BlockThreat - Week 43, 2024

Tigran | DSS | SEAL | ZachXBT | North Korea

Greetings!

A much-deserved peaceful week before we all meet at the upcoming DeFi Security Summit and Devcon in Bangkok! I’ll have a busy schedule with two talks and a panel on the following days:

November 8th - 13:10 - The State of DeFi Security - 2024 Edition. A brain dump of all of my observations and trends from 2024. You will learn how most DeFi projects get hacked, by who, and what we can do about it.

November 9th - 13:35 - Web3 Security: Revolution or Evolution of Web2 Security Principles? Should be a fantastic panel with Mehdi, Mudit, Anto and myself moderated by Rajeev.

November 15th - 09:45 - Defcon at Devcon: A tabletop experience. A 2 hour workshop where I will be partnering with my colleague Heidi Wilder from Unit 0x to simulate a tabletop exercise to better prepare our devs for one of the worst case scenarios a project may face.

I hope you can all stop by. Now, if only bad actors could take a break for a few days so I wouldn’t have to constantly update my stats!

Speaking of bad actors, only one major compromise this week of an unknown contract on Base for $1M due to using live price data from SUI market — oops.

Phishing attacks hit a new high, with $20M stolen from a U.S. government wallet containing funds seized from the Bitfinex hack. Fortunately, all funds were returned less than 24 hours later after the attacker decided not to mess with someone who has unlimited resources to hunt them down.

To gain access to comprehensive vulnerability write-ups, post-mortems, exploit proof of concepts (PoCs), attacker addresses, and additional data regarding this week’s compromises, please subscribe to the premium plan below.

Let’s dive into the news and hope to see you all soon!