X-explore

This article is jointly published by X-explore and WuBlockchain. Abstract: Hundreds of ERC20 tokens are created daily, but more than 15% are fake tokens (we define fake tokens that are created quickly in a short period of time, attract ordinary users to buy them and end their entire life cycle). Based on our on-chain analysis, the daily profit from the fake tokens can reach 22.4 ETH. This article will be digging into the fake token industry, revealing the process of how the black groups are m...

This article is jointly published by X-explore and WuBlockchain. X-explore found that the attackers in the FTX&3commas API theft also attacked Binance US and Bittrex exchanges, stealing 1053ETH and 301ETH respectively. At present, the attack on Bittrex is still in progress, and it is suspected of using the NXT/BTC trading pair to attack.1. BackgroundIn order to help users and marketmakers to conduct high-frequency & quantitative transactions, exchanges provide API interfaces for transaction, ...

Abstract: 近一周，0U 转账的链上地址投毒攻击愈演愈烈，截至12月2日，已经有超过37W地址被投毒，总计92个受害地址，被盗取金额超过164W USD。 本篇文章，X-explore 对攻击态势进行了全面分析，对攻击者进行了链上溯源，同时也深入分析了攻击的实现方式。 我们呼吁钱包APP加强风险提示，普通用户在转账时谨防此类攻击。因为我们注意到UTC时间11月2日10点38分，有一位链上用户损失惨重，近100万美金因投毒而被转到黑客地址。本文由 X-explore 与吴说区块链联合发布。1. 背景近期，我们的链上风险监控发现ETH、BSC链上频繁出现 0u 转账现象，以下图bsc链的交易数据为例，受害者A发出一笔正常交易将452 BSC-USD发给B后，会收到C转来的0 BSC-USD，同时，在同一笔交易hash内用户A自己也会不受控制的给C转0 BSC-USD（实现了“一来一回”的0 BSC-USD转账操作）用户交易列表出现的现象在社区中，很多用户不知所以然，担心自己的钱包私钥已经泄漏，攻击者正在窃取资产。2. 攻击意图其实遇到这种情况的用户不用紧张，大家的资产是安全的...

我们知道最近有个火爆的token，叫做XEN，只需要付出gas费就能铸造大量代币，那有没有办法让别人替我们支付gas费呢，最近就有一个黑客正在让 FTX 帮他付钱。漏洞原理：攻击准备阶段：10月10日，攻击者0x1d371CF00038421d6e57CFc31EEff7A09d4B8760在链上部署了攻击合约（如：0xCba9b1Fd69626932c704DAc4CB58c29244A47FD3）攻击阶段：FTX交易所出金热钱包地址（0xC098B2a3Aa256D2140208C3de6543aAEf5cd3A94）向攻击合约连续进行0.0035ETH左右的小额ETH转账，如下图所示：进一步查看交易详情，每次交易攻击合约均创建了1～3个子合约，这些子合约先进行XEN Token的Mint或Claim。最终这些合约会自我销毁。这些操作都由 FTX 热钱包地址支付 gas 费。攻击损失：截止目前，FTX交易所因为GAS窃取漏洞共损失了81+ ETH，黑客地址已获得超过1亿个XEN Token，并通过DoDo，Uniswap等去中心化交易所将部分XEN代币换成61个ETH，并入金...

This article is jointly published by X-explore and WuBlockchain. Conclusion: X-explore announces a Sybil attack warning. The Mycelium project has been suffering from large Sybil attacks since last month. More than 90% of the addresses of the NFT OG given by the Mycelium project on the Arbitrum chain are low quality address and more than 60% of addresses are considered as sybils.1. Project OverviewDomain: Defi / Dex Website: https://mycelium.xyz/ Chain: Arbitrum/ETH Participated Addresses: 236...

Conclusion: X-explore reports a sybil attack warning. The XEN Crypto project is suffering from large sybil attacks. The total number of sybil addresses is recognized 335K by us, and the sybil attacks are becoming increasingly severe. On October 12, around 80% of participating addresses are sybil addresses.1. Project OverviewThe project XEN Crypto founded by Jack Levin, who claims to be Google's 21st employee, has aroused a trendy topic in recent days. XEN project pioneering Proof of Part...

As we all know, there is a hot token called XEN. The participants just pay the gas fee that can return with the token XEN. So is there a way to get someone else to pay the gas fee for us instead? The answer is YES , recently we found a hacker who was using FTX to pay for him.Vulnerability PrincipleAttack preparation phase:On October 10, attacker 0x1d371CF00038421d6e57CFc31EEff7A09d4B8760 deployed the attack contract on the chain (e.g., 0xCba9b1Fd69626932c704DAc4CB58c29244A47FD3)Attack Phase:T...

This article is jointly published by X-explore and WuBlockchain.Abstract:The address poisoning attack on $0 USD transfers is savage in recent weeks. As of December 2, more than 340K addresses have been poisoned on the chain, totaling 99 victim addresses and more than 1.64M USD stolen. In this article, X-explore provides a comprehensive analysis of the attack landscape, traces the attackers on-chain, and also provides an in-depth analysis of how the attack is implemented. We would like to appe...

概述：X-explore 对所有充值到币安的 APTOS 进行了资金来源分析，其中 65% 资金为女巫地址入金，累积超过630W APT Token，按照8U计算，获利或超过5000万，这带来了严重抛压，造成币价一路走低。与此同时，我们分析了入金总量与币价的关联关系。本文由 X-explore 与吴说区块链联合发布。一、项目介绍新公链的领跑者，模块化的公链项目 Aptos 近日正式上线主网。Aptos 是由原 Facebook/Libra 团队成员组织发起的 Layer1 公链项目，其目标是构建一个最安全、最具扩展性的 Layer1 区块链，目前 Aptos 生态已有两百多个项目搭建。今年3月获得a16z、FTX Ventures、Jump Crypto、Multicoin Capital、Three Arrows Capital、Binance Labs等参投的两轮共3.5亿美元融资。 昨日（10月18日）Aptos官方公布了空投方案：完成Aptos激励测试网申请，或铸造 APTOS:ZERO 测试网 NFT 的用户有资格申领 APT 代币。总共 20,076,150 枚 AP...

This article is jointly published by X-explore and WuBlockchain.BackgroundIn the world of Web2, the underground industry lasts for years. After years of research and analysis, attacking methods of the underground industry can be divided into multi-IP address, multi-device, and multi-account attacks. There are some commonly used tools such as modem pool, multi-device opening tools, and auto captcha solver. With the rise of Web3, due to its anonymity and transparency, the underground industry q...

Overview: X-explore analyzed the source of funds for all APTOS topping up to Binance. We found that 65% of the funds were deposited to the sybil address, accumulating over 6.3M APT Token, or over $50M in profit based on $8. This brought about severe selling pressure, causing the price of the currency to go all the way down. Meanwhile, we analyzed the correlation between the total amount of deposits and the coin price. This article is jointly published by X-explore and WuBlockchain.Project Int...

本文由 X-explore 与吴说区块链联合发布。背景：在 Web2 的世界中，黑产行之有年，黑产的手法在经过多年的研究以及沉淀后，不外乎可分为：多IP地址、多设备以及多账号的攻击。常使用的工具如：猫池、多开工具以及打码平台。 随着 Web3 的兴起，由于其匿名化以及完全公开的特性，黑产很快的就盯上了这块大饼。据 HACK 3D的研究表明，在 2022 的上半年 Web3 项目就有将近 20 亿美元被黑客攻击。X-Explore 团队想在此为大家揭秘一些女巫团伙常用的工具，为大家刻画 Web3 黑产的轮廓。女巫使用合约目的：提高效率: 有些项目活动是需要与多个合约交互或是持有多种 Token，因此女巫可以透过写合约的方式来将这些操作自动化，提高自己参与项目活动的效率降低成本: 以太坊在 EIP-1559 协议中引入了交易基础费，每一笔交易都由基础费以及矿工小费所组成，因此链上使用合约批量的进行一些操作能够节省手续费避免链上追踪: 随着女巫以及科学家在各类活动的猖獗，越来越多项目方会在空投之前进行女巫的过滤，随着对坑的升级，女巫也会制造或使用各种合约来避免直接与项目合约交互，这种手...