fei Protocol announced that they were aware of and looking into an exploit on various Rari Fuse pools. The total loss currently reported is ~$80 Million. They have paused all borrowing to minimize further loss. The root cause of this…