ChainCatcher news, blockchain security company CertiK issued a warning, as its security team detected multiple suspicious transactions on the Arbitrum network. An attacker with the address 0x97d8170e04771826a31c4c9b81e9f9191a1c8613 may have exploited a vulnerability in arbitrary calls to bypass signature verification, stealing approximately $140,000 from multiple unverified exchange adapter contracts.

ChainCatcher news, according to data from the Web3 security agency CertiK, the cryptocurrency industry lost up to $1.53 billion in February 2025, with the $1.4 billion attack on Bybit by the North Korean Lazarus Group becoming the largest cryptocurrency hacking incident in history, accounting for 91% of the total losses for that month. Excluding the Bybit incident, the losses in February still reached $126 million, an increase of 28.5% compared to January.Other significant events include the stablecoin payment company Infini losing $49 million due to a suspected administrator privilege vulnerability, and the ZkLend protocol being hacked for $10 million. CertiK pointed out that the main causes of losses this month were wallet leaks, code vulnerabilities ($20 million), and phishing attacks ($1.8 million).

ChainCatcher news, according to The Wall Street Journal, the Bybit theft incident is the largest single theft in cryptocurrency history, with stolen assets valued at over $1.4 billion.After the incident, Bybit announced that it has reported the case to the relevant authorities. Its CEO Ben Zhou stated that all functions and products of Bybit are still operating normally, the exchange is solvent, and it will fully cover customer losses. As of now, all withdrawal requests from Bybit have been processed, and the withdrawal system has returned to normal speed.

ChainCatcher news, according to CertiK Alert statistics, the losses due to vulnerabilities, hacking attacks, and scams reached 98 million dollars in January 2025, with approximately 8 million dollars attributed to phishing losses.However, the total loss amount is less than the funds lost due to hacking activities in January 2024 (approximately 193 million dollars).

ChainCatcher news, the investment division of the blockchain security company CertiK, CertiK Ventures, announced on social media that it has invested in Mantis.This project is the first second-layer scaling solution built on the Solana Virtual Machine (SVM), aimed at enhancing the interoperability and user experience of decentralized finance through AI agents. Currently, Mantis's cross-chain trading feature has been launched, with a trading volume reaching $35 million, and it is undergoing a security audit by OtterSec.

ChainCatcher message, according to CertiK monitoring, PulsePot.io suffered a flash loan attack. The attacker exploited the swap logic of the swapProfitFees() function (which is a public function that handles the contract's own tokens) to create an arbitrage opportunity and gained $21,500.

ChainCatcher message, CertiK Alert posted that the Hologram team has confirmed that the Holoworld AI X account has been compromised. Users are advised to be cautious about security and not to interact with this account.

ChainCatcher message, according to CertiK Alert on social media: "We discovered a vulnerability in the IPC token deployed 7 days ago. The attacker bypassed the flash loan protection mechanism and exploited the deflationary mechanism of burning tokens in the token pair, stealing approximately $590,000 in funds from the victim's token pair."

ChainCatcher news, according to official information, the Web3.0 security company CertiK has recently released the "Hack3d: 2024 Annual Security Report."The report shows that in 2024, the total losses in the Web3.0 sector due to security incidents exceeded $2.363 billion, with a year-on-year increase of 31.61%. A total of 760 security incidents occurred throughout the year, with phishing and private key leaks being the two main attack methods, causing losses of $1.05 billion and $855 million, respectively. Losses from phishing attacks accounted for nearly 50% of the total losses for the year, making it the biggest threat to industry security.

ChainCatcher news, according to CertiK Alert monitoring, Slurpycoin on BSC has suffered a flash loan attack, where the attacker manipulated the token price using a buyback mechanism and profited approximately $3,000 from sandwich arbitrage.

ChainCatcher message, according to Certik Alert monitoring, multiple deposits have been detected in Tornado.Cash, traceable to the $55 million phishing incident that occurred on August 21.The attacker with the address starting with eth:0x5d4 has exchanged the minted DAI for ETH and dispersed the funds.

ChainCatcher news, recently several large international virtual asset trading platforms have withdrawn their license applications in Hong Kong. Gu Ronghui, co-founder of CertiK and a member of the Web 3.0 Development Task Force, stated that the Hong Kong government should first regulate the existing stakeholders in the large virtual currency industry and encourage them to move towards compliance, which would have a more meaningful impact on the industry.Regarding the intention of Circle, the world's second-largest stablecoin issuer, to develop in Hong Kong, CertiK can assist in verifying the reserves of the stablecoin issuer Circle in other locations.

ChainCatcher message, according to CertiK monitoring, the Polter Finance attacker has split the stolen funds of 11.5 million FTM (approximately 8 million USD) into batches and transferred them to Arbitrum and Ethereum, then began depositing the funds into Tornado Cash.So far, 220 ETH (689,000 USD) has been deposited into Ethereum from an address starting with 0x141C.

ChainCatcher news, blockchain security audit company CertiK has issued a statement saying that it has recently received a large number of requests for help from users of the DEXX platform, who reported that their account assets had been emptied. After verification, CertiK confirmed that this security incident occurred on the Solana chain, which is not within CertiK's audit coverage.CertiK stated that the main reason for the incident was improper private key management on the DEXX platform, leading to the leakage of the official private key.It is reported that the large-scale theft of user assets on the DEXX trading platform has currently confirmed that the stolen funds have reached over 100 million yuan, and the hackers are still continuing their attacks. CertiK reminds all blockchain projects and users that the secure storage and management of private keys is key to ensuring asset safety.

ChainCatcher news, according to CertiK monitoring, the largest hacker losses so far in October are due to private key leaks. In the third quarter, most losses were caused by PKC and phishing. Since the beginning of this month, CertiK has recorded 3 major PKC incidents, with total losses of approximately 60 million dollars: of which Radiant Capital is about 55 million dollars, Tapioca DAO about 4.5 million dollars, and Burve Protocol about 500 thousand dollars.

ChainCatcher message, according to CertiK Alert monitoring, the price manipulation attack on the Base chain affected the unverified lending contract starting with 0x5c52. The attacker manipulated the prices of WETH and Sui, and obtained approximately 1 million dollars worth of tokens through excessive borrowing.

ChainCatcher news, according to Chainwire, CertiK Ventures has announced a $45 million investment plan to support promising and thriving Web3 projects. CertiK Ventures will help drive the development of high-potential projects, accelerating the integration of innovation and security in the Web3 ecosystem.In addition, CertiK has launched a series of free security tools, including Token Scan and Wallet Scan, to help users protect their assets.

ChainCatcher news, according to CertiK Alert monitoring, since the beginning of September, there have been 33 security incidents (including phishing), with losses of approximately 55 million dollars.In addition, during the same period in 2023, there were 18 incidents with losses of about 144 million dollars.

ChainCatcher message, according to CertiK Alert monitoring, the crypto sector lost approximately $300.6 million in August due to vulnerabilities, hacking attacks, and scams, of which about $10.3 million has been recovered. This is the second highest monthly loss so far in 2024.Among them:Exit Scam: approximately $800,000Flash Loan: approximately $1.2 millionContract Vulnerability Attacks: approximately $308.8 million

ChainCatcher news, reported by GlobeNewswire, the Web3 security agency CertiK has released the "Hack3d: Q2 2024 and First Half of 2024 Web3.0 Security Report."The report states that in Q2 2024, there were 184 on-chain security incidents, with losses amounting to $688 million, an increase of 37% compared to Q1 2024. Among these, phishing and private key leaks were the main causes of asset losses in the second quarter.The report also noted that in the first half of 2024, there were a total of 408 security incidents, with total losses reaching $1.19 billion.