Weekly Blockchain Security Watch
November 6 to November 12
From November 6, 2023 to November 12, 2023, all security incidents that had occurred can be categorized into Security Hacks and Rug-pulls.
SECURITY HACKS:
1. Coinspot Suffers Exploit
On November 7, a centralized exchange Coinspot suffered an exploit.
The exchange’s wallets were drained for $2.4 M worth of $ETH (1,282 ETH).
The attacker’s address is 0x326dc417d96c72349FA3d1fda4aE9C1c77FD89B8 on Ethereum
2. MEV Bot Suffers Exploit
On November 8, an Ethereum deployed MEV bot suffered an exploit.
The MEV bot is deployed at 0x46d9b3dfbc163465ca9e306487cba60bc438f5a2 on Ethereum.
The root cause of this incident was that its contracts lacked access control for asset trading.
The attacker’s address is 0x46d9B3dFbc163465ca9E306487CbA60bC438F5a2 on Ethereum
Crypto assets worth around US $2 million were exploited in this incident.
3. The Standard Suffers Attack
On November 9, an Arbitrum deployed dApp the standard suffered an attack.
The root cause of this incident was that it lacked a check for slippage and LP management.
The attacker’s address is 0x09ed480feaf4cbc363481717e04e2c394ab326b4 on Arbitrum
Crypto assets worth around US $290,000 were exploited in this incident.
4. Poloniex Suffers Exploit
On November 10, a centralized exchange Poloniex suffered an exploit.
The attacker’s address is 0x0A5984f86200415894821bFEFc1c1De036DbF9e7 on Ethereum
Crypto assets worth around US $130 million were exploited in this incident.
5. Raft Suffers Exploit
On November 11, an Ethereum deployed dApp Raft suffered an exploit.
The root cause was the dApp had a precision calculation issue when minting share tokens. The attacker exploited this issue and used a flash-loan to attack the dApp.
The attacker’s address is 0xc1f2b71A502B551a65Eee9C96318aFdD5fd439fA on Ethereum
Crypto assets worth around US $3.6 million were exploited in this incident.
RUG-PULLS:
1. GOW39 Rug-pull
On November 9, a BNB chain deployed token GOW39 was confirmed to be a rug-pull.
The token is deployed at 0x575bad4ea32729711da86045e43535a7c1b4881b on the BNB chain.
After the rug, the token’s price dropped to $0.
117,748,562,677,194 GOW39s were swapped for $205,000.
CONCLUSION-
6 notable security incidents have occurred in the past week. 5 were attacks on smart contracts and 1 was a rug-pull.
It is worth noting that the loss in the Poloniex exploit was $130 million.
A Reminder for Project Teams: Always test thoroughly. Do smart contract audits before deploying smart contracts on-chain. Be alert to any anomalies happening in the various social media accounts you manage.
A Reminder for Crypto Users: Be cautious about suspicious links, emails, websites, and projects launched by teams without established reputations.
It is important for everyone in the crypto community to gain understanding and practice sufficient levels of cybersecurity.
To stay updated on notable security incidents in the world of Web3.0, subscribe to our newsletter:
For a better understanding of all things Web3.0: https://medium.com/@FairyproofT
Looking to strengthen the security of your project or looking for an audit? Contact us at
https://www.fairyproof.com/