A fast-moving Web3 discussion is forming around Web3 security incident: RT @Phalcon_xyz: 🗓️ Weekly Web3 Security Roundup | Jun 29 - Jul 5 🚨 This week's focus: @hinkal_protocol Double-Spend Attack ~$800K drained.
Multiple social or news items are discussing the same topic in a short time window.
HinkalInstitutional-grade privacy for on-chain transactionsHinkal is a privacy protocol for stablecoins that enables private transactions on public blockchains. It has been exploited for approximately $820,000 and has partnerships with institutional custody platforms.
BlockSecBlockchain security and auditing firmBlockSec provides security auditing and analysis for blockchain and smart contract projects.
BlockSec PhalconWeb3 security analysis and incident response.Phalcon is a real-time security monitoring platform for blockchain transactions, built by BlockSec. It helps detect and prevent hacks and exploits.
Nexus MutualDecentralized cover for smart contract risks.Nexus Mutual is a decentralized insurance protocol built on Ethereum that currently offers cover for smart contracts on the Ethereum blockchain, currently covering all the main defi protocols. Nexus Mutual offers coverage against smart contract failures, which protects against potential bugs in smart contract code. The coverage intends to provide protection against financial losses that may be incurred due to hacks or exploits in the smart contract code. Note that smart contract cover only protects against “unintended uses” of smart contracts, so security events such as the loss of private keys or centralized exchange hacks are not covered. In December 2020, it released custody cover covering centralised custodians and lenders such as Celsius, Blockfi, and Nexo.
Arsenal Fan TokenProjectThe official Fan Token of Arsenal FC.
QuantstampBlockchain security companyQuantstamp is a smart contract auditing company in the blockchain sector that aims to facilitate the mainstream adoption of blockchain technology through security and risk assessment services. Its services include securing Layer blockchains such as Ethereum . and Solana, securing smart contract-powered NFT and DeFi applications such as Maker and OpenSea, and developing financial primitives for Layer blockchain ecosystems. Tags: Security Solutions Security Audit Location: United States
🫣$26.8M was lost across 3 major Web3 incidents in the past 7 days. - BonkDAO ($20M): Weak governance controls allowed a malicious treasury proposal to pass and execute without delay. - https://t.co/h5Tvs0pcPy ($6M): A vault accounting flaw allowed phantom as…
4 exploits to study from this past week: ◼️ $800K from Hinkal Protocol, repeated Transact calls drained a single Proofless Deposit 🔗 https://t.co/P04ByvxBvP ◼️ $403K from Edel Finance, a 41x flash-loan loop inflated its share-token price 155x 🔗 https://t.co…
🗓️ Weekly Web3 Security Roundup | Jun 29 - Jul 5 🚨 This week's focus: @hinkal_protocol Double-Spend Attack ~$800K drained from a shielded pool — a legacy note format flaw likely allowed deriving multiple nullifiers from one deposit. Breaking down how a circ…