Back to Blog

Monthly Security Review: October 2024

November 1, 2024

Security at a Glance 👀

Radiant: $58M

On October 16th, Radiant Capital suffered a security breach on Arbitrum and BSC, resulting in losses exceeding $50M. While the complete technical details of the exploit remain undisclosed, the protocol team confirmed the compromise of several developer wallets as the attack vector.

Read Radiant’s post-mortem report for more details

Unknown: $1.4M

On October 24th, an unknown Compound-fork protocol was exploited on Base, resulting in a loss of approximately $1.4m. While the affected contracts were unverified at the time of the incident, our analysis indicates that this attack was probably due to vulnerable price dependency on Uniswap spot price.

View the complete attack transaction list via Phalcon's Security Incidents

EGA: $554K

On October 5th, an unverified contract was exploited on BSC, causing a loss of $554k. The root cause was the lack of slippage protection in the function that buys EGA tokens from Pancake pairs, susceptible to price manipulation attacks.

Track the attack details using Phalcon Explorer

P719: $315K

On October 11th, P719 token was exploited on BSC, resulting in a loss of $315k. While the compromised contract was unverified, we suspect the root cause was a flawed token burn mechanism within the P719 trading functionality.

Subscribe to Phalcon for Real-Time Alerts and Automated Actions.

Block Hack Before It's Executed to Prevent Any Loss!

Learn More | Book a Demo

BlockSec at Better Web3 Forum 2024 🔥

Watch the speech by BlockSec co-founder Yajin Zhou at the Better Web3 Forum 2024 to learn about the latest security trends, lessons from past incidents, why auditing alone is insufficient, and what project parties can do to ensure protocol security.

Sign up for the latest updates
Tether Freezes $6.76M USDT Linked to Iran's IRGC & Houthi Forces: Why On-Chain Compliance is Now a Geopolitical Battlefield
Security Insights

Tether Freezes $6.76M USDT Linked to Iran's IRGC & Houthi Forces: Why On-Chain Compliance is Now a Geopolitical Battlefield

Looking ahead, targeted freezing events like this $6.76M USDT action will only become more common. On-chain data analysis is improving. Stablecoin issuers are also working closely with regulators. As a result, hidden illicit financial networks will be exposed.

Weekly Web3 Security Incident Roundup | Mar 2 – Mar 8, 2026
Security Insights

Weekly Web3 Security Incident Roundup | Mar 2 – Mar 8, 2026

During the week of March 2 to March 8, 2026, seven blockchain security incidents were reported with total losses of ~$3.25M. The incidents occurred across Base, BNB Chain, and Ethereum, exposing critical vulnerabilities in smart contract business logic, token deflationary mechanics, and asset price manipulation. The primary causes included a double-minting logic flaw during full token deposits that allowed an attacker to exponentially inflate their balances through repeated burn-and-mint cycles, a price manipulation vulnerability in an AMM-based lending market where artificially inflated vault shares created divergent price anchors to incorrectly force healthy positions into liquidation, and a flawed access control implementation relying on trivially spoofed contract interfaces that enabled attackers to bypass authorization to batch-mint and dump arbitrary tokens.

Weekly Web3 Security Incident Roundup | Feb 23 – Mar 1, 2026
Security Insights

Weekly Web3 Security Incident Roundup | Feb 23 – Mar 1, 2026

During the week of February 23 to March 1, 2026, seven blockchain security incidents were reported with total losses of ~$13M. The incidents affected multiple protocols, exposing critical weaknesses in oracle design/configuration, cryptographic verification, and core business logic. The primary drivers included oracle manipulation/misconfiguration that led to the largest loss at YieldBloxDAO (~$10M), a crypto-proof verification flaw that enabled the FOOMCASH (~$2.26M) exploit, and additional token design and logic errors impacting Ploutos, LAXO, STO, HedgePay, and an unknown contract, underscoring the need for rigorous audits and continuous monitoring across all protocol layers.