Background In this article, we will guide you on how to identify malicious code hidden in contracts. Prior Knowledge Remember when we talked about deploying attack contracts in previous issues? We mentioned that the address of the target contract is passed in, and that the functions of the target contract…

This report takes a close look at the major events in the blockchain industry that took place in 2022. It provides an overview of the security status of each area within the industry and delves into common attack techniques. Additionally, it uncovers a few phishing techniques and analyzes the flow…

Background On September 2, the SlowMist security team discovered that suspected APT groups were conducting large-scale phishing activities targeting NFT users in the encryption ecosystem, and released the “How Scammers Are Paying Nothing for Your NFTs”. On September 4, Twitter user PhantomXSec tweeted that the North Korean APT group were…

We are glad to announce the collaboration between SlowMist and Footprint Analytics. The importance of on-chain security and wallet tracking is not in doubt. The SlowMist team provides developers and users with great solutions for auditing, monitoring, and tracking. All these can’t be done without in-depth analysis and research of…

Background In the last post, we learned about DoS attacks against smart contracts. This time, let’s look at tx.origin-based phishing attacks in smart contracts. Prior Knowledge Let’s begin by examining two common methods for verifying a sender’s address in Solidity. msg.sender: msg.sender will only read the address of the higher-level…

Not long after the last announcement of the “Another Airdrop Scam, But With a Twist,” we’ve identified a very similar scam based on reports from victims. According to the reports of many victims, transfers of 0 USDT from unrecognized addresses continued to show in the address transaction history of TRON…

On October 27,2022, the Team Finance project was attacked, resulting in the loss of around $14.5 million in tokens. The SlowMist security team investigated this event and came to the following conclusions: Related Information Attack Hash 0xb2e3ea72d353da43a2ac9a8f1670fd16463ab370e563b9b5b26119b2601277ce Attacker Address 0x161cebB807Ac181d5303A4cCec2FC580CC5899Fd Contract deployed by the attacker 0xCFF07C4e6aa9E2fEc04DAaF5f41d1b10f3adAdF4

According to the SlowMist Intelligence, UvToken, a project on the BNB Chain, was attacked on October 27, 2022. The hackers stole more than 5,000 BNB exploiting a vulnerability in its mining pool contract. We investigated this incident and these were our findings: Related Information Attack Hash 0x54121ed538f27ffee2dbb232f9d9be33e39fdaf34adf993e5e019c00f6afd499 Attacker Contract Address 0x99d4311f0d613c4d0cd0011709fbd7ec1bf87be9 Attacker EOA Address 0xF3E3ae9A40ac4Ae7B17B3465F15ecF228eF4F760…

Recently, several users reported that their assets had been stolen. At first, they were unsure how their funds had been stolen, but upon closer inspection, we discovered that this was a new type of airdrop scam. Many of the victims’ addresses were constantly airdropped with tiny amounts of tokens (0.01…