Slow Fog Security Team

The Slow Fog security team received invitations from multiple teams to conduct forensic investigations into several hacking incidents.

Hacker organizations, especially state-sponsored hackers like the Lazarus Group, are continuously upgrading their attack methods.

In January 2025, there were a total of 40 hacking incidents in Web3 security, resulting in losses of approximately $87.94 million, with $1.47 million recovered. The causes of the incidents included contract vulnerabilities, account hacks, and private key leaks. Additionally, there were 9,220 victims of phishing incidents this month, with losses amounting to $10.25 million.

We hope this report can contribute to the safe development of the blockchain ecosystem.

In November 2024, there were 21 hacking incidents, resulting in losses of approximately $76.86 million, with $25.5 million recovered. The causes of the incidents included contract vulnerabilities, account hacks, and price manipulation, among others. Additionally, there were 9,208 victims of phishing incidents this month, with losses amounting to $9.38 million.

In July 2024, a total of 37 security incidents occurred, resulting in an estimated loss of approximately 279 million dollars, of which 8.76 million dollars was recovered.

Analysis of UwU Lend Being Hacked

Be cautious of those who send you private messages. Nowadays, hackers and scammers like to impersonate legitimate, well-known projects, targeting content creators for scams under the guise of funding, promotion, and other reasons.

In February, a total of 28 security incidents occurred, resulting in an estimated loss of approximately $404 million, caused by contract vulnerabilities, DDoS attacks, flash loan attacks, private key leaks, and account thefts.

This article is a joint analysis of disclosed addresses conducted by Bitrace & MistTrack, including: patterns of fund inflow and outflow for addresses, risks of fund sources for addresses, activities of associated addresses, etc., aimed at disclosing relevant analytical content.