Overview On November 10, The Raft protocol (@raft_fi), a decentralized finance (DeFi) platform on the Ethereum blockchain, suffered a major exploit, leading to a loss of ~1577 ETH. The attack revolved around a precision loss issue in the protocol’s smart contracts, which significantly manipulated Raft’s stablecoin, R. Raft, a platform within…

Solidity, as the cornerstone of Ethereum’s smart contract landscape, has its strengths, but it’s not without its vulnerabilities. Among these vulnerabilities is the risk of precision loss-a subtle but significant quirk that can have profound consequences for contract functionality. …

Introduction On October 23, 2023, Safereum experienced a severe rug pull, resulting in a loss of approximately $1.3 million in an exit scam. The externally owned address (EOA) associated with the ENS safereum.eth was found at the epicenter of this fraudulent activity. The consequences: A dramatic 92% drop in the price…

A FriendTech user, @yyctrader1, has reportedly lost 22 ETH due to a phishing exploit on his FriendTech wallet. The perpetrator has successfully moved the stolen assets from #Base to #Ethereum using #Orbiter, with some of the funds ending up in #Binance. The scammer utilized the Orbiter platform to bridge the…

Oct 6 😈On Oct 6, 2022, the $RES Token on the Binance Smart Chain suffered a flash loan attack, leading to a theft of roughly $290,000. The attacker exploited a vulnerability in the token’s #smartcontract, manipulated the pool price, and profited by swapping #tokens. Detailed Hack Analysis Report Oct 11 😈On Oct 11, 2023…

Overview CoinEx Global, a well-known cryptocurrency exchange platform, has recently fallen victim to a significant security breach. The exploit led to a loss estimated at approximately $54 million. Preliminary investigations suggest a possible compromise of private keys, leading to unauthorized fund transfers from the platform’s hot wallets. Fine Details of the Hack Hack Amount: ~$54 million. …

Introduction Date of Hack: September 4th, 2023 Entities Involved: Stake.com, Potential North Korea-affiliated Hackers Amount Lost: $41 Million Key Vulnerability: Suspected Compromise of Stake’s Hot Wallet Private Keys The following report provides an in-depth analysis of the security breach that occurred on September 4, 2023, involving Stake.com. This report will explore…

On July 21, Defi Conic Finance suffered two significant exploits due to vulnerabilities in its smart contracts. These vulnerabilities led to a total loss of approximately $4.2M from its ETH and crvUSD omnipools. The first exploit, amounting to a loss of ~$3.3M from the ETH pool, was attributed to a…

On Aug 18, DeFi @ExactlyProtocol, operating on Optimism, encountered a breach resulting in a loss of around $7.3M. A loophole in the DebtManager contract allowed hackers to tweak the market address and evade integral permit checks, leading to the theft of users’ $USDC. Summary of the Exploit Attackers made use of an insufficient_check vulnerability…