We hope this report can contribute to the safe development of the blockchain ecosystem.

In November 2024, there were 21 hacking incidents, resulting in losses of approximately $76.86 million, with $25.5 million recovered. The causes of the incidents included contract vulnerabilities, account hacks, and price manipulation, among others. Additionally, there were 9,208 victims of phishing incidents this month, with losses amounting to $9.38 million.

In July 2024, a total of 37 security incidents occurred, resulting in an estimated loss of approximately 279 million dollars, of which 8.76 million dollars was recovered.

Analysis of UwU Lend Being Hacked

Be cautious of those who send you private messages. Nowadays, hackers and scammers like to impersonate legitimate, well-known projects, targeting content creators for scams under the guise of funding, promotion, and other reasons.

In February, a total of 28 security incidents occurred, resulting in an estimated loss of approximately $404 million, caused by contract vulnerabilities, DDoS attacks, flash loan attacks, private key leaks, and account thefts.

This article is a joint analysis of disclosed addresses conducted by Bitrace & MistTrack, including: patterns of fund inflow and outflow for addresses, risks of fund sources for addresses, activities of associated addresses, etc., aimed at disclosing relevant analytical content.

This attack is a typical example of using flash loans for price manipulation, allowing the attacker to borrow more tokens from the Cream lending pool.