Blockchain Threat Intelligence

Articles

BlockThreat - Week 20, 2025

1 month ago | newsletter.blockthreat.io | Peter Kacherginsky

This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts
BlockThreat - Week 18, 2025

1 month ago | newsletter.blockthreat.io | Peter Kacherginsky

Greetings!Just a few minor exploits this week, with net losses under $100K. Quiet weeks like these are rare—but they give us the space to explore broader trends in the industry. One such trend is particularly concerning: two infinite mint vulnerabilities were recently patched by the Solana and Scroll chains. While blockchain-wide exploitation is rare, its potentialimpact is devastating.
BlockThreat - Week 10, 2025

Mar 10, 2025 | newsletter.blockthreat.io | Peter Kacherginsky

This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts
BlockThreat - Week 2, 2024

Jan 15, 2024 | newsletter.blockthreat.io | Peter Kacherginsky

This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts
BlockThreat - Week 2, 2024

Jan 15, 2024 | newsletter.blockthreat.io | Peter Kacherginsky

Greetings!Mass X account compromises continue with SEC getting hacked resulting in volatile market movements. The reported attack vector was lack of 2FA and a sim-swapped phone number associated with the account. If only they followed the Twitter Security Self-Audit by the good folks at Security Alliance. Did you? Solana network is experiencing a rise in drainer and airdrop phishing attacks all too familiar in the EVM world.
BlockThreat - Week 52, 2023

Jan 4, 2024 | newsletter.blockthreat.io | Peter Kacherginsky

Greetings!Crypto spring is back. Unfortunately that means exploiters, scammers, and other criminal elements are about to refocus their efforts on the blockchain industry. The number of compromises is starting to really pick up going from just 61 in 2023 ‘Q1 to 104 in 2023 ‘Q4. We are still far behind in total value lost from the same quarter last year ($641M vs. $1.37B), but as asset valuations pick up this number will follow.
BlockThreat - Week 51, 2023

Dec 29, 2023 | newsletter.blockthreat.io | Peter Kacherginsky

This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts
BlockThreat - Week 51, 2023

Dec 29, 2023 | newsletter.blockthreat.io | Peter Kacherginsky

An interesting case study on vulnerability disclosure. CertiK announced a critical remote code execution vulnerability in OKX iOS Wallet on the same day the patch became available. How long does it take for Apple users to apply a patch? Let’s take Safari browser as an example. Safari 17.2 was released on December 11 which also includes a patch for an arbitrary code execution vulnerability.
BlockThreat - Week 49, 2023

Dec 17, 2023 | newsletter.blockthreat.io | Peter Kacherginsky

This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts
BlockThreat - Week 48, 2023

Dec 14, 2023 | newsletter.blockthreat.io | Dmitri Zakharov |Peter Kacherginsky

Greetings!A relatively quiet week with $1.8M losses across 13 incidents. Malicious governance proposal attacks continue with two more projects hit within days of each other. Velodrome/Aerodrome Dapps were DNS hijacked twice serving as a great reminder that discount domain registrar, Porkbun, have no business managing multi-million business domains. Fulcrum is back from the dead with a price oracle manipulation netting an attacker $200K.