Beyond Secure Storage, Part 2: Implementing Wallet Cryptography Securely

Can an attacker recover a private key without reading its protected copy? Part 2 of Beyond Secure Storage examines six incidents in which weak randomness, entropy loss, or signing nonce flaws made keys predictable or recoverable. It derives implementation requirements for key generation and signing, then explains how payment institutions can assess them through code review and testing of the deployed system.

How Crypto Funds Get Stolen Without Private Key Theft

Secure private keys do not guarantee secure payments. Drawing on real incidents involving BigONE, Bybit, Resolv, Binance, Drift, and Chainflip, BlockSec examines how attackers exploit weaknesses across the crypto payment lifecycle. Discover risks in payment authorization, transaction construction, signing permissions, and settlement—and what payment institutions need to assess to protect funds.

BlockSec Phalcon Wins Best Digital Asset Monitoring & Surveillance Solution at Regulation Asia Awards 2026

BlockSec Phalcon has won Best Digital Asset Monitoring & Surveillance Solution at the 9th Regulation Asia Awards for Excellence 2026. Discover how Phalcon Compliance connects risk screening, continuous monitoring, investigations, and reporting to help institutions manage AML/CFT risks and strengthen digital asset compliance.

Beyond Secure Storage, Part 1: Designing Secure Payment and Signing Workflows

How can an unauthorized operation obtain a valid signature without the attacker stealing the private key? Part 1 of Beyond Secure Storage uses incidents including Bitget, Bybit and Binance to examine authorization failures across payment requests, transaction construction, signing, execution and settlement. It derives design principles for preventing unauthorized operations and limiting losses, then explains how reviews, audits, penetration tests and exercises can verify those protections.

How BlockSec’s Payment Security Solution Helps Institutions Stay Secure in the AI Era

Discover how BlockSec helps payment institutions protect funds, secure data, and strengthen resilience through security assessments, testing, and continuous monitoring.

NEAR Intents Exploit: Refund Flaw and Security Lessons

The NEAR Intents exploit used oversized refund events to preserve internal balances after the deposited assets were returned. This analysis reconstructs the receipt flow and seven BNB Chain withdrawals totaling 3,865,021 USDT, distinguishes those outflows from the project's reported full recovery, and outlines security considerations for developing and auditing NEAR smart contracts.

~$5.57M Lost: X100 Freezer, NEM Exploits | BlockSec Weekly

This weekly report covers two security incidents on Ethereum and BNB Chain from October 19 to October 25, 2026. It examines a flash-loan-funded governance takeover of X100 Freezer and a tax-settlement flaw affecting a NEM token liquidity pool on BNB Chain. Estimated losses within the report's scope total approximately $5.57M: ~$4.75M from the representative X100 transaction and ~$820K from the NEM pool incident. The total excludes separately reported follow-on X100 extractions.

~$3.87M Lost: Autheo Network, UNCX Hacks | BlockSec Weekly

This weekly report covers 3 security incidents from October 12 to October 18, 2026, with approximately $3.87M in total estimated losses. Autheo Network suffered a ~$1.76M private key compromise, Qubic Wallet lost ~$1.30M due to weak seed generation, and UNCX Network's Smart Token Vesting V2 contracts suffered an ~$807K accounting error across Ethereum, BNB Chain, Base, and Robinhood Chain. The highlighted UNCX analysis explains how a flawed aggregate share calculation mixed vesting tranches created at different token-to-share ratios and enabled excess withdrawals from shared pools.

What Is SEAL Certification? Operational Security Assurance for Crypto

SEAL certification provides independent assurance of crypto operational security within an agreed scope. Explore its six modules, evidence requirements, certification limits, and BlockSec's assessment process.

~$542K Lost: MakerDaoBot Exploit | BlockSec Weekly

This report covers 1 security incident on Ethereum from 2026/10/05 - 2026/10/11, with an estimated loss of approximately $542K. An attack contract deployed a malicious adapter and passed it to a MakerDaoBot function that lacked access control, causing the bot to grant the adapter permission over its internal MakerDAO balances. The adapter settled four legacy ETH-A auctions and converted 200 units of ETH-A collateral to WETH; the attack contract unwrapped it and sent 200 ETH to the attacker.

~$418M Lost: Bitget, NEAR Intents Exploits | BlockSec Weekly

This biweekly security report records eight incidents from September 21 to October 4, 2026, with approximately $418.4M in losses across Ethereum, BNB Chain, Solana, Bitcoin, TRON, XRP Ledger, Zcash, Avalanche, NEAR, and related networks. Detailed analysis covers Bitget's $387.5M third-party security product vulnerability and NEAR Intents' $3.87M refund validation flaw and missing state rollback.

How to Visualize Crypto Money Flows

How to visualize crypto money flows: build a money flow graph, why flows beat spreadsheets for investigations, and how labels turn graphs into evidence.