Incident Response

A practical guide for DeFi users, community managers, and security teams on defending against fake ads and phishing, dissecting recent Uniswap-targeted scams and confusing breach claims like the IoTeX kerfuffle.

A deep-dive into Bithumb’s accidental distribution of roughly 620,000 BTC, the steps that recovered 99.7% of the coins, and practical lessons for institutional counterparties and compliance teams on custody and operational controls.

A technical post-mortem of the Truebit (TRU) exploit that allowed minting via a pricing-oracle flaw and led to a 8,535 ETH ($26M) liquidity drain and near-total collapse of TRU. This article breaks down the exploit mechanics, timeline, contagion risks for AMMs and pools, and a practical remediation checklist for DeFi teams.

A technical investigation into two recent incidents — the $2.7M drain affecting Ribbon/Aevo and the Zerobase front-end takeover — with practical defensive guidance for DeFi teams and advanced users.

A technical post‑mortem of the Upbit Solana hot‑wallet breach that drained roughly $36–38.8M: what happened, why Solana’s architecture mattered, how exchanges responded, and the controls traders and custodians should insist on.