ChainCatcher message, according to BlockSec monitoring, the f(x) Protocol has been hacked. If users have authorized the relevant contracts, please revoke the authorization immediately.

ChainCatcher news, security company BlockSec announced that it has received funding from the Uniswap Foundation to support the secure operation of Uniswap V4 using its static analyzer.BlockSec stated that the new "Hooks" feature in Uniswap V4 significantly enhances the scalability and flexibility of pools, while also presenting certain challenges to contract security. With this grant, BlockSec will provide a static analyzer to identify vulnerabilities and malicious behaviors in Uniswap V4 hook contracts, enabling developers and auditors to take preventive measures.

ChainCatcher news, the blockchain security agency BlockSec announced that it is assisting EraLend in resolving issues, with the attack being a read-only reentrancy attack, resulting in a total loss of approximately 3.4 million USD. Attacker address: 0xf1D076c9Be4533086f967e14EE6aFf204D5ECE7a

ChainCatcher news, Phalcon under BlockSec tweeted that Keep3r Network was attacked due to the leakage of the governor's private key. The attacker reset the governors of multiple pools and initiated a reentrancy attack, profiting approximately 4084 KP3P, worth about $200,000. (Source link)

ChainCatcher message, BlockSec monitoring has discovered a new phishing scam that utilizes the OpenSea protocol proxy upgrade interface. When users create an account on OpenSea, Opensea creates a proxy contract and allows users to authorize their NFTs to the proxy contract. This scam tricks victims into signing an upgradeTo() function, changing the OpenSea proxy to its own contract. After the implementation is changed, attackers can easily call multicall() and drain every approved NFT from the user's proxy contract. (source link)

ChainCatcher news, blockchain security technology company BlockSec announced the launch of a new toolkit for collaborative testing of block numbers on private chains and the Ethereum mainnet that can "fork from any (transaction) position." The developer and security researcher-focused toolkit is called "Phalcon Fork," which aims to better control the work done on testnets, such as transaction testing, analysis, and debugging. (Source link)

ChainCatcher news, the NFT lending protocol ParaSpace tweeted that its protocol contract upgrade has been completed, and the withdrawal time lock security enhancement feature has now been fully implemented. ParaSpace has resumed and is operating at full capacity.In addition, ParaSpace also announced a partnership with BlockSec, which will join the ParaSpace Security Committee. (source link)

ChainCatcher news, the NFT lending protocol ParaSpace announced that funds have been recovered from BlockSec and are currently rebalancing the liquidity pools on the platform, while also working to fix the cAPE redemption so that it can restore to a 1:1 ratio with APE. Once the phased reopening of the protocol begins, the front end and similar components will be fixed to display correct and accurate data.ParaSpace also stated that it is implementing security enhancements from a contract perspective, including time-locking withdrawals for large withdrawal requests. ParaSpace plans to establish a 24/7 Solidity team across all time zones to monitor contract transactions in real-time, while increasing the bug bounty amount for critical bugs to $200,000.Additionally, ParaSpace has begun interviewing for a stability and security director. (Source link)

According to ChainCatcher news, data from BlockSec shows that the attacker address of the lending protocol Euler has started to return funds to Euler Finance, with 3000 ETH returned so far.Previously, ChainCatcher reported that Euler Finance was attacked, resulting in losses of up to $197 million. (Source link)

ChainCatcher news, the blockchain security team BlockSec posted on social media that it has prevented an attack on the NFT lending protocol ParaSpace, saving 2900 ETH in assets, and hopes that the ParaSpace team will contact them soon.Not long ago, the official ParaSpace team stated that due to suspicious trading activities observed by the team, the ParaSpace protocol has been temporarily suspended for security reasons, and users are unable to conduct any transactions (withdrawals, deposits, liquidations). The team is investigating and will release an event update announcement once more information is obtained. (source link)

According to ChainCatcher news, monitored by BlockSec, Euler Finance was attacked with a loss amounting to $197 million, including approximately 8.8775 million DAI, 849.14 WBTC, about 34.414 million USDC, and 85,818.26 stETH. (source link)

ChainCatcher news, the encryption security company BlockSec tweeted that the decentralized lending protocol Euler Finance is suspected of being hacked for 8.89 million DAI and 8,080 WETH, with a total value exceeding 20 million USD. According to Debank data, the funds on the hacker's address amount to approximately 174 million USD. Independent security researcher CIA Officer stated that the hacker deployed multiple attack contract addresses.It is reported that Euler Finance has completed a total of 3 rounds of financing, raising 40.8 million USD. Investors include Jump Crypto, Coinbase Ventures, Paradigm, and others. (Source link)

ChainCatcher news, according to The Block, after the Avalanche ecosystem StableSwap project Platypus was hacked, at least $2.4 million in funds have been recovered with the help of blockchain security company BlockSec. BlockBeats previously reported that Platypus stated on February 17 that its native stablecoin USP suffered a flash loan attack, where the attacker used a flash loan to exploit a logical error in the USP repayment capability check mechanism within the contract holding collateral. The main pool lost a total of $8.5 million. (Source link)

ChainCatcher news, the Chrome browser extension MetaDock launched by the Web3 security infrastructure provider BlockSec has surpassed 3,000 downloads, with a monthly growth rate of over 500%. MetaDock is primarily aimed at security researchers, data analysts, DeFi and NFT players, and offers a series of on-chain security alerts and data analysis features, including one-click viewing of fund flows for any address, comprehensive NFT risk radar charts, contract address risk markings, and entity labels for millions of on-chain addresses.Currently, MetaDock supports interaction with various popular platforms such as DeBank, EtherScan, Tenderly, Transaction Viewer, Phalcon, Dedaub, and aggregates 11 mainstream EVM-compatible chain explorers, and is completely open-source and free.It is reported that BlockSec is committed to building Web3 security infrastructure, with a team composed of top security researchers and experts. They have provided security audits for over 100 protocols and launched on-chain security tools such as MetaDock, Phalcon, Mopsus, and MetaSleuth for different Web3 audiences. In July 2022, BlockSec announced the completion of a 50 million RMB angel + round financing, led jointly by Oasis Capital and Matrix Partners. (Source link)

ChainCatcher message, BlockSec monitoring shows that the MEV bot (0x00000000000a47b1298f18cf67de547bbe0d72) was exploited, resulting in a loss of approximately 187.75 WETH. The attacker borrowed 1 WETH using a Flashloan and sent it to the bot, which then exchanged WETH for USDC and sent it to the attacker's contract. The attacker converted USDC back to WETH and withdrew it. (Source link)

Chain Catcher news, blockchain security company "BlockSec" has launched the transaction browser "Phalcon", aiming to provide comprehensive data on call flows, balance changes, and fund flows.It is reported that Phalcon currently supports Ethereum, BSC, and Cronos. (Source link)

Chain Catcher news, BlockSec tweeted that a front-running bot scam has been discovered on the BNB Chain, where scammers teach users how to develop a "front-run bot" to make money, but the contract they provide has a backdoor, and after deployment, all of the victim's tokens will be transferred to the attacker's address. (Source link)