BlockThreat - Week 18, 2023

Level | NeverFall | Deus DAO | Block Forest

May 14, 2023

∙ Paid

Greetings!

BSC projects were really slammed this week with almost $8m lost. Deus DAO really stands out not only for frequent hacks but the insanity of the vulnerability which allowed arbitrary approvals. Who the heck audited that code?

Detailed indicators for all the above incidents are in the premium section below.

News

FBI and Ukrainian police seize 9 crypto exchanges used to launder ransomware payments.

Scams

Drained wallet checklist by Jon_HQ.

Hacks

On May 1, 2023 Level Finance lost $1m by incorrectly calculating rewards.
On May 2, 2023 NeverFall lost $74k due to a price oracle manipulation exploit.
On May 5, 2023 Deus DAO was hacked for the third time now for $6.5m by implementing logic which allowed arbitrary account approvals. Luckily the exploit was front-run by whitehats which recovered most of the funds.
On May 6, 2023 Block Forest lost $260k in a price oracle manipulation exploit.

Research

Top 10 Most Common Bugs In Your Aptos Move Contract by Zellic.
DeFi Slippage Attacks by Dacian.
The Easy Way To Quit (Concrete) Testing by Palina Tolmach.

Tools

Artemis: An Open-Source MEV Bot Framework by Frankie.

Enjoy reading BlockThreat? Consider sponsoring the next edition or becoming a paid subscriber to unlock the premium section with indicators, special reports, and searchable newsletter archives.

Blockchain Threat Intelligence