Discover more from Fairyproof Official Newsletter
Weekly Blockchain Security Watch
Mar 20 to Mar 26
From March 20, 2023 to March 26, 2023, all security incidents that had occurred can be categorized into Security Hacks and Rug-pulls.
1. Phishing Link Posted in DREAMLAND GENESIS’ Discord Server
On Mar 20, a phishing link was posted in the Discord server of DREAMLAND GENESIS(@DreamlandGEN), an NFT project deployed on Ethereum.
2. Phishing Link Posted in Boba Network’s Discord Server
On Mar 20, a phishing link was posted in the Discord server of Boba Network(@bobanetwork), a layer 2 solution.
3. Phishing Link Posted in The Art Bankers’ Discord Server
On Mar 21, a phishing link was posted in the Discord server of The Art Bankers(@theartbankers), a web 3 art platform.
4. Nuwa Suffers From Flash-loan Attack
On Mar 22, the Nuwa project, a project deployed on the BNB chain suffered from a flash-loan attack. Right after the attack, the price of the Nuwa token (contract address at the BNB chain is 0x7A6e3Fd7a155Cd923F0c51a1bEeC2ED61B6E864B) dropped by 80%.
5. FASTSWAP Suffers From Flash-loan Attack
On Mar 24, FASTSWAP(@fastswapdex), a project deployed on the BNB chain suffered from a flash-loan attack. Its token Fast is deployed at 0x3cf0fc9920102CCC2EB4df5E1B3471D555AFb361 on the BNB chain.
26.77 BNBs worth around US $8812 were exploited in this incident.
6. Phishing Link Posted in Kaspa’s Discord Server
On Mar 24, a phishing link was posted in the Discord server of Kaspa(@KaspaCurrency), a blockchain system.
7. Phishing Link Posted in Arbitrum’s Discord Server
On Mar 25, a phishing link was posted in the Discord server of Arbitrum(@arbitrum), a layer 2 solution.
1. Kokomo Finance Turns Out to Be A Scam
On Mar 26, Kokomo Finance(@KokomoFinance) a dApp deployed on Optimism turned out to be scam.
The contract was deployed at 0x7Da25Bc4cFAed3F29414C6779676e53B19a356f5 on Optimism.
Crypto assets worth around US $4 million were exploited by the team in this incident.
8 notable security incidents have occurred in the past week. 7 were attacks on social media and smart contracts, and 1 was a rug-pull.
A Reminder for Project Teams: Always test thoroughly. Do smart contract audits before deploying smart contracts on-chain. Be alert to any anomalies happening in the various social media accounts you manage.
A Reminder for Crypto Users: Be cautious about suspicious links, emails, websites, and projects launched by teams without established reputations.
It is important for everyone in the crypto community to gain understanding and practice sufficient levels of cybersecurity.
To stay updated on notable security incidents in the world of Web3.0, subscribe to our newsletter:
To stay updated on notable security incidents in the world of Web3.0
For a better understanding of all things Web3.0: https://medium.com/@FairyproofT
Looking to strengthen the security of your project or looking for an audit? Contact us at