Beosin is a leading global blockchain security brand co-founded by several professors from world-renowned universities. The team consists of 100+ security experts, including 20+ PhDs and postdocs. The core team members have accumulated over 20 years of experience in formal verification technology, cybersecurity, artificial intelligence, and big data mining technology. Beosin product series include smart contract audit service, blockchain platform audit service, smart contract detection produc...

Beosin is a leading global blockchain security brand co-founded by several professors from world-renowned universities. The team consists of 100+ security experts, including 20+ PhDs and postdocs. The core team members have accumulated over 20 years of experience in formal verification technology, cybersecurity, artificial intelligence, and big data mining technology. Beosin product series include smart contract audit service, blockchain platform audit service, smart contract detection produc...

BEOSIN has always been concerned about the security of NFT and aimed at providing relevant solutions. Immediately after Jay Chou’s NFT theft, BEOSIN used Beosin-Trace to carry out on-chain tracking analysis of the stolen NFT. The timeline of the incident and related address analysis are as follows.Timeline and path analysis of Jay’s stolen NFT2022-04-01 3:07:29 The phishing attacker transferred BAYC #3738 NFT from Jay's wallet address beginning with 0x71dE2148051A7544A082178B3e6A6DD1E0fE...

BEOSIN has always been concerned about the security of NFT and aimed at providing relevant solutions. Immediately after Jay Chou’s NFT theft, BEOSIN used Beosin-Trace to carry out on-chain tracking analysis of the stolen NFT. The timeline of the incident and related address analysis are as follows.Timeline and path analysis of Jay’s stolen NFT2022-04-01 3:07:29 The phishing attacker transferred BAYC #3738 NFT from Jay's wallet address beginning with 0x71dE2148051A7544A082178B3e6A6DD1E0fE...

It’s time for another monthly security recap! March 2022 has seen a significant increase in the number of various exploits in blockchain field compared to February, with over 30 typical security incidents reported by Beosin Alert — the blockchain situation awareness platform. The security risks exposed in DeFi reaches a record-high since the start of 2022. The Ronin exploit is probably the largest amount of funds involved in DeFi’s history, with over $600 million in losses. Other DeFi protoco...

It’s time for another monthly security recap! March 2022 has seen a significant increase in the number of various exploits in blockchain field compared to February, with over 30 typical security incidents reported by Beosin Alert — the blockchain situation awareness platform. The security risks exposed in DeFi reaches a record-high since the start of 2022. The Ronin exploit is probably the largest amount of funds involved in DeFi’s history, with over $600 million in losses. Other DeFi protoco...

On March 13, 2022, Beosin Eagle Eye reported that the Paraluni contract was hacked with a loss of about $1.7 million. Our security technical team has conducted a relevant analysis of this incident. #1 Overview Take the first attack transaction 0xd0b4a1d4964cec578516bd3a2fcb6d46cadefe1fea5a2f18eec4c0a496e696f9 as an example: Address list Attack address： 0x94bC1d555E63eEA23fE7FDbf937ef3f9aC5fcF8F Attack contract： 0x4770b5cb9d51EcB7AD5B14f0d4F2cEe8e5563645 ParaProxy： 0x633Fa755a83B015cCcDc451F82...

On March 13, 2022, Beosin Eagle Eye reported that the Paraluni contract was hacked with a loss of about $1.7 million. Our security technical team has conducted a relevant analysis of this incident. #1 Overview Take the first attack transaction 0xd0b4a1d4964cec578516bd3a2fcb6d46cadefe1fea5a2f18eec4c0a496e696f9 as an example: Address list Attack address： 0x94bC1d555E63eEA23fE7FDbf937ef3f9aC5fcF8F Attack contract： 0x4770b5cb9d51EcB7AD5B14f0d4F2cEe8e5563645 ParaProxy： 0x633Fa755a83B015cCcDc451F82...

The pop star Jay Chou revealed on Instagram that his Bored Ape NFT been stolen by phishing website on Friday.He initially thought is was an April Fool’s joke, and then checked and realized “it’s really gone”. Bored Ape (@BoredApeYC) then confirmed on its official twitter that its discord account has been hacked, reminding users not clicking on any links.How did Jay Chou’s NFT get transferred out?After a look by the Beosin’s technical team, we found that Jay Chou signed the wallet address star...

The pop star Jay Chou revealed on Instagram that his Bored Ape NFT been stolen by phishing website on Friday.He initially thought is was an April Fool’s joke, and then checked and realized “it’s really gone”. Bored Ape (@BoredApeYC) then confirmed on its official twitter that its discord account has been hacked, reminding users not clicking on any links.How did Jay Chou’s NFT get transferred out?After a look by the Beosin’s technical team, we found that Jay Chou signed the wallet address star...

Beosin Research Series: Are Decentralized Exchanges (DEX) Safe Enough?Decentralized exchanges (DEX) are a type of cryptocurrency exchange which allows for direct peer-to-peer cryptocurrency transactions. Our previous blog has analyzed the token-level issues, today we would like to talk about security issues that may arise in DEX’s process of swapping tokens. There are mainly two types of security issues in DEX: (1) Security issues within DEX itself. (2) Security issues that arise when interac...

Beosin Research Series: Are Decentralized Exchanges (DEX) Safe Enough?Decentralized exchanges (DEX) are a type of cryptocurrency exchange which allows for direct peer-to-peer cryptocurrency transactions. Our previous blog has analyzed the token-level issues, today we would like to talk about security issues that may arise in DEX’s process of swapping tokens. There are mainly two types of security issues in DEX: (1) Security issues within DEX itself. (2) Security issues that arise when interac...