The Wintermute has been exploited for more than 160M loss. The root cause is that the private key of the Wintermute project was compromised possibly due to a vulnerability in the Profanity tool, which was used by Wintermute to generate the private key and the Ethereum account. In this blog…

Background of the private tx service The private tx service aims to protect users’ transactions without broadcasting the transactions on the chain. This service can help build a healthy ecosystem by protecting users from being sandwich-attacked. For instance, an attacker cannot listen to the pending pool to front-run other transactions. Besides, the private tx service can…

By BlockSec On September 16th, 2022, we detected that some attackers successfully harvested lots of ETHW by replaying the message (i.e., the calldata) of the PoS chain on EthereumPoW (aka the PoW chain). …

By BlockSec Introduction Our vulnerability detection system found a memory overwrite vulnerability in the latest implementation of the Wyvern library, which belongs to the Wyvern decentralized exchange protocol that was previously used by OpenSea. This bug may lead to arbitrary storage write. We have tried to contact the project (e.g., through…

We are thrilled to announce that BlockSec and GoPlus Reached Strategy Partnership to explore the field of “Web 3.0 Security”. GoPlus’ Malicious Address Library API integrates BlockSec’s security data. We will have more in-depth cooperation in the security ecological market. As a leading Web3 security company, GoPlus Security has been…

1. Introduction Digital signature is used to ensure the authenticity and integrity. As described in this article, “A valid digital signature, where the prerequisites are satisfied, gives a recipient very high confidence that the message was created by a known sender (authenticity), and that the message was not altered in transit (integrity).” …

Introduction Given the prosperity of NFT ecosystem on Ethereum and the increase of related security issues, we will post a series of blogs to introduce these security issues and give some suggestions for developers to secure contracts. …

On August 2nd, 2022, a cross-chain bridge named Nomad Bridge was attacked, leading to the loss of nearly $200M. The root cause is the incorrect check in the upgraded version of the on-chain smart contract. The Background Nomad Bridge is an emerging cross-chain asset bridge that uses a fraud-proof based design. …

We are thrilled to announce that BlockSec has closed the Seed Plus funding round with $8M raised. The funding round was co-led by Vitalbridge Capital and Matrix Partners, with participation from investors Mirana Ventures (Venture Partner of Bybit), CoinSummer, and YM Capital. Founded in 2021, BlockSec’s mission is to provide…