On August 1, 2022, a simple 0x00 initialization bug in Nomad's cross‑chain bridge let over 300 addresses copy‑paste a transaction and drain nearly $190 million in hours, illustrating how a missed audit can trigger a massive, decentralized exploit and subsequent legal fallout.
This article explains the cryptographic mechanisms—ECDSA, secp256k1 elliptic curve operations, and Keccak‑256 hashing—that make Ethereum addresses one‑way functions, ensuring that deriving a private key from a public address is computationally infeasible.
This step‑by‑step guide explains how to safely export a MetaMask private key, import it into the Clef signing tool for a local private Ethereum chain, and execute transactions while emphasizing critical security warnings and best‑practice precautions.
This article outlines Ant Group's Web3 multi‑dimensional intelligent anti‑money‑laundering platform, detailing common cryptocurrency risk types, regulatory compliance challenges, and the platform's real‑time monitoring, contract scanning, and graph‑based risk tagging capabilities for proactive detection and rapid response.
The 2024 IEEE‑OPPO Pan‑Terminal Security Forum, held on March 29 at Xi'an Jiaotong University, gathers leading researchers to discuss AI, IoT, blockchain, and smart contract security, presenting cutting‑edge threats, defense strategies, and future technical capabilities for intelligent terminal products.
The article reviews the rapid rise of Web3, outlines the severe security challenges and economic losses caused by attacks on cross‑chain bridges, DeFi platforms, and smart contracts, and details Ant Group's Sky Dome Lab research on platform, contract, and client‑side defenses along with future AI‑driven initiatives.
This article provides a comprehensive technical analysis of the March 2023 Euler Protocol flash‑loan attack, describing the vulnerability in the donateToReserves function, step‑by‑step attack execution, on‑chain data, reproduced exploit code, simulation of attack parameters, and broader security implications for DeFi platforms.
This study investigates the capability of ChatGPT, a large language model, to detect common smart‑contract vulnerabilities, evaluates its performance against traditional tools across multiple datasets, and discusses its strengths, limitations, and future potential in blockchain security auditing.
The article explains how data‑dependent branches in SM2 elliptic‑curve implementations leak secret keys via power, EM, and cache side‑channels, compares point addition and doubling, critiques Montgomery ladder timing leaks, and proposes a branch‑free select‑based scalar multiplication to achieve constant‑time security at some performance cost.
CNCC2021’s technical forum, held on December 17, 2021, gathered leading academics and industry experts to discuss privacy computing, secure multiparty computation, AI-driven cybersecurity, single sign‑on privacy, Yao’s garbled circuits, and blockchain smart‑contract security, highlighting emerging risks and solutions for digital transformation.
The article dissects the sophisticated DoS attack that let a player win the Fomo3D Ethereum game by flooding the transaction pool with high‑gas‑price garbage calls, detailing the game mechanics, Ethereum gas economics, block‑by‑block execution, and the extensive technical preparation required.
The article examines low‑resource Eclipse attacks on Ethereum’s peer‑to‑peer network, compares them with Bitcoin’s Eclipse attacks, discusses the 2018 Geth v1.8.1 patch, and highlights the need for deeper research into blockchain infrastructure security.
The 360 Vulcan team uncovered high‑risk EOS blockchain vulnerabilities that allow remote code execution on nodes, enabling attackers to control the entire network, and reported them to EOS officials for urgent remediation before the platform goes live.
