ChainCatcher message, according to Immunefi's 2024 report, although interest in Ethereum among respondents has declined compared to 2023, it remains the preferred blockchain for crypto white hat hackers. Additionally, Polygon, Arbitrum, Optimism, and Solana have also gained attention.Specifically, 87% of respondents are attracted to Ethereum, down from 94% in 2023. Interest in Polygon has risen to 59%, ranking it second, followed by Arbitrum (47%) and Optimism (45%). Interest in Solana has also increased from 32% in 2023 to 42% in 2024, ranking fifth.

ChainCatcher message, Ronin announced on social media that the cross-chain bridge, after experiencing a security vulnerability incident and undergoing a comprehensive audit, is now ready to reopen.Previously, due to a critical configuration error, the cross-chain bridge was hacked for 12 million dollars and was suspended to prevent further financial loss. All funds have now been safely recovered, and the white hat hackers received a bounty of 500,000 dollars.Currently, the proposal for the reopening of the cross-chain bridge has been submitted for operator voting, and services are expected to resume within 10 days, with no further updates planned for the time being.

ChainCatcher message, Ronin stated on platform X that white hat hackers have returned approximately 10 million USD worth of ETH, and USDC is expected to be returned later.The bug bounty program will reward the white hats with a bounty of 500,000 USD.The Ronin bridge will undergo an audit before reopening, and updates will be provided as the audit progresses.

ChainCatcher news, Ronin posted on social media that earlier today, white hats notified Ronin that there might be a vulnerability in the Ronin bridge. After verifying the report, the bridge was paused about 40 minutes after the first on-chain operation was detected. The attacker extracted approximately 4000 ETH and 2 million USDC, worth about 12 million dollars, which is the maximum amount of ETH and USDC that can be withdrawn in a single transaction from the bridge. The bridging limit is an important safeguard to enhance the security of large fund withdrawals and effectively prevent further damage caused by this vulnerability.Ronin stated that due to an issue introduced during the bridge upgrade after the governance process was deployed, the cross-chain bridge misunderstood the voting threshold required by the bridging operators to withdraw funds. Efforts are currently underway to find a solution to the root cause, and the bridge update will undergo strict review before being decided upon by a vote from the bridging operators. Negotiations are ongoing with these seemingly white hat actors, who have responded in good faith. Regardless of the outcome of the negotiations, all user funds are safe, and any shortfall will be re-deposited when the bridge reopens. A post-incident analysis will be shared next week, detailing the technical aspects and planned measures to prevent similar incidents in the future.

ChainCatcher news, Kraken's Chief Strategy Officer Nick Percoco stated that the trading platform considers the recent loss of nearly $3 million as a "criminal case" and is coordinating with law enforcement to recover the funds.Percoco mentioned that these unnamed researchers stole millions of dollars in cryptocurrency from Kraken by withdrawing funds that had already been deposited into their accounts before the deposit was completed. He wrote that the attackers could effectively print assets.Previous news, the blockchain security firm CertiK announced on social media that a series of serious vulnerabilities were discovered on the Kraken exchange, which could lead to potential losses of hundreds of millions of dollars.

ChainCatcher news, Stacks co-founder Muneeb Ali stated that the new $1 million Orange Hats program aims to enhance Stacks security, promote white hat hacking activities, and provide new tools and services for contract testing and deployment at the application layer. This can extend beyond Stacks L2 and benefit Bitcoin L1.

ChainCatcher news, Paradigm's security chief and white hat hacker Samczsun announced on social media the launch of the cryptocurrency cybersecurity threat information sharing platform SEAL-ISAC. SEAL-ISAC allows individuals to connect with experts in cryptocurrency cybersecurity threats, attacks, and responses. The platform is free and supports both centralized and decentralized entities globally.It is reported that Samczsun initially announced the establishment of SEAL Org in February 2024. SEAL (Security Alliance) is an organization dedicated to addressing cryptocurrency cybersecurity threats and also provides a safe haven for white hat hackers.

ChainCatcher message, Super Sushi Samurai officials stated on social media that the attacker is a white hat hacker, and they have contacted him on Blockscan, and may collaborate to resolve the issue in the future.

ChainCatcher news reports that a white hat hacker named Kankodu claimed to have discovered Euler's "first deposit bug" in July 2022, for which he received a $50,000 bug bounty. However, the "donateToReserves" function introduced during the fix of this bug led to a subsequent theft of $200 million.According to previous reports from ChainCatcher, Euler Finance suffered a hacker flash loan attack in March this year, with losses amounting to approximately $197 million, including 8,877,507.35 DAI, 849.14 WBTC, 34,413,863.42 USDC, and 85,818.26 stETH.

ChainCatcher message, DeFi public product JPEG'd tweeted that the DAO multi-signature address confirmed the receipt of 5494.4 WETH, and the owner of the address that recovered the funds from the pETH vulnerability received a 10% (610.6 WETH) white hat bounty.

ChainCatcher news, the decentralized trading protocol Hashflow conducted a review of the white hat hacker incident, stating that the affected routing contract was deprecated on May 3, 2022, and users have been notified to revoke permissions.On June 14, a white hat began transferring assets from wallets that had not correctly revoked permissions, and the current Hashflow router contract will not be affected in any way. Hashflow also released instructions for affected users to recover their funds.Yesterday, Shield monitoring indicated that Hashflow was suspected of experiencing an attack related to permissions, with current losses amounting to approximately $400,000, of which $195,000 in losses occurred on Arbitrum and $215,000 in losses occurred on Ethereum. Subsequently, Hashflow stated that all affected users, totaling about $600,000, would be fully restored. (Source link)

ChainCatcher news, the hacker who attacked the Arbitrum ecosystem lending protocol Tender.fi has returned the stolen funds and received a $97,000 bounty, which is about 6% of the stolen funds.According to previous reports from ChainCatcher, 0xScope researcher Bobie analyzed that this attack was carried out by a white hat hacker, who commented that Tender.fi's oracle configuration was incorrect and attempted to contact Tender.fi, estimating that around $1.6 million in funds were affected by this incident. (source link)

ChainCatcher message, the Arbitrum ecosystem lending protocol Tender.fi is suspected to have been attacked. The official statement on social media indicates that they are currently investigating the abnormal number of loans and have suspended all lending activities.According to analysis by 0xScope researcher Bobie, this incident was caused by white hat hackers. He mentioned that there was a configuration error in Tender.fi's oracle and attempted to contact Tender.fi. The initial estimate suggests that approximately $1.6 million in funds have been affected by this incident. TND (Tender.fi) briefly dropped nearly 50% and is currently reported at $2.22. (source link)

ChainCatcher news, white hat hackers earned a total of $52 million in bug bounties through the Immunefi platform in 2022. Among them, white hat hackers received $10 million from the bounty program of the cross-chain interoperability protocol Wormhole, and $6 million from the bug bounty program of the NEAR ecosystem's EVM scaling network Aurora. (source link)

According to ChainCatcher news, monitoring by PeckShield indicates that $13.4 million has been returned from the white hat hacker address to Team Finance, which includes 548.7 ETH ($860,000) to FEG, 765,000 DAI and 11.8 million TSUKA ($626,000) to Tsuka, approximately 500 DAI and 746 trillion CAW (about $5.5 million) to CAW, and 209 ETH ($328,000) to KNDX.Previous report stated that the Team Finance team was attacked while managing funds during the migration from Uniswap v2 to v3, with confirmed losses of $14.5 million. The team has currently suspended all activities of Team Finance until it is confirmed that this vulnerability has been fixed. (Source link)

According to ChainCatcher news reported by TheBlock, OpenSea has awarded a bounty of $100,000 each to two white-hat hackers who discovered vulnerabilities. Among them, Corben Leo, a security expert and Chief Marketing Officer at the security company Zellic, found a critical vulnerability through the bug bounty platform HackerOne that could potentially be used to steal assets; the other white-hat hacker, named Nix, did not disclose related information. OpenSea stated that it has released relevant patches. (Source link)

According to Chain Catcher, as reported by Cointelegraph, the anonymous white hat hacker "0xriptide" responded on Twitter, stating that they discovered a vulnerability involving $250 million in assets and should qualify for a maximum bounty of nearly 1,500 ETH, approximately $2 million, but expressed gratitude for the "very basic" 400 ETH bounty provided by the Arbitrum team. Currently, neither Arbitrum nor OffChain Labs has publicly commented on the vulnerability.Earlier, Chain Catcher reported that an anonymous white hat hacker "0xriptide" received a reward of 400 ETH (about $520,000) for discovering a vulnerability in Arbitrum's payment code, which involves $250 million in assets. (Source link)

链捕手消息，跨链互操作性协议 Nomad 发文表示，迄今为止，已有 86 个白帽黑客钱包地址向 Nomad 恢复钱包返还价值 3200 万美元的资产。希望白帽继续返还资金至 0x94a84433101a10aeda762968f6995c574d1bf154 地址（ETH/ERC-20）。 此前报道，Nomad 表示，将为「归还 90% 以上所盗资金」的攻击者提供最高 10% 的奖励。截至目前，Nomad 被盗的近 2 亿美元资金已退回约 2000 万美元。（来源链接）

链捕手消息，派盾（PeckShield）监测显示，Nomad 被攻击事件中，约 41 个地址获利约 1.52 亿美元（占 80%） ，包括约 7 个 MEV 机器人（约 710 万美元）、 Rari Capital 黑客 （约 340 万美元）和 6 个白帽黑客（约 820 万美元），约 10% 的 ENS 域名地址获利 610 万美元。（来源链接）