Nov 18 2024

BlockSec and OKX Explorer Partner to Enhance On-Chain Data Security and Compliance

Leading blockchain security firm BlockSec has entered into a strategic partnership with OKX Explorer, one of the top blockchain explorers globally. This collaboration focuses on blockchain data interoperability, product integration, and API enhancements. By leveraging combined strengths, BlockSec and OKX Explorer aim to provide users with improved tools for blockchain analysis, fostering a safer and more transparent ecosystem.

About BlockSec

BlockSec is a full-stack Web3 security service provider. The company is committed to enhancing security and usability for the emerging Web3 world in order to facilitate its mass adoption. To this end, BlockSec provides smart contract and EVM chain security auditing services, the Phalcon platform for security development and blocking threats proactively, the MetaSleuth platform for fund tracking and investigation, and MetaSuites extension for web3 builders surfing efficiently in the crypto world.

For more information about BlockSec , please visit https://blocksec.com/

About OKX Explorer

OKX Explorer is a leading blockchain search engine and Web3 analytics platform that provides extensive coverage of over 55 public chains, including BTC and EVM L1 and L2 chains, heterogeneous chains like Tron and Solana. It provides comprehensive onchain data, developer tools, robust OpenAPI and Explorer-as-a-Service solutions.

For more information about OKX Explorer , please visit https://www.okx.com/web3/explorer

Feb 9 2026

#1 Cetus Incident: One Unchecked Shift Drains $223M in the Largest DeFi Hack of 2025

Cetus Protocol, the largest concentrated-liquidity DEX on Sui, was exploited on May 22, 2025, resulting in an estimated ~$223M loss across multiple liquidity pools. The attacker leveraged a flaw in checked_shlw(), a custom overflow-prevention helper used in fixed-point u256 math, where an incorrect constant and comparison failed to block unsafe left shifts and caused silent truncation of high bits during liquidity delta calculations. By crafting specific liquidity and tick/price-range parameters, the exploit made required deposits appear near-zero while minting an oversized liquidity position, which was later withdrawn to drain real pool reserves.

Feb 9 2026

#2 Bybit Incident: A Web2 Breach Enables the Largest Crypto Hack in History

The largest crypto hack ever, the February 21, 2025 Bybit breach stole about $1.5B after attackers used social engineering to compromise a Safe{Wallet} workflow, injected malicious JavaScript into an AWS S3 bucket, tampered with the transaction signing process, and upgraded Bybit’s Safe{Wallet} contract to a malicious implementation that drained funds across multiple chains.

Feb 4 2026

Weekly Web3 Security Incident Roundup | Jan 25 – Feb 1, 2026

During the week of January 25 to February 1, 2026, six blockchain security incidents were reported with total losses of ~$18.05M. These involved improper input validation, token design flaws, key compromises, and business logic errors across DeFi protocols on multiple chains. The primary causes included unchecked user inputs enabling arbitrary calls, flawed burn mechanisms allowing price manipulation, compromised developer tools, and missing solvency checks in lending functions.