Customized security toolsets along with leading security research team, We are contributing to a better future of Blockchain
HyperLab | 基于反洗钱平台对Deribit盗币事件的分析和追踪
事件分析： @DeribitExchange于11月2日发布了Deribit热钱包被盗的消息 此次事件涉事地址包括： 0x58F56615180A8eeA4c462235D9e215F72484B4A3 （Addr1） 0x8d08aAd4b2BAc2bB761aC4781CF62468C9ec47b4（Addr2） 0xb0606F433496BF66338b8AD6b6d51fC4D84A44CD（Addr3） 下文会分别以Addr1，Addr2和Addr3代替。 Hyperlab安全分析员通过HyperLab AML平台分析得出：11月1日 (11:57:11 PM +UTC)，Addr1地址先后分别转出6947 ETH， 0.65 ETH和20 ETH到Addr2地址。Addr2地址随后通过UniSwap进行了多次换币，换币总金额价值2143.94ETH，涉及的换币币种有USDC，WBTC， DAI和USDT。之后又分两笔金额分别为9080.18ETH和31.40ETH的交易转入地址Addr3。 截止发文时，被盗资产仍存储在Addr3地址中。事件发生第一时间，HyperL...
HyperLab | 基于反洗钱平台对Deribit盗币事件的分析和追踪
事件分析： @DeribitExchange于11月2日发布了Deribit热钱包被盗的消息 此次事件涉事地址包括： 0x58F56615180A8eeA4c462235D9e215F72484B4A3 （Addr1） 0x8d08aAd4b2BAc2bB761aC4781CF62468C9ec47b4（Addr2） 0xb0606F433496BF66338b8AD6b6d51fC4D84A44CD（Addr3） 下文会分别以Addr1，Addr2和Addr3代替。 Hyperlab安全分析员通过HyperLab AML平台分析得出：11月1日 (11:57:11 PM +UTC)，Addr1地址先后分别转出6947 ETH， 0.65 ETH和20 ETH到Addr2地址。Addr2地址随后通过UniSwap进行了多次换币，换币总金额价值2143.94ETH，涉及的换币币种有USDC，WBTC， DAI和USDT。之后又分两笔金额分别为9080.18ETH和31.40ETH的交易转入地址Addr3。 截止发文时，被盗资产仍存储在Addr3地址中。事件发生第一时间，HyperL...
跨链 DEX 聚合器 Transit Swap 攻击分析
10月2日，跨链 DEX 聚合器 Transit Swap 遭受攻击，导致大量用户的资金从钱包中被取出，预计损失超 2100 万美元。Transit Finance称，各方安全公司和项目组仍在继续追踪黑客事件，并通过邮件、链上等方式与黑客进行沟通。项目组正在抓紧收集被盗用户的具体数据，制定具体的返还方案。同时团队将继续追回黑客被盗资产的剩余资产，并将其归还给丢失的用户。截止发稿前，黑客已经归还约70%的资产。黑客地址：0x75F2abA6a44580D7be2C4e42885D4a1917bFFD46 Hyperlab 安全实验室根据链上交易进行分析，此次攻击发生的要原因在于 Transit Swap 协议在进行代币兑换时并未对用户传入的数据进行严格检查，导致了任意外部调用的问题。 具体来说，用户在用Transit Swap进行兑换时，会调用一个代理合约(0x8785bb8deae13783b24d7afe250d42ea7d7e9d72)。这个代理合约会根据代币的种类选择路径。紧接着路由桥合约（0x0B47275E0Fe7D5054373778960c99FD24F59ff52...
跨链 DEX 聚合器 Transit Swap 攻击分析
10月2日，跨链 DEX 聚合器 Transit Swap 遭受攻击，导致大量用户的资金从钱包中被取出，预计损失超 2100 万美元。Transit Finance称，各方安全公司和项目组仍在继续追踪黑客事件，并通过邮件、链上等方式与黑客进行沟通。项目组正在抓紧收集被盗用户的具体数据，制定具体的返还方案。同时团队将继续追回黑客被盗资产的剩余资产，并将其归还给丢失的用户。截止发稿前，黑客已经归还约70%的资产。黑客地址：0x75F2abA6a44580D7be2C4e42885D4a1917bFFD46 Hyperlab 安全实验室根据链上交易进行分析，此次攻击发生的要原因在于 Transit Swap 协议在进行代币兑换时并未对用户传入的数据进行严格检查，导致了任意外部调用的问题。 具体来说，用户在用Transit Swap进行兑换时，会调用一个代理合约(0x8785bb8deae13783b24d7afe250d42ea7d7e9d72)。这个代理合约会根据代币的种类选择路径。紧接着路由桥合约（0x0B47275E0Fe7D5054373778960c99FD24F59ff52...
Cross-Language Android Permission Specification
ABSTRACT TheAndroidsystemmanagesaccesstosensitiveAPIsbypermission enforcement. An application (app) must declare proper permissions before invoking specific Android APIs. However, there is no oficial documentation providing the complete list of permission-protected APIs and the corresponding permissions to date. Researchers have spent significant efforts extracting such API protection mapping fromtheAndroidAPIframework,whichleveragesstaticcodeanaly-sistodetermineifspecificpermissionsarerequir...
Cross-Language Android Permission Specification
ABSTRACT TheAndroidsystemmanagesaccesstosensitiveAPIsbypermission enforcement. An application (app) must declare proper permissions before invoking specific Android APIs. However, there is no oficial documentation providing the complete list of permission-protected APIs and the corresponding permissions to date. Researchers have spent significant efforts extracting such API protection mapping fromtheAndroidAPIframework,whichleveragesstaticcodeanaly-sistodetermineifspecificpermissionsarerequir...
Fuzzing: A Survey for Roadmap
XIAOGANG ZHU, Swinburne University of Technology, Australia SHENG WEN∗, Swinburne University of Technology, Australia SEYIT CAMTEPE, CSIRO Data61, Australia YANG XIANG, Swinburne University of Technology, Australia Fuzz testing (fuzzing) has witnessed its prosperity in detecting security flaws recently. It generates a large number of test cases and monitors the executions for defects. Fuzzing has detected thousands of bugs and vulnerabilities in various applications. Although effective, there...
Fuzzing: A Survey for Roadmap
XIAOGANG ZHU, Swinburne University of Technology, Australia SHENG WEN∗, Swinburne University of Technology, Australia SEYIT CAMTEPE, CSIRO Data61, Australia YANG XIANG, Swinburne University of Technology, Australia Fuzz testing (fuzzing) has witnessed its prosperity in detecting security flaws recently. It generates a large number of test cases and monitors the executions for defects. Fuzzing has detected thousands of bugs and vulnerabilities in various applications. Although effective, there...
Snipuzz: Black-box Fuzzing of IoT Firmware via Message Snippet Inference
ABSTRACT The proliferation of Internet of Things (IoT) devices has made people’s lives more convenient, but it has also raised many security concerns. Due to the difficulty of obtaining and emulating IoT firmware, in the absence of internal execution information, blackbox fuzzing of IoT devices has become a viable option. However, existing black-box fuzzers cannot form effective mutation optimization mechanisms to guide their testing processes, mainly due to the lack of feedback. In addition,...
Snipuzz: Black-box Fuzzing of IoT Firmware via Message Snippet Inference
ABSTRACT The proliferation of Internet of Things (IoT) devices has made people’s lives more convenient, but it has also raised many security concerns. Due to the difficulty of obtaining and emulating IoT firmware, in the absence of internal execution information, blackbox fuzzing of IoT devices has become a viable option. However, existing black-box fuzzers cannot form effective mutation optimization mechanisms to guide their testing processes, mainly due to the lack of feedback. In addition,...
