Back to Blog

Monthly Security Review: October 2024

November 1, 2024
2 min read

Security at a Glance 👀

Radiant: $58M

On October 16th, Radiant Capital suffered a security breach on Arbitrum and BSC, resulting in losses exceeding $50M. While the complete technical details of the exploit remain undisclosed, the protocol team confirmed the compromise of several developer wallets as the attack vector.

Read Radiant’s post-mortem report for more details

Unknown: $1.4M

On October 24th, an unknown Compound-fork protocol was exploited on Base, resulting in a loss of approximately $1.4m. While the affected contracts were unverified at the time of the incident, our analysis indicates that this attack was probably due to vulnerable price dependency on Uniswap spot price.

View the complete attack transaction list via Phalcon's Security Incidents

EGA: $554K

On October 5th, an unverified contract was exploited on BSC, causing a loss of $554k. The root cause was the lack of slippage protection in the function that buys EGA tokens from Pancake pairs, susceptible to price manipulation attacks.

Track the attack details using Phalcon Explorer

P719: $315K

On October 11th, P719 token was exploited on BSC, resulting in a loss of $315k. While the compromised contract was unverified, we suspect the root cause was a flawed token burn mechanism within the P719 trading functionality.

Get Started with Phalcon Security

Detect every threat, alert what matters, and block attacks.

Try now for free

BlockSec at Better Web3 Forum 2024 🔥

Watch the speech by BlockSec co-founder Yajin Zhou at the Better Web3 Forum 2024 to learn about the latest security trends, lessons from past incidents, why auditing alone is insufficient, and what project parties can do to ensure protocol security.

Sign up for the latest updates
How Crypto Funds Get Stolen Without Private Key Theft
Case Studies

How Crypto Funds Get Stolen Without Private Key Theft

Secure private keys do not guarantee secure payments. Drawing on real incidents involving BigONE, Bybit, Resolv, Binance, Drift, and Chainflip, BlockSec examines how attackers exploit weaknesses across the crypto payment lifecycle. Discover risks in payment authorization, transaction construction, signing permissions, and settlement—and what payment institutions need to assess to protect funds.

BlockSec Phalcon Wins Best Digital Asset Monitoring & Surveillance Solution at Regulation Asia Awards 2026
Features

BlockSec Phalcon Wins Best Digital Asset Monitoring & Surveillance Solution at Regulation Asia Awards 2026

BlockSec Phalcon has won Best Digital Asset Monitoring & Surveillance Solution at the 9th Regulation Asia Awards for Excellence 2026. Discover how Phalcon Compliance connects risk screening, continuous monitoring, investigations, and reporting to help institutions manage AML/CFT risks and strengthen digital asset compliance.

Beyond Secure Storage, Part 1: Designing Secure Payment and Signing Workflows
Security Insights

Beyond Secure Storage, Part 1: Designing Secure Payment and Signing Workflows

How can an unauthorized operation obtain a valid signature without the attacker stealing the private key? Part 1 of Beyond Secure Storage uses incidents including Bitget, Bybit and Binance to examine authorization failures across payment requests, transaction construction, signing, execution and settlement. It derives design principles for preventing unauthorized operations and limiting losses, then explains how reviews, audits, penetration tests and exercises can verify those protections.

Monthly Security Review: October 2024