Weekly Blockchain Security Watch
December 4 to December 10
From December 4, 2023 to December 10, 2023, all security incidents that had occurred can be categorized into Security Hacks and Rug-pulls.
SECURITY HACKS:
1. BEARNDAO Suffers Exploit
On December 6, a BNB chain deployed dApp BEARNDAO suffered an exploit.
The attacker's address is 0xCE27b195Fa6dE27081a86b98b64f77F5FB328dd5 on the BNB chain.
Crypto assets worth around US $760 were exploited in this incident.
2. Time Suffers Exploit
On December 7, an Ethereum deployed token Time suffered an exploit.
The root cause of this incident was that the arbitrary external call function of the forwarder contract was maliciously used by the hacker.
The attacker’s address is 0xFDe0d1575Ed8E06FBf36256bcdfA1F359281455A on Ethereum.
Crypto assets worth around US $188K were exploited in this incident.
RUG-PULLS:
1. XPET Rug-pull
On December 4, a BNB chain deployed token XPET was confirmed to be a rug-pull.
The token is deployed at 0xe252f49be54006256660f706a5f96ecabfd56f1c on the BNB chain.
7,530,748,017,935 XPET tokens were swapped for 208K BSC-USD tokens (worth around US $208K).
The price of XPETÂ dropped 100.00%Â after the rug-pull.
CONCLUSION-
3 notable security incidents have occurred in the past week. 2 were attacks on smart contracts and 1 was a rug-pull.
A Reminder for Project Teams: Always test thoroughly. Do smart contract audits before deploying smart contracts on-chain. Be alert to any anomalies happening in the various social media accounts you manage.
A Reminder for Crypto Users: Be cautious about suspicious links, emails, websites, and projects launched by teams without established reputations.
It is important for everyone in the crypto community to gain understanding and practice sufficient levels of cybersecurity.
To stay updated on notable security incidents in the world of Web3.0, subscribe to our newsletter:
For a better understanding of all things Web3.0: https://medium.com/@FairyproofT
Looking to strengthen the security of your project or looking for an audit? Contact us at
https://www.fairyproof.com/