Back to Blog

Phalcon's 2023 Year-End Recap

Phalcon
January 1, 2024

In 2023, Web3 harbors not just aspirations for technological breakthroughs but also grapples with security challenges of unprecedented scale. The year also witnesses the transformation of Phalcon from a transaction explorer to a comprehensive security suite. Phalcon now covers the entire spectrum of protocol security, from pre-launch testing, post-launch monitoring and attack blocking, to post-incident analysis.

Through the story of Phalcon, let's explore the relentless efforts made by BlockSec to advance Web3 security in 2023.

Phalcon's Security Philosophy: Go Beyond Code Audits πŸ€”πŸ’‘

Since the very foundation of BlockSec, our standpoint has remained consistent - code audits alone are inadequate to safeguard against the ever-present security risks in the Web3 dark forest (although we do a great job at code audits). Once a project is live, proactive defenses and swift response mechanisms become critical.

Traditional attack monitoring systems alert us to threats, yet teams are often too slow or uncertain about how to respond effectively. We began to question: How could we standardize our incident response capabilities to better assist a wider range of projects? This led to the creation of BlockSec Phalcon, a system designed to automatically block attacks.

In February of this year, when the Platypus protocol was under attack, BlockSec Phalcon helped recover $2.4 million in potential losses.

A month later, the system once again proved its worth by intercepting an attempt on Paraspace, saving an estimated $5 million. πŸ›‘οΈπŸ’°

November marked a milestone with the introduction of BlockSec Phalcon at the Devconnect conference in Istanbul, a testament to our two years of dedicated refinement. The system stands out as the first Web3 security product with the ability to automatically block hacks.

Our Mission: Advancing Web3 Security πŸš€

Time and again, we've been approached by project teams and users seeking assistance after hacks and phishing attempts, which solidified our determination to help elevate security awareness in the Web3 community.

This year, we participated in a series of events, including the DeFi Security Summit, TOKEN 2049, Devconnect, ETHBerlin, and ACM CCS. We shared insights on the susceptibility of Web3 to hacks, underscored the significance of proactive defense, discussed incident response strategies, and introduced practical security tools.

Additionally, we've initiated the πŸ† BlockSec Blockchain Security Award πŸ†, a three-year scholarship to honor exceptional students at PolyU pursuing a Master's degree in blockchain technology. In doing so, we aim to assist the industry in cultivating a greater number of qualified security professionals and developers with robust security qualifications. πŸŽ“

As a security company, we consider it our responsibility and vision to nurture talent and advance blockchain security, contributing to the industry's robust growth.

Looking Forward

As the new year unfolds, we are dedicated to the pursuit of innovation, with a focus on developing Phalcon into a more practical and well-rounded security product. We also commit to continually sharing our insights and vision for security with the wider Web3 community.

Happy New Year in advance! πŸŽ‰

May your Web3 journey in the new year be prosperous and smooth.

May the coming year bring you all health and happiness. πŸ₯³

Sign up for the latest updates
FATF’s New Stablecoin Report Signals a Shift to Secondary-Market Compliance
Knowledge

FATF’s New Stablecoin Report Signals a Shift to Secondary-Market Compliance

BlockSec interprets FATF’s March 2026 report on stablecoins and unhosted wallets, explains why supervision is shifting toward secondary-market P2P activity, breaks down the report’s main recommendations and red flags, and shows how on-chain monitoring, screening, and cross-chain tracing can help issuers and VASPs respond with stronger, more effective compliance controls.

Weekly Web3 Security Incident Roundup | Mar 16 – Mar 22, 2026
Security Insights

Weekly Web3 Security Incident Roundup | Mar 16 – Mar 22, 2026

This BlockSec weekly security report covers seven DeFi attack incidents detected between March 16 and March 22, 2026, across Ethereum, BNB Chain, Polygon, and Polygon zkEVM, with total estimated losses of approximately $82.7M. The most significant event was the Resolv stablecoin protocol's infrastructure-key compromise, which led to over $80M in unauthorized USR minting and cross-protocol contagion across lending markets. Other incidents include a $2.15M donation attack combined with market manipulation on Venus Protocol, a $257K empty-market exploit on dTRINITY (Aave V3 fork), access control vulnerabilities in Fun.xyz and ShiMama, a weak-randomness exploit in BlindBox, and a redemption accounting flaw in Keom.

Weekly Web3 Security Incident Roundup | Mar 9 – Mar 15, 2026
Security Insights

Weekly Web3 Security Incident Roundup | Mar 9 – Mar 15, 2026

This BlockSec weekly security report covers eight DeFi attack incidents detected between March 9 and March 15, 2026, across Ethereum and BNB Chain, with total estimated losses of approximately $1.66M. Incidents include a $1.01M AAVE incorrect liquidation caused by oracle misconfiguration, a $242K exploit on the deflationary token MT due to flawed trading restrictions, a $149K exploit on the burn-to-earn protocol DBXen from `_msgSender()` and `msg.sender` inconsistency, and a $131K attack on AM Token exploiting a flawed delayed-burn mechanism. The report provides detailed vulnerability analysis and attack transaction breakdowns for each incident.