# BlockSec Website Index
This file contains an index of pages and blog posts from blocksec.com

## About BlockSec

BlockSec is the leading full-stack blockchain security and compliance provider, dedicated to ensuring a secure and seamless Web3 world. Established in 2021 by globally distinguished security experts, BlockSec offers end-to-end Web3 protection from pre-launch to post-launch, trusted by global enterprises and institutions.

**Key Statistics:**
- Assets Protected: $50B+
- Global Clients: 1000+
- Hacks Blocked: 20+
- Funds Rescued: $20M+

BlockSec serves over 1000 esteemed clients including MetaMask, Uniswap Foundation, Compound, Forta, and PancakeSwap, and has received tens of millions of US dollars in funding from preeminent investors including Matrix Partners, Vitalbridge Capital, and Fenbushi Capital.

## Products & Services

BlockSec provides a comprehensive suite of security and compliance solutions:

**Security Auditing**: Smart contract and EVM chain audits covering technical, business, and financial aspects. Comprehensive audits for smart contracts and EVM chains with actionable solutions and trusted quality.

**Phalcon Security**: Proactively detect threats, alert what matters, and block attacks in real-time. Features early detection at mempool stage, precise detection with 200+ attack characteristics, and automated actions using gas-bidding strategy to block attacks and prevent loss.

**Phalcon Compliance**: Identify illicit activities, manage risks, and ensure alignment with global crypto AML/CFT standards. Provides transaction screening (KYT), address screening (KYA), and real-time AML/CFT screening with risk scoring.

**STOP**: Sequencer-level defense platform for L2 chains, identifying and blocking malicious transactions to protect the ecosystem.

**Phalcon Explorer**: Visualize, simulate, and debug on-chain transactions with an intuitive interface for advanced transaction analysis.

**MetaSuites**: Enhance your blockchain explorer with 20+ integrated tools for advanced capabilities, supporting multiple blockchains including Solana.

**Safe{wallet} Monitor**: Monitor Safe{wallet} transactions and provide security alerts for multi-sig wallet operations.

**Research & Intelligence**: BlockSec conducts cutting-edge research in blockchain security, publishes security insights, and maintains a comprehensive security incident library.

## Pages

[Home](https://blocksec.com): Safeguard your DeFi protocols with end-to-end Web3 security solutions. From smart contract audits to 24/7 threat monitoring, we detect risks, automate exploit prevention, and support compliance.

[About Us](https://blocksec.com/about-us): We combine advanced security research with real-world experience in cyber defense and financial compliance. Meet the team at BlockSec.

[Onchain AML: Screening, Monitoring, and Investigations](https://blocksec.com/aml): Learn how onchain AML teams screen wallets, monitor transactions with webhooks and re-scans, trace illicit fund flows, and prepare regulator-ready records.

[Crypto AML Monitoring Rules: Power-User Setup](https://blocksec.com/aml/advanced-crypto-aml-monitoring-rule-configuration): Tuning advanced crypto AML monitoring rules after deployment: Risk Engine configuration, Behavioral template thresholds, and Exposure Value calibration.

[Crypto Compliance Software: Rollout Timeline](https://blocksec.com/aml/crypto-compliance-software-deployment-timeline-and-rollout): Crypto compliance software deployment timeline and rollout: a five-phase plan from assessment and POC to integration, go-live, and continuous monitoring.

[Direct vs Indirect Exposure in Crypto AML](https://blocksec.com/aml/direct-vs-indirect-exposure-crypto-aml): Direct vs indirect exposure in crypto AML: how hop distance, exposure percentage, and fund provenance combine into an Allow, Review, or Block disposition.

[Do Blockchain Analytics Tools Actually Work?](https://blocksec.com/aml/do-blockchain-analytics-tools-actually-work): How to tell whether a blockchain analytics tool actually works: a three-question effectiveness framework and a five-step independent verification checklist.

[How DeFi Protocols Achieve Crypto AML Compliance](https://blocksec.com/aml/how-defi-protocols-achieve-crypto-aml-compliance): How DeFi protocols achieve crypto AML: KYT and KYA screening at deposit, borrow, and swap nodes, Monitor re-scans on risk drift, and PAYG credits from $95.

[Build a Crypto Exchange AML Program](https://blocksec.com/aml/how-to-build-an-aml-compliance-program-for-a-crypto-exchange): How to build an AML compliance program for a crypto exchange: risk assessment, screening deployment, alert triage SOP, and supervisory reporting in four layers.

[Choose a Cross-Chain Crypto Investigation Tool](https://blocksec.com/aml/how-to-choose-a-cross-chain-blockchain-investigation-tool): A practical selection framework for cross-chain blockchain investigation tools: five evaluation dimensions and an automated-versus-manual tracing comparison.

[How to Vet a Crypto AML Compliance Vendor](https://blocksec.com/aml/how-to-evaluate-a-crypto-aml-compliance-vendor): A practical buyer evaluation framework for crypto AML compliance vendors: six dimensions, POC checks, and red flags that disqualify a tool before contract.

[Integrate a KYT API Into a Crypto Exchange](https://blocksec.com/aml/how-to-integrate-a-kyt-api-into-a-crypto-exchange): Integrate a KYT API into a crypto exchange: three screening modes, rate limits, plan gating, webhook alerts, and CSV batch for screening backlog addresses.

[Trace Stolen Crypto Through a Mixer](https://blocksec.com/aml/how-to-trace-stolen-crypto-through-a-mixer): Trace stolen crypto through a mixer: a four-step SOP covering Mixing label detection, unbroken cross-chain tracing, and a defensible evidence pack.

[Is BlockSec Legit? A 4-Check Framework](https://blocksec.com/aml/is-blocksec-legit): Is BlockSec a legitimate crypto compliance company? A four-dimension legitimacy check: verifiable capabilities, customer evidence, adoption, transparency.

[Affordable Crypto AML Tool for Small VASPs](https://blocksec.com/aml/pricing-affordable-crypto-aml-compliance-tool-small-vasp): A small VASP affords crypto AML compliance with pay-as-you-go credit from $95, a 5-tier plan ladder, and a clear break-even point against fixed subscriptions.

[Cut Crypto AML False Positives](https://blocksec.com/aml/reduce-false-positives-crypto-aml-monitoring): Crypto AML false positives overwhelm alert queues. Explainable scoring with traceable Risk Indicators and quantified exposure enables auditable auto-close.

[Vendor-Neutral Crypto AML Certification](https://blocksec.com/aml/vendor-neutral-crypto-aml-certification-and-training): Vendor-neutral crypto AML certification and training: why portable credentials transfer across employers and tools while vendor-specific programs do not.

[Explainable Crypto AML Risk Scoring, Explained](https://blocksec.com/aml/what-is-explainable-crypto-aml-risk-scoring): Explainable crypto AML risk scoring retraces every decision to a named signal, a quantified exposure, and a behavioral pattern so a score survives an audit.

[What Is KYA (Know Your Address) in Crypto?](https://blocksec.com/aml/what-is-kya-know-your-address-in-crypto): KYA (Know Your Address) is the address-layer compliance control in crypto: real-time wallet address risk scoring against labeled risk entities and exposure.

[Smart Contract Security Audits](https://blocksec.com/audit): Full-scope code review to fix all security issues in smart contracts.

[Audit Reports](https://blocksec.com/audit-report): Discover BlockSec's audit services for protocols and blockchains. Find detailed audit reports for Radiant V2, Puffer pufETH, Magpie Radpie, Ref Exchange, EOS EVM and more.

[Blockchain Bridge Audit](https://blocksec.com/blockchain-bridge-audit): Secure cross-chain crypto bridges with a blockchain bridge audit that delivers deep code review and security analysis to prevent exploits and asset loss.

[Blockchain Penetration Testing Services](https://blocksec.com/blockchain-penetration-testing): Adversarial penetration testing across the blockchain money-handling attack surface — signing, approval, withdrawal, and fund logic. Request a scoped test.

[Blockchain Security Audit](https://blocksec.com/blockchain-security-audit): Our comprehensive blockchain security audit rigorously verifies your DApp's underlying logic. This eliminates critical vulnerabilities, ensuring a robust protocol that meets elite industry benchmarks.

[In-Depth Web3 Security Insights](https://blocksec.com/blog): Explore our blog for the latest on security incidents, root cause analysis, and updates on Web3 events and product developments.

[Certificate Verification](https://blocksec.com/certificate-verification): Verify the authenticity of certificates issued by BlockSec training programs. Ensure the credential is valid and officially recognized by BlockSec.

[Blockchain Infrastructure Audit](https://blocksec.com/chain-audit): Strengthen the reliability and resilience of your blockchain infrastructure.

[Crypto Payment Compliance: Crypto AML/CFT, KYT/KYA Guide](https://blocksec.com/compliance-handbook): Download BlockSec's handbook on our form. Grasp Crypto AML/CFT rules, KYT/KYA methods, and safeguard your Web3 project from compliance risks.

[Crypto AML API: Label, Risk Score & Screening API](https://blocksec.com/crypto-aml-api): Crypto AML APIs for address labels, risk scoring, sanctions screening, and transaction monitoring. Two API products from $699/mo with 600M+ labeled addresses.

[BlockSec 2025 Crypto Crime Report](https://blocksec.com/crypto-crime-report): Download BlockSec's Crypto Crime Report on our form. Know the big picture of cryptocurrency crime in 2025. It also covers the main features, structure, and trends in this field.

[Crypto Payment Security & Compliance: An Enterprise Playbook](https://blocksec.com/crypto-payment-playbook): Download BlockSec's enterprise playbook for crypto payment systems. Covers the six-layer architecture, key management and signing security, global payment licensing, and on-chain KYA/KYT AML/CFT.

[Customers & Partners](https://blocksec.com/customers): BlockSec proudly serves a diverse clients and forms strategic partnerships with leading protocols, blockchains, exchanges, and liquidity providers.

[Dapp Security Audit](https://blocksec.com/dapp-security-audit): We conduct deep-dive dapp security audit to scrutinize every layer of your DApp's logic. This delivers a battle-tested, reliable protocol aligned with the highest security standards.

[Important Disclaimer on Third-Party Software Risks](https://blocksec.com/disclaimer): Explore BlockSec's disclaimer on third-party software risks. Understand potential dangers before downloading software. Your safety first!

[Verify Employee Contact](https://blocksec.com/employee-verification): Confirm if the person contacting you is a verified BlockSec employee. Stay safe from scams and unauthorized communications.

[Ethereum Smart Contract Audit](https://blocksec.com/ethereum-smart-contract-audit): Make Your DApp Strong and Safe. Use our Ethereum smart contract audit to fix logic errors. We ensure your code works perfectly and meets the top safety standards in the industry.

[Talk to Blockchain Security Experts - Custom Plans](https://blocksec.com/expert-contact): Connect with BlockSec's team for security audits, enhanced hack prevention and crypto AML services. Trusted for securing billions in crypto.

[Guides | Crypto Compliance, Security, Audits & Risk Intelligence by BlockSec](https://blocksec.com/guides): Explore expert guides on crypto compliance, security audits, illicit fund detection, risk intelligence, and more. Access resources across the crypto ecosystem with BlockSec.

[What Is KYT? Crypto Transaction Monitoring Hub](https://blocksec.com/kyt): KYT (Know Your Transaction) explained: real-time onchain screening, glass-box scoring, ongoing monitoring, SAR/STR, audit trails, and KYT tool pricing.

[Can a Crypto Wallet Become Risky? Address Risk Drift](https://blocksec.com/kyt/can-a-crypto-wallet-become-risky-after-being-clean): Can a crypto wallet become risky after being clean? Why risk drifts, why one-time screening fails, and how ongoing monitoring catches the change early.

[How Accurate Are Crypto KYT Risk Scoring Tools?](https://blocksec.com/kyt/how-accurate-are-crypto-transaction-risk-scoring-tools): How accurate are crypto transaction risk scoring tools? KYT score inputs, the accuracy vs explainability tradeoff, and how to evaluate a tool for examination.

[How to Choose a KYT Tool: Six Evaluation Axes](https://blocksec.com/kyt/how-to-choose-a-kyt-tool-for-crypto-compliance): How to choose a KYT tool for crypto compliance: six evaluation axes, from API latency and rule configurability to audit trail and pricing, plus the red flags.

[Prepare Crypto Compliance for a Regulatory Exam](https://blocksec.com/kyt/how-to-prepare-crypto-compliance-for-a-regulatory-examination): How to prepare crypto compliance for a regulatory exam: what examiners test, the records they ask for, and how to have audit trails and STR files ready.

[Reduce False Positives in KYT Rule Configuration](https://blocksec.com/kyt/how-to-reduce-false-positives-in-kyt-rule-configuration): Reduce false positives in KYT rule configuration: weight individual risk indicators instead of the global threshold and test changes before going live.

[How to Tune Crypto Transaction Monitoring Rules](https://blocksec.com/kyt/how-to-tune-crypto-transaction-monitoring-rules): How to tune crypto transaction monitoring rules: a practitioner workflow from preset templates to production, balancing false positives and missed typologies.

[How to Write a Crypto SAR or STR Report](https://blocksec.com/kyt/how-to-write-a-crypto-sar-str): How to write a crypto SAR or STR: assemble the onchain narrative a non-specialist can follow, attach the evidence blocks, and export a regulator-ready filing.

[Is It Legal to Auto-Close Crypto Compliance Alerts?](https://blocksec.com/kyt/is-it-legal-to-auto-close-crypto-compliance-alerts): Is it legal to auto-close crypto compliance alerts? See what regulators expect from automated dispositions and when auto-close is defensible or risky.

[Is KYT Required for VASP Compliance? FATF RBA Rules](https://blocksec.com/kyt/is-kyt-required-for-vasp-compliance): Is KYT required for VASP compliance? The FATF risk-based approach makes monitoring an obligation. See what Recommendation 10 requires and how KYT delivers it.

[KYT Tool Pricing: PAYG vs Subscription](https://blocksec.com/kyt/kyt-tool-pricing-payg-vs-subscription): KYT tool pricing: PAYG vs subscription compared. See the five-tier structure from a free plan to enterprise and which plan fits which compliance team.

[Multi-Chain KYT Coverage: Which Blockchains Matter?](https://blocksec.com/kyt/multi-chain-kyt-coverage-which-blockchains): Multi-chain KYT coverage: which blockchains to monitor, the cross-chain blind spots chain-hoppers exploit through bridges, and how to evaluate coverage.

[Real-Time KYT API for Pre-Transaction Screening](https://blocksec.com/kyt/real-time-kyt-api-for-pre-transaction-screening): Real-time KYT API for pre-transaction screening: latency budgets in milliseconds, the block/hold/allow gate your team controls, and how to integrate it.

[Onchain Investigations and Blockchain Forensics: The Complete Guide to Tracing Crypto Funds](https://blocksec.com/metasleuth): Onchain investigations and blockchain forensics, end to end: what tracing proves, where monitoring stops, and how a case runs from first alert to evidence.

[Best Free Crypto Compliance Software](https://blocksec.com/metasleuth/best-free-crypto-compliance-software): The best free crypto compliance software, compared honestly: MetaSleuth for tracing case files, a free API discovery endpoint, and what each free tier includes.

[Best Free Crypto Tracing Tools](https://blocksec.com/metasleuth/best-free-crypto-tracing-tools): Free crypto tracing tools that hold up: visual tracing with labels, screening with a real upgrade ladder, and the exact point where each free option stops.

[Best Free Wallet Monitoring Software for Crypto Payment](https://blocksec.com/metasleuth/best-free-wallet-monitoring-software-for-crypto-payment): The best free wallet monitoring software for crypto payment: a real monitor trial, explorer watchlists as the baseline, and the first paid tier worth buying.

[How Much Do Blockchain Monitoring Tools Cost? (and What's Actually Free)](https://blocksec.com/metasleuth/blockchain-monitoring-tools-cost-and-free-tiers): What blockchain monitoring tools cost: the two pricing models, what free tiers actually include, the full price ladder, and the hidden costs to ask any vendor.

[Can Stolen Crypto Actually Be Traced?](https://blocksec.com/metasleuth/can-stolen-crypto-actually-be-traced): Can stolen crypto actually be traced? Often yes, through labeled hops and cluster attribution, but tracing to recovery is a different question with odds.

[Is Chain Analysis Good for Cross-Border Payments: Both Ends or Nothing](https://blocksec.com/metasleuth/chain-analysis-cross-border): Is chain analysis good for cross-border payments? Screening covers both ends of a corridor, speed has limits, and some checks belong before funds move at all.

[Cross-Chain Crypto Laundering Tracing and Attribution](https://blocksec.com/metasleuth/cross-chain-crypto-laundering-tracing-and-attribution): Cross-chain crypto laundering, tracing and attribution: why routes cross chains, how clustering names the entities, and where the attribution has to stop.

[Crypto Fund Tracing API for Investigators](https://blocksec.com/metasleuth/crypto-fund-tracing-api-for-investigators): A crypto fund tracing API for investigators: what programmatic tracing covers, the two API products with real prices, and when an API beats a console.

[Crypto Investigation Tool vs Blockchain Explorer: What's the Difference?](https://blocksec.com/metasleuth/crypto-investigation-tool-vs-blockchain-explorer): Crypto investigation tool vs blockchain explorer: an explorer shows one hop, a tool traces the whole path with labels, clustering, and exportable evidence.

[Building a Court-Ready Crypto Evidence Trail and Forensic Investigation Report](https://blocksec.com/metasleuth/evidence-trail): A court-ready evidence trail for a crypto investigation: the four records a case file needs, custody of graphs and exports, and what makes findings usable.

[How to Choose Blockchain Analytics Software: Coverage, Evidence, and Pricing](https://blocksec.com/metasleuth/how-to-choose-blockchain-analytics-software): How to choose blockchain analytics software: check chain coverage first, then label depth, evidence format, and pricing model against the jobs your team runs.

[How to Monitor Stolen Crypto Funds in Real Time](https://blocksec.com/metasleuth/how-to-monitor-stolen-crypto-funds-in-real-time): How to monitor stolen crypto funds in real time: why stolen funds move fast, what a monitoring watchlist gives you, and how alerts close the gap in practice.

[How to Trace a Crypto Wallet Address: A Practical Guide](https://blocksec.com/metasleuth/how-to-trace-a-crypto-wallet-address): How to trace a crypto wallet address: read the outgoing side first, see what an explorer misses, and follow fund sources with labeled multi-hop tracing.

[How to Trace Stolen Crypto Funds Across Chains](https://blocksec.com/metasleuth/how-to-trace-stolen-crypto-funds-across-chains): How to trace stolen crypto funds across chains: the five-step method, the bridge checkpoints where funds reappear, and how the attribution survives the hops.

[Is Blockchain Analytics Good for Exchange Operations?](https://blocksec.com/metasleuth/is-blockchain-analytics-good-for-exchange-operations): Is blockchain analytics good for exchange operations? It covers deposit checks and withdrawal screening; key management and incident response sit elsewhere.

[Is Blockchain Analytics Good for Institutional Crypto?](https://blocksec.com/metasleuth/is-blockchain-analytics-good-for-institutional-crypto): Is blockchain analytics good for institutional crypto? See what it actually covers for institutional operations, where it fits cleanly, and where it does not.

[Is Blockchain Analytics Good for Regulatory Reporting?](https://blocksec.com/metasleuth/is-blockchain-analytics-good-for-regulatory-reporting): Is blockchain analytics good for regulatory reporting? It supplies the sourced, labeled data half; the line between data and reporting is where work starts.

[Are Blockchain Monitoring Tools Good for Onchain Investigations: The Honest Split](https://blocksec.com/metasleuth/monitoring-vs-investigations): Are blockchain monitoring tools good for onchain investigations? They carry live tracking and labels, while tracing depth belongs to dedicated forensics work.

[How to Trace Stolen Crypto After a Hack: The First 48 Hours](https://blocksec.com/metasleuth/trace-stolen-crypto): How to trace stolen crypto after a hack: the first 48 hours, what to lock down first, how to follow funds across hops, and when to bring in investigators.

[What Is On-Chain Forensics?](https://blocksec.com/metasleuth/what-is-on-chain-forensics): What on-chain forensics is: post-incident tracing of funds, how it differs from AML screening and monitoring, and when taint tracking answers the question.

[MetaSuites (formerly MetaDock): The Builder's Swiss Army Knife by BlockSec](https://blocksec.com/metasuites): Generate fund flow, display address labels, download data with one click, simulate transactions, view storage, and proxy upgrades on over ten blockchain explorers.

[Latest in Web3 Security Updates](https://blocksec.com/newsroom): Stay informed with BlockSec's newsroom: your source for the latest media coverage on our security analysis, collaborations, and product updates.

[Arbitrum Explorer for Higher-level Execution](https://blocksec.com/phalcon/arbitrum-explorer): An advanced Arbitrum Explorer built for you to understand what really happens inside optimistic rollup transactions.

[Avalanche Explorer for High-Throughput Multi-Chain Execution and Transactions](https://blocksec.com/phalcon/avalanche-explorer): An advanced and well-designed Avalanche Explorer built for you to understand what really happens on a fast, multi-chain network.

[Base Explorer for Deep-Dive Transactions Analyses](https://blocksec.com/phalcon/base-explorer): A professional, investigation-grade Base explorer built for you to trace real transactions on a Coinbase-backed OP Stack chain and understand how Base transactions actually behave.

[Blockchain Compliance](https://blocksec.com/phalcon/blockchain-compliance): Achieve blockchain compliance with wallet and transaction risk screening, continuous address monitoring, and automated alerts that support AML/CFT requirements.

[Phalcon Explorer](https://blocksec.com/phalcon/blockchain-explorer): A professional, investigation-grade blockchain explorer, allowing you to delve into transactions and act wisely

[Blockchain Security Services](https://blocksec.com/phalcon/blockchain-security-services): BlockSec stops web3 threats before they do any damage with the most accurate real-time advanced warning system and connection to automated onchain actions.

[Blockchain Security Software](https://blocksec.com/phalcon/blockchain-security-software): Institutional-grade Web3 security platform protecting protocols and L1/L2 chains. Stop Web3 hacks before they cause damage.

[BSC Explorer for Real Transaction Insight](https://blocksec.com/phalcon/bsc-explorer): Analyze real BSC execution with invocation flow, fund flow, balance and state changes, plus simulator and debugger. Search any BSC transaction or address.

[Crypto Compliance](https://blocksec.com/phalcon/compliance): Achieve crypto compliance with wallet and transaction risk screening, continuous address monitoring, and automated alerts that support AML/CFT requirements.

[Crypto AML Compliance](https://blocksec.com/phalcon/crypto-aml-compliance): Achieve crypto AML compliance with wallet and transaction risk screening, continuous address monitoring, and automated alerts to detect threats early.

[Crypto AML Software: Address Screening & Monitoring](https://blocksec.com/phalcon/crypto-aml-software): Crypto AML software for exchanges, OTC desks, and payment providers. Screen addresses, monitor transactions, and generate compliance reports. Starts at $0.10 per check.

[Crypto Address Screening & Transaction Monitoring - Phalcon Compliance](https://blocksec.com/phalcon/crypto-compliance): Comprehensive compliance solution for VASPs: address screening, continuous address monitoring, and one-click STR generation to combat illicit activities and financial crime, and support AML/CFT regulatory requirements.

[Crypto Wallet Screening](https://blocksec.com/phalcon/crypto-wallet-screening): BlockSec Crypto Wallet Screening detects risky wallets instantly to safeguard crypto operations, build a better customer experience, and detect threats early.

[Ethereum Explorer for Deep Transaction Analysis](https://blocksec.com/phalcon/ethereum-explorer): A professional Ethereum Explorer that reveals invocation flow, fund flow, balance changes, state updates, and execution behavior through built-in simulation and debugging.

[Dive into Transaction to Act Wisely](https://blocksec.com/phalcon/explorer): Phalcon Explorer helps developers, traders, and researchers understand complicated transactions to make better decisions. It supports ETH, BNB Chain, Arbitrum, Polygon, and more.

[Gnosis Explorer for DAO-Native Execution and In-Depth Transaction Analyses](https://blocksec.com/phalcon/gnosis-explorer): A trustworthy Gnosis Explorer built for you to track DAO transactions and governance execution with real clarity.

[Hyperliquid Explorer for Order-Driven Trading](https://blocksec.com/phalcon/hyperliquid-explorer): A sophisticated Hyperliquid Explorer built for you to see what really happens on a high-speed, order-driven trading system running on HyperEVM.

[KYT Compliance](https://blocksec.com/phalcon/kyt-compliance): Achieve KYT compliance with wallet and transaction risk screening, continuous address monitoring, and automated alerts that support AML/CFT requirements.

[A Sophisticated Linea Explorer for Deep-Dive Transaction Analysis](https://blocksec.com/phalcon/linea-explorer): A pivotal toolkit built for you to follow zkEVM execution flow, track internal calls and asset movement, and make safe decisions on Linea with full confidence.

[Manta Explorer for Modular Execution and Deep Analyses](https://blocksec.com/phalcon/manta-explorer): An Advanced Manta Explorer, built for you to track Manta transactions in full details.

[Mantle Explorer for Native Execution Insight](https://blocksec.com/phalcon/mantle-explorer): An investigation-grade mantle explorer, built for you to follow modular transactions in full details and make confident decisions.

[Monad Explorer for Detailed Transaction Analyses](https://blocksec.com/phalcon/monad-explorer): An advanced Monad Explorer built for you to see what really happens on a high-speed, parallel EVM chain.

[Phalcon Network | Real-Time Crypto Crime Response Network](https://blocksec.com/phalcon/network): Join the industry’s public intelligence network from BlockSec. Get real-time alerts and stop illicit transactions before they happen. Sign up today.

[Optimism Explorer Built for In-Depth Transaction Analyses](https://blocksec.com/phalcon/optimism-explorer): A High-Performance Optimism Explorer, built for you to trace EVM execution in full details and understand how Optimism transactions really work.

[Plasma Explorer for In-Depth Transaction Analysis](https://blocksec.com/phalcon/plasma-explorer): A high-performance Plasma Explorer built for you to trace EVM execution in full details and understand how Plasma transactions really work.

[Polygon Explorer for High-Volume On-Chain Activities](https://blocksec.com/phalcon/polygon-explorer): An advanced Polygon Explorer built for you to understand what really happens on a fast, low-cost, and highly interactive EVM chain.

[Robinhood Chain Explorer for In-Depth Transaction Analysis](https://blocksec.com/phalcon/robinhood-explorer): A high-performance Robinhood Chain Explorer built to trace how tokenized-stock and RWA transactions really execute on Robinhood’s Arbitrum-based Ethereum Layer 2, with full execution flow, simulation, fund flow and balance changes.

[Scroll Explorer for zkEVM-Equivalent Execution and Advanced Transaction Analyses](https://blocksec.com/phalcon/scroll-explorer): A sophisticated Scroll Explorer, built for you to see how Ethereum-level execution really works and how transaction details unfold on Scroll.

[A Platform to Monitor and Block Hacks](https://blocksec.com/phalcon/security): Phalcon Security helps protocols, liquidity providers/traders, L1/L2 Chains, and exchanges detect attacks, get instant alerts, and take automatic actions.

[Sepolia Explorer Built for Further Transaction Analyses on Ethereum Testnet](https://blocksec.com/phalcon/sepolia-explorer): A focused Sepolia Explorer built to help you follow real Ethereum testnet execution and understand how transactions behave before they moves to mainnet deployment.

[Solana Blockchain Explorer for Instruction-Level Execution](https://blocksec.com/phalcon/solana-blockchain-explorer): See how Solana transactions really run. Follow invocation flow, track fund movement across accounts, and view clear balance changes to make fast, confident decisions.

[Crypto Wallet Address Checker: Free AML Risk Score](https://blocksec.com/phalcon/wallet-protection): Free crypto wallet address checker. Enter any address, get an AML risk score in 2 seconds. Detect exposure to hacked, sanctioned, or fraudulent funds.

[Privacy Policy](https://blocksec.com/privacy-policy): BlockSec webpage inquiries & submission privacy policy.

[Frontier of Blockchain Security](https://blocksec.com/research): Explore BlockSec's cutting-edge blockchain security research featured at top conferences like ISSTA, ACM TOSEM, USENIX Security, and more.

[Rust Smart Contract Audit](https://blocksec.com/rust-smart-contract-audit): Build Logic You Can Trust. Don't let bugs break your DApp. Our Rust smart contract audit checks your core rules to make sure they are reliable and follow the best security practices.

[Safe{Wallet} Security Monitor](https://blocksec.com/safe-wallet-monitor): Simulates the outcome of transactions while alerting you to associated risks at each step of initiation, signing, and execution. Our solution helps ensures robust protection for your Safe{Wallet}.

[Crypto Security Incidents Library](https://blocksec.com/security-incident): Find major blockchain attack cases, learn key vulnerabilities and root causes, and arm yourself with the knowledge to enhance your project’s protection.

[Smart Contract Audit](https://blocksec.com/smart-contract-audit): Our thorough smart contract audit dives deep into your DApp's core architecture. This ensures a battle-tested protocol that aligns with the highest global security standards.

[Solana Audit](https://blocksec.com/solana-audit): Verify that your Solana DApp's program logic is secure, dependable, and built to meet strict security expectations across the ecosystem.

[Solidity Audit](https://blocksec.com/solidity-audit): Make your investors feel safe and make your code work better. We use a proven plan to check your Solidity smart contracts and fix any problems before you launch.

[Centralized Exchange Solutions](https://blocksec.com/solutions/centralized-exchanges): BlockSec protects your exchange at every level: vet new listings, monitor core assets, and ensure global compliance.

[Crypto Payment Solutions](https://blocksec.com/solutions/crypto-payment): BlockSec screens counterparties for risk, continuously monitors payment addresses and sends automatic notifications, building trust in every transaction.

[DeFi Protocol Solutions](https://blocksec.com/solutions/defi-protocols): BlockSec secures your code pre-launch and blocks attacks in real-time, safeguarding both user assets and your reputation.

[L1/L2 Chain Solutions](https://blocksec.com/solutions/l1l2-chain): BlockSec protects your infrastructure before launch, and blocks attacks at the source to shield your ecosystem and reputation.

[RWA Solutions](https://blocksec.com/solutions/rwa): BlockSec builds investor trust and secures your platform at every layer: audit your tokenization contracts, screen every transaction, and protect your treasury.

[Stablecoin Issuer Solutions](https://blocksec.com/solutions/stablecoin-issuer): BlockSec secures your contracts pre-launch and monitors transactions in real-time, safeguarding both asset stability and regulatory trust.

[Stablecoin Compliance: The Complete Guide to Rules, Freezing Risk, and Payment AML](https://blocksec.com/stablecoin): Stablecoin compliance, covered end to end: FATF and MiCA issuer duties, how USDT and USDC freezing works, and how to screen a payment before it settles.

[Stablecoin Issuer Freeze Risk Whitepaper](https://blocksec.com/stablecoin-freeze-risk-whitepaper): Download BlockSec’s whitepaper on stablecoin issuer freeze risk. Learn the four freeze triggers, why self-custody isn’t enough, how treasuries get tainted, and how to respond and speed up recovery.

[Best AML Compliance Software for Stablecoin Operations in 2026](https://blocksec.com/stablecoin/best-aml-compliance-software-for-stablecoin-operations): The best AML compliance software for stablecoin operations, compared on freeze visibility, multi-hop tracing, screening speed, and free first-run checks.

[Crypto Payment Gateway AML Compliance Requirements](https://blocksec.com/stablecoin/crypto-payment-gateway-aml-compliance-requirements): Crypto payment gateway AML compliance requirements: FATF risk-based controls, on and off-ramp screening, monitoring, and STR reporting duties in one list.

[How Do Stablecoin Issuers Manage Freeze and Blacklist Risk?](https://blocksec.com/stablecoin/how-do-stablecoin-issuers-manage-freeze-and-blacklist-risk): How stablecoin issuers manage freeze and blacklist risk: four risk dimensions, four control points, and the screening that keeps treasury funds usable.

[How Does USDT and USDC Freezing Work?](https://blocksec.com/stablecoin/how-does-usdt-usdc-freezing-work): How USDT and USDC freezing works: the issuer blacklist mechanism, how often Tether actually freezes, and how to watch freeze exposure on your own addresses.

[How to Check a USDT Address: Freeze Status, Fund Sources, and Risk Labels](https://blocksec.com/stablecoin/how-to-check-a-usdt-address): How to check a USDT address in minutes: freeze and blacklist status, where the funds came from, and risk labels, from a free first scan to full API volume.

[How to Monitor Stablecoin Counterparty Risk](https://blocksec.com/stablecoin/how-to-monitor-stablecoin-counterparty-risk): How to monitor stablecoin counterparty risk along the full path: address behavior, fund-pool exposure, and scheduled re-checks, not one-time onboarding.

[How to Screen Crypto Payments for Sanctions](https://blocksec.com/stablecoin/how-to-screen-crypto-payments-for-sanctions): How to screen crypto payments for sanctions: KYA and KYT checks, multi-hop tracing past the direct address, and the exact steps to take before settlement.

[Stablecoin Cross-Border Payments: Compliance on Both Ends of the Route](https://blocksec.com/stablecoin/stablecoin-cross-border-payments): Stablecoin cross-border payments need screening at both ends: KYA on the sending side, KYT on the receiving side, and sanctions checks before settlement.

[Stablecoin Depeg Risk: What Breaks a Peg, Past Cases, and What to Watch](https://blocksec.com/stablecoin/stablecoin-depeg-risk): Stablecoin depeg risk, explained: the three ways a peg breaks, what UST 2022 and USDC 2023 proved, and the reserve and redemption signals worth watching.

[Stablecoin Issuer Compliance: FATF and MiCA](https://blocksec.com/stablecoin/stablecoin-issuer-compliance-fatf-and-mica): Stablecoin issuer compliance under FATF and MiCA: the risk-based duties both frameworks impose, where they overlap, and how to build one program for both.

[Stablecoin List: Types, Examples, and How Each One Holds Its Peg](https://blocksec.com/stablecoin/stablecoin-list-types-and-examples): A stablecoin list by type: fiat-backed, crypto-collateralized, and synthetic designs, how each one holds its peg, and the major tokens issued in each category.

[Stablecoin Regulation News and Updates: US, EU, and Hong Kong in 2026](https://blocksec.com/stablecoin/stablecoin-regulation-news-and-updates): Stablecoin regulation news and updates for 2026: the US GENIUS Act timeline, MiCA in force in the EU, Hong Kong licensing, and what changes for issuers.

[Stablecoin Treasury Security Best Practices](https://blocksec.com/stablecoin/stablecoin-treasury-security-best-practices): Stablecoin treasury security best practices: five governance actions and four foundational capabilities that keep an issuer's treasury usable when it matters.

[What Happens When a Stablecoin Wallet Is Frozen?](https://blocksec.com/stablecoin/what-happens-when-a-stablecoin-wallet-is-frozen): What happens when a stablecoin wallet is frozen: transfers stop but the keys stay yours. The three-stage response: find out why, measure, communicate.

[What Is a Stablecoin, and How Is It Regulated?](https://blocksec.com/stablecoin/what-is-a-stablecoin-and-how-is-it-regulated): What a stablecoin is and how it is regulated: how fiat-backed, crypto-backed, and algorithmic types hold their value, and the rules that govern them by market.

[Why Crypto Payment Businesses Need AML](https://blocksec.com/stablecoin/why-crypto-payment-businesses-need-aml): Why crypto payment businesses need AML: the FATF standards behind the duty, the frozen-funds risk behind the business case, and the controls that meet both.

[STOP Attacks at L2 Sequencer Level | Phalcon STOP](https://blocksec.com/stop): The Sequencer Threat Overwatch Program (STOP) utilizes Phalcon Security's detection engine to prevent attacks for L2 chains at the sequencer level, ensuring users engage securely and confidently.

[Terms of Service](https://blocksec.com/terms-of-service): BlockSec webpage inquiries & submission terms of service.

[Trace Stolen Crypto with an AI Investigation Agent](https://blocksec.com/trace-ai): Lost crypto to a hack, scam, or phishing attack? trace.ai is an AI investigation agent that follows the blockchain trail, identifies where your stolen funds went, and delivers an actionable report — powered by BlockSec.

[USDT Freeze & Blacklist Checker — Check Any Address](https://blocksec.com/usdt-freeze-checker): Instantly check if a USDT (ERC-20 / TRC-20) address is frozen or blacklisted by Tether. Live on-chain data across Ethereum and Tron, plus full freeze statistics.

[Web3 Audit](https://blocksec.com/web3-audit): Secure your DApp with our deep-dive web3 audit and architectural verification. Gain a battle-tested codebase that guarantees reliability and full compliance with industry standards.

[Web3 Companion: The Secure Web3 AI Agent](https://blocksec.com/web3-companion): Web3 Companion is BlockSec's open-source agentic wallet. Your AI agent can trade on-chain — it can never touch your private keys or change your security policy.

[x402 Compliance API — Pay-Per-Request KYA/KYT](https://blocksec.com/x402-compliance-api): Run KYA/KYT address screening from AI agents via the x402 protocol — per-request USDC payments, no API key, across 9 chains. Try the compliance API.
## 中文页面 (Simplified Chinese pages)

[首页](https://blocksec.com/zh): BlockSec 提供端到端的 Web3 安全与合规方案：智能合约审计、7×24 小时威胁监控与攻击实时拦截、链上资金筛查与持续监控，帮助你在攻击发生前阻断风险，并为 AML/CFT 合规提供支撑。

[关于我们](https://blocksec.com/zh/about-us): 我们把前沿的安全研究，与网络防御和金融合规领域的实战经验结合在一起。认识 BlockSec 团队。

[链上反洗钱：筛查、监控与调查](https://blocksec.com/zh/aml): 了解链上反洗钱团队如何筛查钱包、用 webhook 与重新扫描监控交易、追踪非法资金流向，并备好监管可用的记录。

[数字货币反洗钱监控规则：进阶配置](https://blocksec.com/zh/aml/advanced-crypto-aml-monitoring-rule-configuration): 自定义风险引擎、阈值校准、行为模板调优与告警分派。写给需要比默认规则更精细控制的团队。

[数字货币合规软件：部署周期与推进节奏](https://blocksec.com/zh/aml/crypto-compliance-software-deployment-timeline-and-rollout): 数字货币合规软件的部署周期与上线计划：评估、概念验证、集成、正式上线、持续监控五个阶段，每阶段列明交付什么、验证什么。

[数字货币反洗钱中的直接与间接敞口](https://blocksec.com/zh/aml/direct-vs-indirect-exposure-crypto-aml): 数字货币反洗钱中的直接与间接敞口：跳数距离、敞口占比与资金来源如何合成一个放行、复核或拦截的处置。

[链上分析工具真的有用吗？](https://blocksec.com/zh/aml/do-blockchain-analytics-tools-actually-work): 链上分析工具真的有用吗？签约前先测三件事：链覆盖、在你自己交易上的准确度，以及你的分析师能否独立复验结果。附一套五步验证流程。

[DeFi 协议如何做到数字货币反洗钱合规](https://blocksec.com/zh/aml/how-defi-protocols-achieve-crypto-aml-compliance): DeFi 协议如何做数字货币反洗钱：在存入、借贷与兑换节点上做 KYT 与 KYA 筛查，用 Monitor 在风险漂移时重扫，以及 95 美元起的 PAYG 额度。

[为数字货币交易所搭建反洗钱合规体系](https://blocksec.com/zh/aml/how-to-build-an-aml-compliance-program-for-a-crypto-exchange): 如何为数字货币交易所搭建反洗钱合规体系：风险评估、筛查部署、告警分流 SOP 与监管报送，分四层讲。

[如何选跨链链上调查工具](https://blocksec.com/zh/aml/how-to-choose-a-cross-chain-blockchain-investigation-tool): 如何选一个跨链链上调查工具：把好用的工具与演示品区分开的五个维度——自动跨链追踪、证据可自证性、实体归因、定价、接入。附一套对比框架。

[如何考察数字货币反洗钱合规厂商](https://blocksec.com/zh/aml/how-to-evaluate-a-crypto-aml-compliance-vendor): 如何评估一家数字货币反洗钱合规厂商：六个维度——覆盖、准确、接入、定价、可自证性、支持，另附能直接否掉一家厂商的危险信号。

[把 KYT API 接进数字货币交易所](https://blocksec.com/zh/aml/how-to-integrate-a-kyt-api-into-a-crypto-exchange): 把 KYT API 接进数字货币交易所：三种筛查模式、速率限制、套餐门槛、webhook 告警，以及用于筛查积压地址的 CSV 批量。

[追踪穿过混币器的被盗资产](https://blocksec.com/zh/aml/how-to-trace-stolen-crypto-through-a-mixer): 追踪穿过混币器的被盗数字资产：一套四步 SOP，涵盖 Mixing 标签识别、不断线的跨链追踪，以及一份站得住的证据包。

[BlockSec 靠谱吗？四步核验法](https://blocksec.com/zh/aml/is-blocksec-legit): BlockSec 是一家靠谱的数字货币合规公司吗？一套四维靠谱度核验：可核验的能力、客户证据、机构采用、决策透明度。

[小型 VASP 用得起的数字货币反洗钱工具](https://blocksec.com/zh/aml/pricing-affordable-crypto-aml-compliance-tool-small-vasp): PAYG 额度 95 美元起，五档阶梯随筛查量增长。涵盖成本结构、ROI 计算，以及什么情况下按量付费优于固定订阅。

[降低数字货币反洗钱误报](https://blocksec.com/zh/aml/reduce-false-positives-crypto-aml-monitoring): 数字货币反洗钱的误报把告警队列压垮。带可追溯风险指标与量化敞口的可解释评分，让可审计的自动关闭成为可能。

[厂商中立的数字货币反洗钱认证](https://blocksec.com/zh/aml/vendor-neutral-crypto-aml-certification-and-training): 厂商中立的数字货币反洗钱认证与培训：为什么可迁移的资质能跨雇主、跨工具带走，而绑定厂商的项目做不到。

[可解释的数字货币反洗钱风险评分，讲清楚](https://blocksec.com/zh/aml/what-is-explainable-crypto-aml-risk-scoring): 可解释的数字货币反洗钱风险评分，把每个决策回溯到一个具名信号、一份量化敞口、一个行为模式，让分值经得起审计。

[什么是 KYA（了解你的地址）？](https://blocksec.com/zh/aml/what-is-kya-know-your-address-in-crypto): KYA（Know Your Address，了解你的地址）是数字货币领域地址层的合规控制措施：实时给钱包地址打风险分，比对带标签的风险实体与敞口。

[智能合约安全审计](https://blocksec.com/zh/audit): 全范围代码评审，修掉智能合约中的所有安全问题。

[跨链桥安全审计](https://blocksec.com/zh/blockchain-bridge-audit): 通过跨链桥安全审计守护跨链资产：深入的代码评审与安全分析，防住漏洞利用与资产损失。

[Blockchain Penetration Testing 区块链渗透测试服务](https://blocksec.com/zh/blockchain-penetration-testing): 面向区块链资金处理攻击面的对抗式渗透测试 —— 覆盖签名、审批、提现与资金逻辑路径。立即申请定制范围的渗透测试。

[区块链安全审计](https://blocksec.com/zh/blockchain-security-audit): 我们的区块链安全审计会严格核验你 DApp 的底层逻辑，消除关键漏洞，确保协议足够健壮、达到行业顶尖水准。

[深度 Web3 安全洞察](https://blocksec.com/zh/blog): 在我们的博客里了解最新的安全事件、根因分析，以及 Web3 行业动态与产品进展。

[证书验证](https://blocksec.com/zh/certificate-verification): 验证 BlockSec 培训项目所颁发证书的真实性，确认该证书有效且经 BlockSec 正式认可。

[区块链基础设施审计](https://blocksec.com/zh/chain-audit): 提升你区块链基础设施的可靠性与韧性。

[数字货币支付合规：AML/CFT、KYT/KYA 指南](https://blocksec.com/zh/compliance-handbook): 下载 BlockSec 的合规手册。掌握数字货币 AML/CFT 规则、KYT/KYA 方法，保护你的 Web3 项目免受合规风险。

[数字货币反洗钱 API：标签、风险评分与筛查 API](https://blocksec.com/zh/crypto-aml-api): 用于地址标签、风险评分、制裁筛查与交易监控的数字货币反洗钱 API。两款产品每月 $699 起，覆盖 6 亿+ 已标注地址。

[BlockSec 2025 数字货币犯罪报告](https://blocksec.com/zh/crypto-crime-report): 在我们的表单页下载 BlockSec 数字货币犯罪报告，了解 2025 年犯罪活动的全貌，以及该领域的主要特征、结构与趋势。

[数字货币支付安全与合规实战手册](https://blocksec.com/zh/crypto-payment-playbook): 下载 BlockSec 的《数字货币支付安全与合规实战手册》，覆盖六层系统架构、密钥与签名安全、全球支付牌照地图，以及 KYA/KYT 链上 AML/CFT 技术合规方案。

[客户与合作伙伴](https://blocksec.com/zh/customers): BlockSec 服务着多元的客户群体，并与领先的协议、公链、交易所与流动性提供方建立了战略合作。

[DApp 安全审计](https://blocksec.com/zh/dapp-security-audit): 我们做深入的 DApp 安全审计，逐层审视你 DApp 的逻辑，交付一个经得起实战检验、达到最高安全标准的可靠协议。

[关于第三方软件风险的重要免责声明](https://blocksec.com/zh/disclaimer): 了解 BlockSec 关于第三方软件风险的免责声明。下载任何软件之前，请先了解其中的潜在风险——安全第一。

[员工身份验证](https://blocksec.com/zh/employee-verification): 确认联系你的人是否为 BlockSec 的在职员工，避免诈骗与冒名沟通。

[Ethereum 智能合约审计](https://blocksec.com/zh/ethereum-smart-contract-audit): 让你的 DApp 既稳固又安全。用我们的 Ethereum 智能合约审计修掉逻辑错误，确保代码运行无误并达到行业最高安全标准。

[与区块链安全专家沟通 - 定制方案](https://blocksec.com/zh/expert-contact): 联系 BlockSec 团队，获取安全审计、攻击防护与数字货币反洗钱服务。我们守护着数十亿美元的数字资产。

[指南](https://blocksec.com/zh/guides): 浏览关于数字货币合规、安全审计、非法资金识别、风险情报等主题的专业指南。与 BlockSec 一起获取覆盖整个数字货币生态的资源。

[什么是 KYT？数字货币交易监控中心](https://blocksec.com/zh/kyt): 讲清 KYT（Know Your Transaction）：实时链上筛查、白箱评分、持续监控、SAR/STR、审计轨迹，以及 KYT 工具的定价。

[数字货币钱包会变成高风险吗？地址风险漂移](https://blocksec.com/zh/kyt/can-a-crypto-wallet-become-risky-after-being-clean): 一个原本干净的数字货币钱包会变成高风险吗？讲清风险为什么会漂移、一次性筛查为什么不够，以及持续监控如何及早抓到这个变化。

[KYT 风险评分工具到底有多准？](https://blocksec.com/zh/kyt/how-accurate-are-crypto-transaction-risk-scoring-tools): 数字货币交易风险评分工具到底有多准？讲清 KYT 分值的输入、准确度与可解释性的取舍，以及如何按迎检标准评估一个工具。

[如何选 KYT 工具：六个评估维度](https://blocksec.com/zh/kyt/how-to-choose-a-kyt-tool-for-crypto-compliance): 如何为数字货币合规选一个 KYT 工具：六个评估维度，从 API 延迟、规则可配置性到审计轨迹与定价，另附那些危险信号。

[为监管检查准备数字货币合规材料](https://blocksec.com/zh/kyt/how-to-prepare-crypto-compliance-for-a-regulatory-examination): 如何为监管检查准备数字货币合规材料：检查官会验什么、会要哪些记录，以及怎么让审计轨迹与 STR 档案随时备好。

[在 KYT 规则配置中减少误报](https://blocksec.com/zh/kyt/how-to-reduce-false-positives-in-kyt-rule-configuration): 在 KYT 规则配置中减少误报：给单个风险指标加权，而不是动全局阈值；改动上线前先测。

[如何调优数字货币交易监控规则](https://blocksec.com/zh/kyt/how-to-tune-crypto-transaction-monitoring-rules): 如何调优数字货币交易监控规则：一份从预置模板到生产环境的从业者工作流，在误报与漏掉手法之间取平衡。

[如何撰写SAR 或 STR 报告](https://blocksec.com/zh/kyt/how-to-write-a-crypto-sar-str): 如何撰写SAR 或 STR：把非专业读者也跟得上的链上叙述组织出来、附上各块证据，并导出一份监管可用的申报。

[自动关闭数字货币合规告警合法吗？](https://blocksec.com/zh/kyt/is-it-legal-to-auto-close-crypto-compliance-alerts): 自动关闭数字货币合规告警合法吗？看清监管对自动化处置的期望，以及什么情况下自动关闭站得住、什么情况下有风险。

[VASP 合规必须做 KYT 吗？FATF 风险为本的要求](https://blocksec.com/zh/kyt/is-kyt-required-for-vasp-compliance): VASP 合规必须做 KYT 吗？FATF 的风险为本方法把监控定为一项义务。看清第 10 项建议要求什么，以及 KYT 如何把它落到实处。

[KYT 工具定价：按量付费还是订阅](https://blocksec.com/zh/kyt/kyt-tool-pricing-payg-vs-subscription): KYT 工具定价：按量付费与订阅的对比。看清从免费档到企业级的五档结构，以及哪一档适合哪种合规团队。

[多链 KYT 覆盖：哪些链真正要紧？](https://blocksec.com/zh/kyt/multi-chain-kyt-coverage-which-blockchains): 多链 KYT 覆盖：该监控哪些链、跨链跳转者经跨链桥钻的那些盲区在哪，以及如何评估覆盖。

[用于交易前筛查的实时 KYT API](https://blocksec.com/zh/kyt/real-time-kyt-api-for-pre-transaction-screening): 用于交易前筛查的实时 KYT API：以毫秒计的延迟预算、由你的团队掌控的拦截/挂起/放行闸口，以及怎么把它接进去。

[链上调查与区块链取证：数字货币资金追踪完全指南](https://blocksec.com/zh/metasleuth): 链上调查与区块链取证的完整脉络：追踪能证明什么、监控在哪里止步，以及一个案子如何从第一条告警走到证据。

[最佳免费数字货币合规软件](https://blocksec.com/zh/metasleuth/best-free-crypto-compliance-software): 最佳免费数字货币合规软件的诚实对比：用于案卷的 MetaSleuth、一个免费的 API 发现端点，以及各家免费档都包含什么。

[最佳免费数字货币追踪工具](https://blocksec.com/zh/metasleuth/best-free-crypto-tracing-tools): 真正顶用的免费数字货币追踪工具：带标签的可视化追踪、有真实升级阶梯的筛查，以及每个免费选项到底在哪里停住。

[面向数字货币支付的最佳免费钱包监控软件](https://blocksec.com/zh/metasleuth/best-free-wallet-monitoring-software-for-crypto-payment): 面向数字货币支付的最佳免费钱包监控软件：一次真实的监控试用、作为基线的浏览器关注列表，以及第一个值得买的付费档。

[区块链监控工具要花多少钱？（以及哪些是真免费）](https://blocksec.com/zh/metasleuth/blockchain-monitoring-tools-cost-and-free-tiers): 区块链监控工具的成本：两种计价模式、免费档究竟包含什么、完整的价格阶梯，以及该向任何供应商追问的那些隐性成本。

[被盗的数字货币真的追得回来吗？](https://blocksec.com/zh/metasleuth/can-stolen-crypto-actually-be-traced): 被盗的数字货币真的能被追踪吗？靠带标签的逐跳与聚类归属，多数情况下可以；但从追踪到追回是另一个问题，有它自己的概率。

[跨境支付中的链上分析：两端都要，否则免谈](https://blocksec.com/zh/metasleuth/chain-analysis-cross-border): 链上分析适合跨境支付吗？筛查必须覆盖链路两端、速度有它的门槛，而有些检查该在资金移动之前就完成。

[跨链数字货币洗钱的追踪与主体归属](https://blocksec.com/zh/metasleuth/cross-chain-crypto-laundering-tracing-and-attribution): 跨链数字货币洗钱的追踪与主体归属：路径为什么要跨链、聚类如何把主体叫出名字，以及归属认定必须在哪里停手。

[面向调查人员的数字货币资金追踪 API](https://blocksec.com/zh/metasleuth/crypto-fund-tracing-api-for-investigators): 面向调查人员的数字货币资金追踪 API：程序化追踪覆盖什么、两款带真实价格的 API 产品，以及 API 在什么时候胜过控制台。

[数字货币调查工具 vs 区块链浏览器：区别在哪？](https://blocksec.com/zh/metasleuth/crypto-investigation-tool-vs-blockchain-explorer): 数字货币调查工具 vs 区块链浏览器：浏览器只给你一跳，调查工具带着标签、聚类与可导出的证据把整条路径追完。

[构建可用于法庭的数字货币证据链与取证调查报告](https://blocksec.com/zh/metasleuth/evidence-trail): 一次数字货币调查的可用于法庭的证据链：案卷需要的四类记录、图表与导出件的保管，以及什么让结论真正可用。

[如何挑选区块链分析软件：覆盖、证据与定价](https://blocksec.com/zh/metasleuth/how-to-choose-blockchain-analytics-software): 如何挑选区块链分析软件：先看链覆盖，再按标签深度、证据格式与计价模式，对照你团队真正要干的活来评。

[如何实时监控被盗的数字货币资金](https://blocksec.com/zh/metasleuth/how-to-monitor-stolen-crypto-funds-in-real-time): 如何实时监控被盗的数字货币资金：被盗资金为什么走得快、一份监控名单能给你什么，以及告警在实操中如何补上那道空窗。

[如何追踪一个数字货币钱包地址：实操指南](https://blocksec.com/zh/metasleuth/how-to-trace-a-crypto-wallet-address): 如何追踪一个数字货币钱包地址：先读出金那一侧、看清浏览器漏掉了什么，并用带标签的多跳追踪跟住资金来源。

[如何跨链追踪被盗的数字货币资金](https://blocksec.com/zh/metasleuth/how-to-trace-stolen-crypto-funds-across-chains): 如何跨链追踪被盗的数字货币资金：五步法、资金在跨链桥上重新现身的那些检查点，以及主体归属如何在层层跳转中存活下来。

[区块链分析适合交易所运营吗？](https://blocksec.com/zh/metasleuth/is-blockchain-analytics-good-for-exchange-operations): 区块链分析适合交易所运营吗？它覆盖入金检查与提现筛查；密钥管理与事件响应则另有归属。

[区块链分析适合机构级数字货币业务吗？](https://blocksec.com/zh/metasleuth/is-blockchain-analytics-good-for-institutional-crypto): 区块链分析适合机构级数字货币业务吗？看清它对机构运营究竟覆盖了什么、它在哪里严丝合缝，以及在哪里并不适用。

[区块链分析适合监管报送吗？](https://blocksec.com/zh/metasleuth/is-blockchain-analytics-good-for-regulatory-reporting): 区块链分析适合监管报送吗？它提供有出处、有标签的那一半数据；而数据与报送之间的那条线，才是工作真正开始的地方。

[区块链监控工具适合做链上调查吗：诚实的分工](https://blocksec.com/zh/metasleuth/monitoring-vs-investigations): 区块链监控工具适合做链上调查吗？它们具备实时跟踪与标签，而追踪深度属于专门的取证工作。

[黑客事件后如何追踪被盗数字货币：最初的 48 小时](https://blocksec.com/zh/metasleuth/trace-stolen-crypto): 黑客事件后如何追踪被盗数字货币：最初的 48 小时该先守住什么、如何逐跳跟住资金，以及什么时候该把调查人员拉进来。

[什么是链上取证？](https://blocksec.com/zh/metasleuth/what-is-on-chain-forensics): 什么是链上取证：事件发生后对资金的追踪、它与反洗钱筛查和监控的区别，以及污点追踪在什么时候能回答问题。

[MetaSuites（原 MetaDock）：BlockSec 出品的开发者瑞士军刀](https://blocksec.com/zh/metasuites): 在十余个区块链浏览器上生成资金流向、显示地址标签、一键下载数据、模拟交易、查看存储与代理升级。

[Web3 安全最新动态](https://blocksec.com/zh/newsroom): 关注 BlockSec 新闻室，获取我们在安全分析、合作与产品更新方面的最新媒体报道。

[面向更高层执行的 Arbitrum 浏览器](https://blocksec.com/zh/phalcon/arbitrum-explorer): 一款进阶的 Arbitrum 浏览器，帮你看懂 optimistic rollup 交易内部到底发生了什么。

[面向高吞吐多链执行与交易的 Avalanche 浏览器](https://blocksec.com/zh/phalcon/avalanche-explorer): 一款进阶且设计考究的 Avalanche 浏览器，帮你看清这条高速多链网络上究竟发生了什么。

[面向深度交易分析的 Base 浏览器](https://blocksec.com/zh/phalcon/base-explorer): 一款专业的、调查级的 Base 浏览器，帮你在这条由 Coinbase 支持的 OP Stack 链上追溯真实交易，理解 Base 交易究竟如何表现。

[区块链合规](https://blocksec.com/zh/phalcon/blockchain-compliance): 通过钱包与交易风险筛查、持续地址监控与自动告警开展区块链合规，支撑 AML/CFT 监管要求。

[区块链浏览器：交易可视化与模拟](https://blocksec.com/zh/phalcon/blockchain-explorer): 一款专业的、调查级的区块链浏览器，让你深入交易、从容决策

[区块链安全服务](https://blocksec.com/zh/phalcon/blockchain-security-services): BlockSec 以最精准的实时预警系统与自动化链上响应，在 Web3 威胁造成损害之前将其阻断。

[区块链安全软件](https://blocksec.com/zh/phalcon/blockchain-security-software): 面向协议与 L1/L2 公链的机构级 Web3 安全平台，在 Web3 攻击造成损害之前将其阻断。

[看清真实交易的 BSC 浏览器](https://blocksec.com/zh/phalcon/bsc-explorer): 用调用流程、资金流向、余额与状态变化，加上模拟器与调试器，分析 BSC 上的真实执行。可搜索任意 BSC 交易或地址。

[数字货币合规](https://blocksec.com/zh/phalcon/compliance): 通过钱包与交易风险筛查、持续地址监控与自动告警开展数字货币合规，支撑 AML/CFT 监管要求。

[数字货币 AML 合规](https://blocksec.com/zh/phalcon/crypto-aml-compliance): 通过钱包与交易风险筛查、持续地址监控与自动告警开展数字货币 AML 合规，尽早发现威胁。

[数字货币 AML 软件：地址筛查与交易监控](https://blocksec.com/zh/phalcon/crypto-aml-software): 面向交易所、OTC 柜台与支付服务商的数字货币 AML 软件：筛查地址、监控交易、生成合规报告，每次筛查 0.1 美元起。

[数字货币地址筛查与交易监控 | Phalcon Compliance](https://blocksec.com/zh/phalcon/crypto-compliance): 面向 VASP 的完整合规方案：地址筛查、持续地址监控与一键生成 STR，遏制非法活动与金融犯罪，支撑 AML/CFT 监管要求。

[数字货币钱包筛查](https://blocksec.com/zh/phalcon/crypto-wallet-screening): BlockSec 数字货币钱包筛查即时识别高风险钱包，守住数字货币业务、改善客户体验，并尽早发现威胁。

[面向深度交易分析的 Ethereum 浏览器](https://blocksec.com/zh/phalcon/ethereum-explorer): 一款专业的 Ethereum 浏览器：通过内置的模拟与调试，呈现调用流程、资金流向、余额变化、状态更新与执行行为。

[深入交易，从容决策](https://blocksec.com/zh/phalcon/explorer): Phalcon Explorer 帮助开发者、交易者与研究人员读懂复杂交易，从而做出更好的决策。支持 ETH、BNB Chain、Arbitrum、Polygon 等多条链。

[面向 DAO 原生执行与深度交易分析的 Gnosis 浏览器](https://blocksec.com/zh/phalcon/gnosis-explorer): 一款值得信赖的 Gnosis 浏览器，帮你真正看清 DAO 交易与治理执行。

[面向订单驱动交易的 Hyperliquid 浏览器](https://blocksec.com/zh/phalcon/hyperliquid-explorer): 一款成熟的 Hyperliquid 浏览器，帮你看清这套运行在 HyperEVM 上、高速且订单驱动的交易系统里究竟发生了什么。

[KYT 合规](https://blocksec.com/zh/phalcon/kyt-compliance): 通过钱包与交易风险筛查、持续地址监控与自动告警开展 KYT 合规，支撑 AML/CFT 监管要求。

[面向深度交易分析的成熟 Linea 浏览器](https://blocksec.com/zh/phalcon/linea-explorer): 一套关键工具，帮你跟随 zkEVM 的执行流程、追踪内部调用与资产流动，在 Linea 上从容做出稳妥的决策。

[面向模块化执行与深度分析的 Manta 浏览器](https://blocksec.com/zh/phalcon/manta-explorer): 一款进阶的 Manta 浏览器，帮你完整细致地追踪 Manta 交易。

[洞察原生执行的 Mantle 浏览器](https://blocksec.com/zh/phalcon/mantle-explorer): 一款调查级的 Mantle 浏览器，帮你完整细致地跟踪模块化交易，做出有把握的决策。

[用于精细交易分析的 Monad 浏览器](https://blocksec.com/zh/phalcon/monad-explorer): 一款进阶的 Monad 浏览器，帮你看清高速并行 EVM 链上究竟发生了什么。

[Phalcon Network | 实时数字货币犯罪响应网络](https://blocksec.com/zh/phalcon/network): 加入 BlockSec 发起的行业公共情报网络。获取实时告警，在非法交易发生之前将其阻断。立即注册。

[为深度交易分析而建的 Optimism 浏览器](https://blocksec.com/zh/phalcon/optimism-explorer): 一款高性能的 Optimism 浏览器，帮你完整细致地追踪 EVM 执行，理解 Optimism 交易真正的运作方式。

[用于深度交易分析的 Plasma 浏览器](https://blocksec.com/zh/phalcon/plasma-explorer): 一款高性能的 Plasma 浏览器，帮你完整细致地追踪 EVM 执行，理解 Plasma 交易真正的运作方式。

[面向高频链上活动的 Polygon 浏览器](https://blocksec.com/zh/phalcon/polygon-explorer): 一款进阶的 Polygon 浏览器，帮你理解在这条快速、低成本、交互密集的 EVM 链上究竟发生了什么。

[用于深度交易分析的 Robinhood Chain 浏览器](https://blocksec.com/zh/phalcon/robinhood-explorer): 一款高性能的 Robinhood Chain 浏览器，用于追踪代币化股票与 RWA 交易在 Robinhood 这条基于 Arbitrum 的以太坊 Layer 2 上究竟如何执行，提供完整的执行流程、模拟、资金流向与余额变化。

[面向 zkEVM 等价执行与进阶交易分析的 Scroll 浏览器](https://blocksec.com/zh/phalcon/scroll-explorer): 一款成熟的 Scroll 浏览器，帮你看清以太坊级的执行究竟如何运作，以及 Scroll 上的交易细节如何展开。

[监控并拦截黑客攻击的平台](https://blocksec.com/zh/phalcon/security): Phalcon Security 帮助协议方、流动性提供者与交易者、L1/L2 公链以及交易所发现攻击、即时告警，并自动执行响应动作。

[为以太坊测试网上的进一步交易分析而建的 Sepolia 浏览器](https://blocksec.com/zh/phalcon/sepolia-explorer): 一款专注的 Sepolia 浏览器，帮你跟住以太坊测试网上真实的执行，在交易进入主网部署之前理解它们的表现。

[面向指令级执行的 Solana 区块链浏览器](https://blocksec.com/zh/phalcon/solana-blockchain-explorer): 看清 Solana 交易究竟如何运行：跟随调用流程、追踪跨账户的资金流动、查看清晰的余额变化，从而快速、有把握地决策。

[数字货币钱包地址检查器：免费 AML 风险评分](https://blocksec.com/zh/phalcon/wallet-protection): 免费的数字货币钱包地址检查器。输入任意地址，2 秒得到 AML 风险评分，识别与被盗、受制裁或欺诈资金的风险敞口。

[隐私政策](https://blocksec.com/zh/privacy-policy): BlockSec 网页咨询与信息提交的隐私政策。

[区块链安全前沿](https://blocksec.com/zh/research): 了解 BlockSec 在 ISSTA、ACM TOSEM、USENIX Security 等顶级会议上发表的前沿区块链安全研究。

[Rust 智能合约审计](https://blocksec.com/zh/rust-smart-contract-audit): 把逻辑做到值得信赖。别让缺陷毁掉你的 DApp —— 我们的 Rust 智能合约审计会核查核心规则，确保它们可靠并符合安全最佳实践。

[Safe{Wallet} 安全监控](https://blocksec.com/zh/safe-wallet-monitor): 在发起、签名、执行的每一步模拟交易结果并提示相关风险，为你的 Safe{Wallet} 提供稳固的防护。

[数字货币安全事件库](https://blocksec.com/zh/security-incident): 查阅重大区块链攻击案例，了解关键漏洞与根因，用这些经验加固你自己项目的防护。

[智能合约审计](https://blocksec.com/zh/smart-contract-audit): 我们的智能合约审计会深入你 DApp 的核心架构，确保协议经得起实战检验、达到全球最高安全标准。

[Solana 审计](https://blocksec.com/zh/solana-audit): 验证你的 Solana DApp 程序逻辑安全、可靠，并达到该生态严格的安全预期。

[Solidity 审计](https://blocksec.com/zh/solidity-audit): 让投资者放心，也让你的代码跑得更好。我们用一套经过验证的方法检查你的 Solidity 智能合约，在上线前把问题修掉。

[中心化交易所解决方案](https://blocksec.com/zh/solutions/centralized-exchanges): BlockSec 在每一层保护你的交易所：审查新上币项目、监控核心资产、确保全球合规。

[数字货币支付解决方案](https://blocksec.com/zh/solutions/crypto-payment): BlockSec 为数字货币支付提供交易对手风险筛查、收付款地址持续监控与自动通知，让每一笔交易都值得信任。

[DeFi 协议解决方案](https://blocksec.com/zh/solutions/defi-protocols): BlockSec 在上线前加固你的代码，上线后实时拦截攻击，同时守住用户资产与项目声誉。

[L1/L2 公链解决方案](https://blocksec.com/zh/solutions/l1l2-chain): BlockSec 在上线前守好你的基础设施，并从源头拦截攻击，护住你的生态与声誉。

[RWA 解决方案](https://blocksec.com/zh/solutions/rwa): BlockSec 在每一层建立投资者信任、保障平台安全：审计你的代币化合约、筛查每一笔交易、守护你的金库。

[稳定币发行方解决方案](https://blocksec.com/zh/solutions/stablecoin-issuer): BlockSec 在上线前加固你的合约，上线后实时监控交易，同时守住资产稳定性与监管信任。

[稳定币合规：规则、冻结风险与支付反洗钱完全指南](https://blocksec.com/zh/stablecoin): 稳定币合规的完整脉络：FATF 与 MiCA 对发行方的义务、USDT 与 USDC 的冻结是怎么运作的，以及如何在一笔支付结算之前把它筛一遍。

[稳定币发行方冻结风险白皮书](https://blocksec.com/zh/stablecoin-freeze-risk-whitepaper): 下载 BlockSec 关于稳定币发行方冻结风险的白皮书：四种冻结触发条件、为什么仅靠自托管不够、金库资金如何被污染，以及如何应对并加快解冻。

[2026 年面向稳定币业务的最佳反洗钱合规软件](https://blocksec.com/zh/stablecoin/best-aml-compliance-software-for-stablecoin-operations): 面向稳定币业务的最佳反洗钱合规软件对比：冻结可见性、多跳追踪、筛查速度，以及免费的首次检查。

[数字货币支付网关的反洗钱合规要求](https://blocksec.com/zh/stablecoin/crypto-payment-gateway-aml-compliance-requirements): 数字货币支付网关的反洗钱合规要求：FATF 的风险为本控制、出入金筛查、监控与可疑交易报送义务，一份清单讲完。

[稳定币发行方如何管理冻结与黑名单风险？](https://blocksec.com/zh/stablecoin/how-do-stablecoin-issuers-manage-freeze-and-blacklist-risk): 稳定币发行方如何管理冻结与黑名单风险：四个风险维度、四个控制点，以及让资金库资金保持可用的那道筛查。

[USDT 与 USDC 的冻结是怎么运作的？](https://blocksec.com/zh/stablecoin/how-does-usdt-usdc-freezing-work): USDT 与 USDC 的冻结是怎么运作的：发行方黑名单机制、Tether 实际冻结的频率，以及如何盯住自己地址上的冻结敞口。

[如何查一个 USDT 地址：冻结状态、资金来源与风险标签](https://blocksec.com/zh/stablecoin/how-to-check-a-usdt-address): 几分钟查完一个 USDT 地址：冻结与黑名单状态、资金从哪儿来，以及风险标签——从免费的第一次扫描到完整的 API 量级。

[如何监控稳定币交易对手风险](https://blocksec.com/zh/stablecoin/how-to-monitor-stablecoin-counterparty-risk): 如何沿完整路径监控稳定币交易对手风险：地址行为、资金池敞口，以及按周期重查，而不是开户时查一次。

[如何对数字货币支付做制裁筛查](https://blocksec.com/zh/stablecoin/how-to-screen-crypto-payments-for-sanctions): 如何对数字货币支付做制裁筛查：KYA 与 KYT 检查、越过直接地址的多跳追踪，以及结算之前要走的每一步。

[稳定币跨境支付：链路两端都要合规](https://blocksec.com/zh/stablecoin/stablecoin-cross-border-payments): 稳定币跨境支付需要在两端筛查：付款侧做 KYA、收款侧做 KYT，并在结算之前完成制裁核查。

[稳定币脱锚风险：什么会打破锚定、过往案例与该盯的信号](https://blocksec.com/zh/stablecoin/stablecoin-depeg-risk): 讲清稳定币脱锚风险：锚定被打破的三种方式，UST 2022 与 USDC 2023 证明了什么，以及储备与赎回方面值得盯住的信号。

[稳定币发行方合规：FATF 与 MiCA](https://blocksec.com/zh/stablecoin/stablecoin-issuer-compliance-fatf-and-mica): FATF 与 MiCA 之下的稳定币发行方合规：两套框架各自施加的风险为本义务、它们在哪里重叠，以及如何用一套体系同时满足两边。

[稳定币清单：类型、实例，以及各自如何守住锚定](https://blocksec.com/zh/stablecoin/stablecoin-list-types-and-examples): 按类型梳理的稳定币清单：法币支撑、数字货币超额抵押与合成型设计，各自怎么守住锚定，以及每一类下发行的主要代币。

[稳定币监管动态与更新：2026 年的美国、欧盟与香港](https://blocksec.com/zh/stablecoin/stablecoin-regulation-news-and-updates): 2026 年的稳定币监管动态与更新：美国 GENIUS 法案的时间线、在欧盟已生效的 MiCA、香港的发牌，以及发行方要跟着改什么。

[稳定币资金库安全最佳实践](https://blocksec.com/zh/stablecoin/stablecoin-treasury-security-best-practices): 稳定币资金库安全最佳实践：五项治理动作与四项基础能力，让发行方的资金库在关键时刻仍然可用。

[稳定币钱包被冻结之后会发生什么？](https://blocksec.com/zh/stablecoin/what-happens-when-a-stablecoin-wallet-is-frozen): 稳定币钱包被冻结之后会发生什么：转账停了，但私钥仍然是你的。三阶段响应：弄清原因、评估范围、对外沟通。

[什么是稳定币，它是如何被监管的？](https://blocksec.com/zh/stablecoin/what-is-a-stablecoin-and-how-is-it-regulated): 什么是稳定币、它如何被监管：法币支撑、数字货币抵押与算法型三类各自怎么守住价值，以及各个市场管它们的规则。

[数字货币支付业务为什么需要反洗钱](https://blocksec.com/zh/stablecoin/why-crypto-payment-businesses-need-aml): 数字货币支付业务为什么需要反洗钱：义务背后的 FATF 标准、商业理由背后的资金冻结风险，以及同时满足两者的控制措施。

[在 L2 排序器层面拦截攻击 | Phalcon STOP](https://blocksec.com/zh/stop): 排序器威胁监控计划（STOP）利用 Phalcon Security 的检测引擎，在排序器层面为 L2 公链阻止攻击，让用户安全、放心地使用。

[服务条款](https://blocksec.com/zh/terms-of-service): BlockSec 网页咨询与信息提交的服务条款。

[USDT 冻结与黑名单查询 —— 查询任意地址](https://blocksec.com/zh/usdt-freeze-checker): 即时查询某个 USDT（ERC-20 / TRC-20）地址是否被 Tether 冻结或拉黑。覆盖 Ethereum 与 Tron 的实时链上数据，另附完整的冻结统计。

[Web3 审计](https://blocksec.com/zh/web3-audit): 用我们深入的 Web3 审计与架构核验守护你的 DApp，获得一份经得起实战检验的代码库，兼顾可靠性与行业标准的完整合规。

[Web3 Companion：安全的 Web3 AI 智能体](https://blocksec.com/zh/web3-companion): Web3 Companion 是 BlockSec 出品的开源智能体钱包。你的 AI 智能体可以在链上交易，但永远碰不到你的私钥，也改不了你的安全策略。

[x402 Compliance API —— 按次付费的 KYA/KYT](https://blocksec.com/zh/x402-compliance-api): 通过 x402 协议从 AI 智能体运行 KYA/KYT 地址筛查 —— 按次 USDC 支付，无需 API key，覆盖 9 条链。立即试用合规 API。
## 繁體中文頁面 (Traditional Chinese pages)

[首頁](https://blocksec.com/zh-hant): BlockSec 提供端到端的 Web3 安全與合規方案：智能合約審計、7×24 小時威脅監控與攻擊即時攔截、鏈上資金篩查與持續監控，幫助你在攻擊發生前阻斷風險，並為 AML/CFT 合規提供支撐。

[關於我們](https://blocksec.com/zh-hant/about-us): 我們把前沿的安全研究，與網路防禦和金融合規領域的實戰經驗結合在一起。認識 BlockSec 團隊。

[鏈上反洗錢：篩查、監控與調查](https://blocksec.com/zh-hant/aml): 瞭解鏈上反洗錢團隊如何篩查錢包、用 webhook 與重新掃描監控交易、追蹤非法資金流向，並備好監管可用的記錄。

[數字貨幣反洗錢監控規則：進階配置](https://blocksec.com/zh-hant/aml/advanced-crypto-aml-monitoring-rule-configuration): 自定義風險引擎、閾值校準、行為模板調優與告警分派。寫給需要比預設規則更精細控制的團隊。

[數字貨幣合規軟體：部署週期與推進節奏](https://blocksec.com/zh-hant/aml/crypto-compliance-software-deployment-timeline-and-rollout): 數字貨幣合規軟體的部署週期與上線計劃：評估、概念驗證、整合、正式上線、持續監控五個階段，每階段列明交付什麼、驗證什麼。

[數字貨幣反洗錢中的直接與間接敞口](https://blocksec.com/zh-hant/aml/direct-vs-indirect-exposure-crypto-aml): 數字貨幣反洗錢中的直接與間接敞口：跳數距離、敞口占比與資金來源如何合成一個放行、複核或攔截的處置。

[鏈上分析工具真的有用嗎？](https://blocksec.com/zh-hant/aml/do-blockchain-analytics-tools-actually-work): 鏈上分析工具真的有用嗎？簽約前先測三件事：鏈覆蓋、在你自己交易上的準確度，以及你的分析師能否獨立複驗結果。附一套五步驗證流程。

[DeFi 協議如何做到數字貨幣反洗錢合規](https://blocksec.com/zh-hant/aml/how-defi-protocols-achieve-crypto-aml-compliance): DeFi 協議如何做數字貨幣反洗錢：在存入、借貸與兌換節點上做 KYT 與 KYA 篩查，用 Monitor 在風險漂移時重掃，以及 95 美元起的 PAYG 額度。

[為數字貨幣交易所搭建反洗錢合規體系](https://blocksec.com/zh-hant/aml/how-to-build-an-aml-compliance-program-for-a-crypto-exchange): 如何為數字貨幣交易所搭建反洗錢合規體系：風險評估、篩查部署、告警分流 SOP 與監管報送，分四層講。

[如何選跨鏈鏈上調查工具](https://blocksec.com/zh-hant/aml/how-to-choose-a-cross-chain-blockchain-investigation-tool): 如何選一個跨鏈鏈上調查工具：把好用的工具與演示品區分開的五個維度——自動跨鏈追蹤、證據可自證性、實體歸因、定價、接入。附一套對比框架。

[如何考察數字貨幣反洗錢合規廠商](https://blocksec.com/zh-hant/aml/how-to-evaluate-a-crypto-aml-compliance-vendor): 如何評估一家數字貨幣反洗錢合規廠商：六個維度——覆蓋、準確、接入、定價、可自證性、支援，另附能直接否掉一家廠商的危險訊號。

[把 KYT API 接進數字貨幣交易所](https://blocksec.com/zh-hant/aml/how-to-integrate-a-kyt-api-into-a-crypto-exchange): 把 KYT API 接進數字貨幣交易所：三種篩查模式、速率限制、套餐門檻、webhook 告警，以及用於篩查積壓地址的 CSV 批次。

[追蹤穿過混幣器的被盜資產](https://blocksec.com/zh-hant/aml/how-to-trace-stolen-crypto-through-a-mixer): 追蹤穿過混幣器的被盜數字資產：一套四步 SOP，涵蓋 Mixing 標籤識別、不斷線的跨鏈追蹤，以及一份站得住的證據包。

[BlockSec 靠譜嗎？四步核驗法](https://blocksec.com/zh-hant/aml/is-blocksec-legit): BlockSec 是一家靠譜的數字貨幣合規公司嗎？一套四維靠譜度核驗：可核驗的能力、客戶證據、機構採用、決策透明度。

[小型 VASP 用得起的數字貨幣反洗錢工具](https://blocksec.com/zh-hant/aml/pricing-affordable-crypto-aml-compliance-tool-small-vasp): PAYG 額度 95 美元起，五檔階梯隨篩查量增長。涵蓋成本結構、ROI 計算，以及什麼情況下按量付費優於固定訂閱。

[降低數字貨幣反洗錢誤報](https://blocksec.com/zh-hant/aml/reduce-false-positives-crypto-aml-monitoring): 數字貨幣反洗錢的誤報把告警佇列壓垮。帶可追溯風險指標與量化敞口的可解釋評分，讓可審計的自動關閉成為可能。

[廠商中立的數字貨幣反洗錢認證](https://blocksec.com/zh-hant/aml/vendor-neutral-crypto-aml-certification-and-training): 廠商中立的數字貨幣反洗錢認證與培訓：為什麼可遷移的資質能跨僱主、跨工具帶走，而綁定廠商的專案做不到。

[可解釋的數字貨幣反洗錢風險評分，講清楚](https://blocksec.com/zh-hant/aml/what-is-explainable-crypto-aml-risk-scoring): 可解釋的數字貨幣反洗錢風險評分，把每個決策回溯到一個具名訊號、一份量化敞口、一個行為模式，讓分值經得起審計。

[什麼是 KYA（瞭解你的地址）？](https://blocksec.com/zh-hant/aml/what-is-kya-know-your-address-in-crypto): KYA（Know Your Address，瞭解你的地址）是數字貨幣領域地址層的合規控制措施：即時給錢包地址打風險分，比對帶標籤的風險實體與敞口。

[智能合約安全審計](https://blocksec.com/zh-hant/audit): 全範圍程式碼評審，修掉智能合約中的所有安全問題。

[跨鏈橋安全審計](https://blocksec.com/zh-hant/blockchain-bridge-audit): 通過跨鏈橋安全審計守護跨鏈資產：深入的程式碼評審與安全分析，防住漏洞利用與資產損失。

[Blockchain Penetration Testing 區塊鏈滲透測試服務](https://blocksec.com/zh-hant/blockchain-penetration-testing): 面向區塊鏈資金處理攻擊面的對抗式滲透測試 —— 覆蓋簽名、審批、提現與資金邏輯路徑。立即申請定製範圍的滲透測試。

[區塊鏈安全審計](https://blocksec.com/zh-hant/blockchain-security-audit): 我們的區塊鏈安全審計會嚴格核驗你 DApp 的底層邏輯，消除關鍵漏洞，確保協議足夠健壯、達到行業頂尖水準。

[深度 Web3 安全洞察](https://blocksec.com/zh-hant/blog): 在我們的部落格裡瞭解最新的安全事件、根因分析，以及 Web3 行業動態與產品進展。

[證書驗證](https://blocksec.com/zh-hant/certificate-verification): 驗證 BlockSec 培訓專案所頒發證書的真實性，確認該證書有效且經 BlockSec 正式認可。

[區塊鏈基礎設施審計](https://blocksec.com/zh-hant/chain-audit): 提升你區塊鏈基礎設施的可靠性與韌性。

[數字貨幣支付合規：AML/CFT、KYT/KYA 指南](https://blocksec.com/zh-hant/compliance-handbook): 下載 BlockSec 的合規手冊。掌握數字貨幣 AML/CFT 規則、KYT/KYA 方法，保護你的 Web3 專案免受合規風險。

[數字貨幣反洗錢 API：標籤、風險評分與篩查 API](https://blocksec.com/zh-hant/crypto-aml-api): 用於地址標籤、風險評分、制裁篩查與交易監控的數字貨幣反洗錢 API。兩款產品每月 $699 起，覆蓋 6 億+ 已標註地址。

[BlockSec 2025 數字貨幣犯罪報告](https://blocksec.com/zh-hant/crypto-crime-report): 在我們的表單頁下載 BlockSec 數字貨幣犯罪報告，瞭解 2025 年犯罪活動的全貌，以及該領域的主要特徵、結構與趨勢。

[數字貨幣支付安全與合規實戰手冊](https://blocksec.com/zh-hant/crypto-payment-playbook): 下載 BlockSec 的《數字貨幣支付安全與合規實戰手冊》，覆蓋六層系統架構、金鑰與簽名安全、全球支付牌照地圖，以及 KYA/KYT 鏈上 AML/CFT 技術合規方案。

[客戶與合作夥伴](https://blocksec.com/zh-hant/customers): BlockSec 服務著多元的客戶群體，並與領先的協議、公鏈、交易所與流動性提供方建立了戰略合作。

[DApp 安全審計](https://blocksec.com/zh-hant/dapp-security-audit): 我們做深入的 DApp 安全審計，逐層審視你 DApp 的邏輯，交付一個經得起實戰檢驗、達到最高安全標準的可靠協議。

[關於第三方軟體風險的重要免責聲明](https://blocksec.com/zh-hant/disclaimer): 瞭解 BlockSec 關於第三方軟體風險的免責聲明。下載任何軟體之前，請先了解其中的潛在風險——安全第一。

[員工身份驗證](https://blocksec.com/zh-hant/employee-verification): 確認聯絡你的人是否為 BlockSec 的在職員工，避免詐騙與冒名溝通。

[Ethereum 智能合約審計](https://blocksec.com/zh-hant/ethereum-smart-contract-audit): 讓你的 DApp 既穩固又安全。用我們的 Ethereum 智能合約審計修掉邏輯錯誤，確保程式碼執行無誤並達到行業最高安全標準。

[與區塊鏈安全專家溝通 - 定製方案](https://blocksec.com/zh-hant/expert-contact): 聯絡 BlockSec 團隊，獲取安全審計、攻擊防護與數字貨幣反洗錢服務。我們守護著數十億美元的數字資產。

[指南](https://blocksec.com/zh-hant/guides): 瀏覽關於數字貨幣合規、安全審計、非法資金識別、風險情報等主題的專業指南。與 BlockSec 一起獲取覆蓋整個數字貨幣生態的資源。

[什麼是 KYT？數字貨幣交易監控中心](https://blocksec.com/zh-hant/kyt): 講清 KYT（Know Your Transaction）：即時鏈上篩查、白箱評分、持續監控、SAR/STR、審計軌跡，以及 KYT 工具的定價。

[數字貨幣錢包會變成高風險嗎？地址風險漂移](https://blocksec.com/zh-hant/kyt/can-a-crypto-wallet-become-risky-after-being-clean): 一個原本乾淨的數字貨幣錢包會變成高風險嗎？講清風險為什麼會漂移、一次性篩查為什麼不夠，以及持續監控如何及早抓到這個變化。

[KYT 風險評分工具到底有多準？](https://blocksec.com/zh-hant/kyt/how-accurate-are-crypto-transaction-risk-scoring-tools): 數字貨幣交易風險評分工具到底有多準？講清 KYT 分值的輸入、準確度與可解釋性的取捨，以及如何按迎檢標準評估一個工具。

[如何選 KYT 工具：六個評估維度](https://blocksec.com/zh-hant/kyt/how-to-choose-a-kyt-tool-for-crypto-compliance): 如何為數字貨幣合規選一個 KYT 工具：六個評估維度，從 API 延遲、規則可配置性到審計軌跡與定價，另附那些危險訊號。

[為監管檢查準備數字貨幣合規材料](https://blocksec.com/zh-hant/kyt/how-to-prepare-crypto-compliance-for-a-regulatory-examination): 如何為監管檢查準備數字貨幣合規材料：檢查官會驗什麼、會要哪些記錄，以及怎麼讓審計軌跡與 STR 檔案隨時備好。

[在 KYT 規則配置中減少誤報](https://blocksec.com/zh-hant/kyt/how-to-reduce-false-positives-in-kyt-rule-configuration): 在 KYT 規則配置中減少誤報：給單個風險指標加權，而不是動全域性閾值；改動上線前先測。

[如何調優數字貨幣交易監控規則](https://blocksec.com/zh-hant/kyt/how-to-tune-crypto-transaction-monitoring-rules): 如何調優數字貨幣交易監控規則：一份從預置模板到生產環境的從業者工作流，在誤報與漏掉手法之間取平衡。

[如何撰寫SAR 或 STR 報告](https://blocksec.com/zh-hant/kyt/how-to-write-a-crypto-sar-str): 如何撰寫SAR 或 STR：把非專業讀者也跟得上的鏈上敘述組織出來、附上各塊證據，並匯出一份監管可用的申報。

[自動關閉數字貨幣合規告警合法嗎？](https://blocksec.com/zh-hant/kyt/is-it-legal-to-auto-close-crypto-compliance-alerts): 自動關閉數字貨幣合規告警合法嗎？看清監管對自動化處置的期望，以及什麼情況下自動關閉站得住、什麼情況下有風險。

[VASP 合規必須做 KYT 嗎？FATF 風險為本的要求](https://blocksec.com/zh-hant/kyt/is-kyt-required-for-vasp-compliance): VASP 合規必須做 KYT 嗎？FATF 的風險為本方法把監控定為一項義務。看清第 10 項建議要求什麼，以及 KYT 如何把它落到實處。

[KYT 工具定價：按量付費還是訂閱](https://blocksec.com/zh-hant/kyt/kyt-tool-pricing-payg-vs-subscription): KYT 工具定價：按量付費與訂閱的對比。看清從免費檔到企業級的五檔結構，以及哪一檔適合哪種合規團隊。

[多鏈 KYT 覆蓋：哪些鏈真正要緊？](https://blocksec.com/zh-hant/kyt/multi-chain-kyt-coverage-which-blockchains): 多鏈 KYT 覆蓋：該監控哪些鏈、跨鏈跳轉者經跨鏈橋鑽的那些盲區在哪，以及如何評估覆蓋。

[用於交易前篩查的即時 KYT API](https://blocksec.com/zh-hant/kyt/real-time-kyt-api-for-pre-transaction-screening): 用於交易前篩查的即時 KYT API：以毫秒計的延遲預算、由你的團隊掌控的攔截/掛起/放行閘口，以及怎麼把它接進去。

[鏈上調查與區塊鏈取證：數字貨幣資金追蹤完全指南](https://blocksec.com/zh-hant/metasleuth): 鏈上調查與區塊鏈取證的完整脈絡：追蹤能證明什麼、監控在哪裡止步，以及一個案子如何從第一條告警走到證據。

[最佳免費數字貨幣合規軟體](https://blocksec.com/zh-hant/metasleuth/best-free-crypto-compliance-software): 最佳免費數字貨幣合規軟體的誠實對比：用於案卷的 MetaSleuth、一個免費的 API 發現端點，以及各家免費檔都包含什麼。

[最佳免費數字貨幣追蹤工具](https://blocksec.com/zh-hant/metasleuth/best-free-crypto-tracing-tools): 真正頂用的免費數字貨幣追蹤工具：帶標籤的視覺化追蹤、有真實升級階梯的篩查，以及每個免費選項到底在哪裡停住。

[面向數字貨幣支付的最佳免費錢包監控軟體](https://blocksec.com/zh-hant/metasleuth/best-free-wallet-monitoring-software-for-crypto-payment): 面向數字貨幣支付的最佳免費錢包監控軟體：一次真實的監控試用、作為基線的瀏覽器關注列表，以及第一個值得買的付費檔。

[區塊鏈監控工具要花多少錢？（以及哪些是真免費）](https://blocksec.com/zh-hant/metasleuth/blockchain-monitoring-tools-cost-and-free-tiers): 區塊鏈監控工具的成本：兩種計價模式、免費檔究竟包含什麼、完整的價格階梯，以及該向任何供應商追問的那些隱性成本。

[被盜的數字貨幣真的追得回來嗎？](https://blocksec.com/zh-hant/metasleuth/can-stolen-crypto-actually-be-traced): 被盜的數字貨幣真的能被追蹤嗎？靠帶標籤的逐跳與聚類歸屬，多數情況下可以；但從追蹤到追回是另一個問題，有它自己的機率。

[跨境支付中的鏈上分析：兩端都要，否則免談](https://blocksec.com/zh-hant/metasleuth/chain-analysis-cross-border): 鏈上分析適合跨境支付嗎？篩查必須覆蓋鏈路兩端、速度有它的門檻，而有些檢查該在資金移動之前就完成。

[跨鏈數字貨幣洗錢的追蹤與主體歸屬](https://blocksec.com/zh-hant/metasleuth/cross-chain-crypto-laundering-tracing-and-attribution): 跨鏈數字貨幣洗錢的追蹤與主體歸屬：路徑為什麼要跨鏈、聚類如何把主體叫出名字，以及歸屬認定必須在哪裡停手。

[面向調查人員的數字貨幣資金追蹤 API](https://blocksec.com/zh-hant/metasleuth/crypto-fund-tracing-api-for-investigators): 面向調查人員的數字貨幣資金追蹤 API：程式化追蹤覆蓋什麼、兩款帶真實價格的 API 產品，以及 API 在什麼時候勝過控制台。

[數字貨幣調查工具 vs 區塊鏈瀏覽器：區別在哪？](https://blocksec.com/zh-hant/metasleuth/crypto-investigation-tool-vs-blockchain-explorer): 數字貨幣調查工具 vs 區塊鏈瀏覽器：瀏覽器只給你一跳，調查工具帶著標籤、聚類與可匯出的證據把整條路徑追完。

[構建可用於法庭的數字貨幣證據鏈與取證調查報告](https://blocksec.com/zh-hant/metasleuth/evidence-trail): 一次數字貨幣調查的可用於法庭的證據鏈：案卷需要的四類記錄、圖表與匯出件的保管，以及什麼讓結論真正可用。

[如何挑選區塊鏈分析軟體：覆蓋、證據與定價](https://blocksec.com/zh-hant/metasleuth/how-to-choose-blockchain-analytics-software): 如何挑選區塊鏈分析軟體：先看鏈覆蓋，再按標籤深度、證據格式與計價模式，對照你團隊真正要乾的活來評。

[如何即時監控被盜的數字貨幣資金](https://blocksec.com/zh-hant/metasleuth/how-to-monitor-stolen-crypto-funds-in-real-time): 如何即時監控被盜的數字貨幣資金：被盜資金為什麼走得快、一份監控名單能給你什麼，以及告警在實操中如何補上那道空窗。

[如何追蹤一個數字貨幣錢包地址：實操指南](https://blocksec.com/zh-hant/metasleuth/how-to-trace-a-crypto-wallet-address): 如何追蹤一個數字貨幣錢包地址：先讀出金那一側、看清瀏覽器漏掉了什麼，並用帶標籤的多跳追蹤跟住資金來源。

[如何跨鏈追蹤被盜的數字貨幣資金](https://blocksec.com/zh-hant/metasleuth/how-to-trace-stolen-crypto-funds-across-chains): 如何跨鏈追蹤被盜的數字貨幣資金：五步法、資金在跨鏈橋上重新現身的那些檢查點，以及主體歸屬如何在層層跳轉中存活下來。

[區塊鏈分析適合交易所運營嗎？](https://blocksec.com/zh-hant/metasleuth/is-blockchain-analytics-good-for-exchange-operations): 區塊鏈分析適合交易所運營嗎？它覆蓋入金檢查與提現篩查；金鑰管理與事件響應則另有歸屬。

[區塊鏈分析適合機構級數字貨幣業務嗎？](https://blocksec.com/zh-hant/metasleuth/is-blockchain-analytics-good-for-institutional-crypto): 區塊鏈分析適合機構級數字貨幣業務嗎？看清它對機構運營究竟覆蓋了什麼、它在哪裡嚴絲合縫，以及在哪裡並不適用。

[區塊鏈分析適合監管報送嗎？](https://blocksec.com/zh-hant/metasleuth/is-blockchain-analytics-good-for-regulatory-reporting): 區塊鏈分析適合監管報送嗎？它提供有出處、有標籤的那一半資料；而資料與報送之間的那條線，才是工作真正開始的地方。

[區塊鏈監控工具適合做鏈上調查嗎：誠實的分工](https://blocksec.com/zh-hant/metasleuth/monitoring-vs-investigations): 區塊鏈監控工具適合做鏈上調查嗎？它們具備即時跟蹤與標籤，而追蹤深度屬於專門的取證工作。

[駭客事件後如何追蹤被盜數字貨幣：最初的 48 小時](https://blocksec.com/zh-hant/metasleuth/trace-stolen-crypto): 駭客事件後如何追蹤被盜數字貨幣：最初的 48 小時該先守住什麼、如何逐跳跟住資金，以及什麼時候該把調查人員拉進來。

[什麼是鏈上取證？](https://blocksec.com/zh-hant/metasleuth/what-is-on-chain-forensics): 什麼是鏈上取證：事件發生後對資金的追蹤、它與反洗錢篩查和監控的區別，以及汙點追蹤在什麼時候能回答問題。

[MetaSuites（原 MetaDock）：BlockSec 出品的開發者瑞士軍刀](https://blocksec.com/zh-hant/metasuites): 在十餘個區塊鏈瀏覽器上生成資金流向、顯示地址標籤、一鍵下載資料、模擬交易、檢視儲存與代理升級。

[Web3 安全最新動態](https://blocksec.com/zh-hant/newsroom): 關注 BlockSec 新聞室，獲取我們在安全分析、合作與產品更新方面的最新媒體報道。

[面向更高層執行的 Arbitrum 瀏覽器](https://blocksec.com/zh-hant/phalcon/arbitrum-explorer): 一款進階的 Arbitrum 瀏覽器，幫你看懂 optimistic rollup 交易內部到底發生了什麼。

[面向高吞吐多鏈執行與交易的 Avalanche 瀏覽器](https://blocksec.com/zh-hant/phalcon/avalanche-explorer): 一款進階且設計考究的 Avalanche 瀏覽器，幫你看清這條高速多鏈網路上究竟發生了什麼。

[面向深度交易分析的 Base 瀏覽器](https://blocksec.com/zh-hant/phalcon/base-explorer): 一款專業的、調查級的 Base 瀏覽器，幫你在這條由 Coinbase 支援的 OP Stack 鏈上追溯真實交易，理解 Base 交易究竟如何表現。

[區塊鏈合規](https://blocksec.com/zh-hant/phalcon/blockchain-compliance): 通過錢包與交易風險篩查、持續地址監控與自動告警開展區塊鏈合規，支撐 AML/CFT 監管要求。

[區塊鏈瀏覽器：交易視覺化與模擬](https://blocksec.com/zh-hant/phalcon/blockchain-explorer): 一款專業的、調查級的區塊鏈瀏覽器，讓你深入交易、從容決策

[區塊鏈安全服務](https://blocksec.com/zh-hant/phalcon/blockchain-security-services): BlockSec 以最精準的即時預警系統與自動化鏈上響應，在 Web3 威脅造成損害之前將其阻斷。

[區塊鏈安全軟體](https://blocksec.com/zh-hant/phalcon/blockchain-security-software): 面向協議與 L1/L2 公鏈的機構級 Web3 安全平臺，在 Web3 攻擊造成損害之前將其阻斷。

[看清真實交易的 BSC 瀏覽器](https://blocksec.com/zh-hant/phalcon/bsc-explorer): 用呼叫流程、資金流向、餘額與狀態變化，加上模擬器與除錯器，分析 BSC 上的真實執行。可搜尋任意 BSC 交易或地址。

[數字貨幣合規](https://blocksec.com/zh-hant/phalcon/compliance): 通過錢包與交易風險篩查、持續地址監控與自動告警開展數字貨幣合規，支撐 AML/CFT 監管要求。

[數字貨幣 AML 合規](https://blocksec.com/zh-hant/phalcon/crypto-aml-compliance): 通過錢包與交易風險篩查、持續地址監控與自動告警開展數字貨幣 AML 合規，儘早發現威脅。

[數字貨幣 AML 軟體：地址篩查與交易監控](https://blocksec.com/zh-hant/phalcon/crypto-aml-software): 面向交易所、OTC 櫃檯與支付服務商的數字貨幣 AML 軟體：篩查地址、監控交易、生成合規報告，每次篩查 0.1 美元起。

[數字貨幣地址篩查與交易監控 | Phalcon Compliance](https://blocksec.com/zh-hant/phalcon/crypto-compliance): 面向 VASP 的完整合規方案：地址篩查、持續地址監控與一鍵生成 STR，遏制非法活動與金融犯罪，支撐 AML/CFT 監管要求。

[數字貨幣錢包篩查](https://blocksec.com/zh-hant/phalcon/crypto-wallet-screening): BlockSec 數字貨幣錢包篩查即時識別高風險錢包，守住數字貨幣業務、改善客戶體驗，並儘早發現威脅。

[面向深度交易分析的 Ethereum 瀏覽器](https://blocksec.com/zh-hant/phalcon/ethereum-explorer): 一款專業的 Ethereum 瀏覽器：通過內建的模擬與除錯，呈現呼叫流程、資金流向、餘額變化、狀態更新與執行行為。

[深入交易，從容決策](https://blocksec.com/zh-hant/phalcon/explorer): Phalcon Explorer 幫助開發者、交易者與研究人員讀懂複雜交易，從而做出更好的決策。支援 ETH、BNB Chain、Arbitrum、Polygon 等多條鏈。

[面向 DAO 原生執行與深度交易分析的 Gnosis 瀏覽器](https://blocksec.com/zh-hant/phalcon/gnosis-explorer): 一款值得信賴的 Gnosis 瀏覽器，幫你真正看清 DAO 交易與治理執行。

[面向訂單驅動交易的 Hyperliquid 瀏覽器](https://blocksec.com/zh-hant/phalcon/hyperliquid-explorer): 一款成熟的 Hyperliquid 瀏覽器，幫你看清這套執行在 HyperEVM 上、高速且訂單驅動的交易系統裡究竟發生了什麼。

[KYT 合規](https://blocksec.com/zh-hant/phalcon/kyt-compliance): 通過錢包與交易風險篩查、持續地址監控與自動告警開展 KYT 合規，支撐 AML/CFT 監管要求。

[面向深度交易分析的成熟 Linea 瀏覽器](https://blocksec.com/zh-hant/phalcon/linea-explorer): 一套關鍵工具，幫你跟隨 zkEVM 的執行流程、追蹤內部呼叫與資產流動，在 Linea 上從容做出穩妥的決策。

[面向模組化執行與深度分析的 Manta 瀏覽器](https://blocksec.com/zh-hant/phalcon/manta-explorer): 一款進階的 Manta 瀏覽器，幫你完整細緻地追蹤 Manta 交易。

[洞察原生執行的 Mantle 瀏覽器](https://blocksec.com/zh-hant/phalcon/mantle-explorer): 一款調查級的 Mantle 瀏覽器，幫你完整細緻地跟蹤模組化交易，做出有把握的決策。

[用於精細交易分析的 Monad 瀏覽器](https://blocksec.com/zh-hant/phalcon/monad-explorer): 一款進階的 Monad 瀏覽器，幫你看清高速並行 EVM 鏈上究竟發生了什麼。

[Phalcon Network | 即時數字貨幣犯罪響應網路](https://blocksec.com/zh-hant/phalcon/network): 加入 BlockSec 發起的行業公共情報網路。獲取即時告警，在非法交易發生之前將其阻斷。立即註冊。

[為深度交易分析而建的 Optimism 瀏覽器](https://blocksec.com/zh-hant/phalcon/optimism-explorer): 一款高效能的 Optimism 瀏覽器，幫你完整細緻地追蹤 EVM 執行，理解 Optimism 交易真正的運作方式。

[用於深度交易分析的 Plasma 瀏覽器](https://blocksec.com/zh-hant/phalcon/plasma-explorer): 一款高效能的 Plasma 瀏覽器，幫你完整細緻地追蹤 EVM 執行，理解 Plasma 交易真正的運作方式。

[面向高頻鏈上活動的 Polygon 瀏覽器](https://blocksec.com/zh-hant/phalcon/polygon-explorer): 一款進階的 Polygon 瀏覽器，幫你理解在這條快速、低成本、互動密集的 EVM 鏈上究竟發生了什麼。

[用於深度交易分析的 Robinhood Chain 瀏覽器](https://blocksec.com/zh-hant/phalcon/robinhood-explorer): 一款高效能的 Robinhood Chain 瀏覽器，用於追蹤代幣化股票與 RWA 交易在 Robinhood 這條基於 Arbitrum 的以太坊 Layer 2 上究竟如何執行，提供完整的執行流程、模擬、資金流向與餘額變化。

[面向 zkEVM 等價執行與進階交易分析的 Scroll 瀏覽器](https://blocksec.com/zh-hant/phalcon/scroll-explorer): 一款成熟的 Scroll 瀏覽器，幫你看清以太坊級的執行究竟如何運作，以及 Scroll 上的交易細節如何展開。

[監控並攔截駭客攻擊的平臺](https://blocksec.com/zh-hant/phalcon/security): Phalcon Security 幫助協議方、流動性提供者與交易者、L1/L2 公鏈以及交易所發現攻擊、即時告警，並自動執行響應動作。

[為以太坊測試網上的進一步交易分析而建的 Sepolia 瀏覽器](https://blocksec.com/zh-hant/phalcon/sepolia-explorer): 一款專注的 Sepolia 瀏覽器，幫你跟住以太坊測試網上真實的執行，在交易進入主網部署之前理解它們的表現。

[面向指令級執行的 Solana 區塊鏈瀏覽器](https://blocksec.com/zh-hant/phalcon/solana-blockchain-explorer): 看清 Solana 交易究竟如何執行：跟隨呼叫流程、追蹤跨帳戶的資金流動、檢視清晰的餘額變化，從而快速、有把握地決策。

[數字貨幣錢包地址檢查器：免費 AML 風險評分](https://blocksec.com/zh-hant/phalcon/wallet-protection): 免費的數字貨幣錢包地址檢查器。輸入任意地址，2 秒得到 AML 風險評分，識別與被盜、受制裁或欺詐資金的風險敞口。

[隱私政策](https://blocksec.com/zh-hant/privacy-policy): BlockSec 網頁諮詢與資訊提交的隱私政策。

[區塊鏈安全前沿](https://blocksec.com/zh-hant/research): 瞭解 BlockSec 在 ISSTA、ACM TOSEM、USENIX Security 等頂級會議上發表的前沿區塊鏈安全研究。

[Rust 智能合約審計](https://blocksec.com/zh-hant/rust-smart-contract-audit): 把邏輯做到值得信賴。別讓缺陷毀掉你的 DApp —— 我們的 Rust 智能合約審計會核查核心規則，確保它們可靠並符合安全最佳實踐。

[Safe{Wallet} 安全監控](https://blocksec.com/zh-hant/safe-wallet-monitor): 在發起、簽名、執行的每一步模擬交易結果並提示相關風險，為你的 Safe{Wallet} 提供穩固的防護。

[數字貨幣安全事件庫](https://blocksec.com/zh-hant/security-incident): 查閱重大區塊鏈攻擊案例，瞭解關鍵漏洞與根因，用這些經驗加固你自己專案的防護。

[智能合約審計](https://blocksec.com/zh-hant/smart-contract-audit): 我們的智能合約審計會深入你 DApp 的核心架構，確保協議經得起實戰檢驗、達到全球最高安全標準。

[Solana 審計](https://blocksec.com/zh-hant/solana-audit): 驗證你的 Solana DApp 程式邏輯安全、可靠，並達到該生態嚴格的安全預期。

[Solidity 審計](https://blocksec.com/zh-hant/solidity-audit): 讓投資者放心，也讓你的程式碼跑得更好。我們用一套經過驗證的方法檢查你的 Solidity 智能合約，在上線前把問題修掉。

[中心化交易所解決方案](https://blocksec.com/zh-hant/solutions/centralized-exchanges): BlockSec 在每一層保護你的交易所：審查新上幣專案、監控核心資產、確保全球合規。

[數字貨幣支付解決方案](https://blocksec.com/zh-hant/solutions/crypto-payment): BlockSec 為數字貨幣支付提供交易對手風險篩查、收付款地址持續監控與自動通知，讓每一筆交易都值得信任。

[DeFi 協議解決方案](https://blocksec.com/zh-hant/solutions/defi-protocols): BlockSec 在上線前加固你的程式碼，上線後即時攔截攻擊，同時守住使用者資產與專案聲譽。

[L1/L2 公鏈解決方案](https://blocksec.com/zh-hant/solutions/l1l2-chain): BlockSec 在上線前守好你的基礎設施，並從源頭攔截攻擊，護住你的生態與聲譽。

[RWA 解決方案](https://blocksec.com/zh-hant/solutions/rwa): BlockSec 在每一層建立投資者信任、保障平臺安全：審計你的代幣化合約、篩查每一筆交易、守護你的金庫。

[穩定幣發行方解決方案](https://blocksec.com/zh-hant/solutions/stablecoin-issuer): BlockSec 在上線前加固你的合約，上線後即時監控交易，同時守住資產穩定性與監管信任。

[穩定幣合規：規則、凍結風險與支付反洗錢完全指南](https://blocksec.com/zh-hant/stablecoin): 穩定幣合規的完整脈絡：FATF 與 MiCA 對發行方的義務、USDT 與 USDC 的凍結是怎麼運作的，以及如何在一筆支付結算之前把它篩一遍。

[穩定幣發行方凍結風險白皮書](https://blocksec.com/zh-hant/stablecoin-freeze-risk-whitepaper): 下載 BlockSec 關於穩定幣發行方凍結風險的白皮書：四種凍結觸發條件、為什麼僅靠自託管不夠、金庫資金如何被汙染，以及如何應對並加快解凍。

[2026 年面向穩定幣業務的最佳反洗錢合規軟體](https://blocksec.com/zh-hant/stablecoin/best-aml-compliance-software-for-stablecoin-operations): 面向穩定幣業務的最佳反洗錢合規軟體對比：凍結可見性、多跳追蹤、篩查速度，以及免費的首次檢查。

[數字貨幣支付閘道器的反洗錢合規要求](https://blocksec.com/zh-hant/stablecoin/crypto-payment-gateway-aml-compliance-requirements): 數字貨幣支付閘道器的反洗錢合規要求：FATF 的風險為本控制、出入金篩查、監控與可疑交易報送義務，一份清單講完。

[穩定幣發行方如何管理凍結與黑名單風險？](https://blocksec.com/zh-hant/stablecoin/how-do-stablecoin-issuers-manage-freeze-and-blacklist-risk): 穩定幣發行方如何管理凍結與黑名單風險：四個風險維度、四個控制點，以及讓資金庫資金保持可用的那道篩查。

[USDT 與 USDC 的凍結是怎麼運作的？](https://blocksec.com/zh-hant/stablecoin/how-does-usdt-usdc-freezing-work): USDT 與 USDC 的凍結是怎麼運作的：發行方黑名單機制、Tether 實際凍結的頻率，以及如何盯住自己地址上的凍結敞口。

[如何查一個 USDT 地址：凍結狀態、資金來源與風險標籤](https://blocksec.com/zh-hant/stablecoin/how-to-check-a-usdt-address): 幾分鐘查完一個 USDT 地址：凍結與黑名單狀態、資金從哪兒來，以及風險標籤——從免費的第一次掃描到完整的 API 量級。

[如何監控穩定幣交易對手風險](https://blocksec.com/zh-hant/stablecoin/how-to-monitor-stablecoin-counterparty-risk): 如何沿完整路徑監控穩定幣交易對手風險：地址行為、資金池敞口，以及按週期重查，而不是開戶時查一次。

[如何對數字貨幣支付做制裁篩查](https://blocksec.com/zh-hant/stablecoin/how-to-screen-crypto-payments-for-sanctions): 如何對數字貨幣支付做制裁篩查：KYA 與 KYT 檢查、越過直接地址的多跳追蹤，以及結算之前要走的每一步。

[穩定幣跨境支付：鏈路兩端都要合規](https://blocksec.com/zh-hant/stablecoin/stablecoin-cross-border-payments): 穩定幣跨境支付需要在兩端篩查：付款側做 KYA、收款側做 KYT，並在結算之前完成制裁核查。

[穩定幣脫錨風險：什麼會打破錨定、過往案例與該盯的訊號](https://blocksec.com/zh-hant/stablecoin/stablecoin-depeg-risk): 講清穩定幣脫錨風險：錨定被打破的三種方式，UST 2022 與 USDC 2023 證明了什麼，以及儲備與贖回方面值得盯住的訊號。

[穩定幣發行方合規：FATF 與 MiCA](https://blocksec.com/zh-hant/stablecoin/stablecoin-issuer-compliance-fatf-and-mica): FATF 與 MiCA 之下的穩定幣發行方合規：兩套框架各自施加的風險為本義務、它們在哪裡重疊，以及如何用一套體系同時滿足兩邊。

[穩定幣清單：類型、實例，以及各自如何守住錨定](https://blocksec.com/zh-hant/stablecoin/stablecoin-list-types-and-examples): 按類型梳理的穩定幣清單：法幣支撐、數字貨幣超額抵押與合成型設計，各自怎麼守住錨定，以及每一類下發行的主要代幣。

[穩定幣監管動態與更新：2026 年的美國、歐盟與香港](https://blocksec.com/zh-hant/stablecoin/stablecoin-regulation-news-and-updates): 2026 年的穩定幣監管動態與更新：美國 GENIUS 法案的時間線、在歐盟已生效的 MiCA、香港的發牌，以及發行方要跟著改什麼。

[穩定幣資金庫安全最佳實踐](https://blocksec.com/zh-hant/stablecoin/stablecoin-treasury-security-best-practices): 穩定幣資金庫安全最佳實踐：五項治理動作與四項基礎能力，讓發行方的資金庫在關鍵時刻仍然可用。

[穩定幣錢包被凍結之後會發生什麼？](https://blocksec.com/zh-hant/stablecoin/what-happens-when-a-stablecoin-wallet-is-frozen): 穩定幣錢包被凍結之後會發生什麼：轉帳停了，但私鑰仍然是你的。三階段響應：弄清原因、評估範圍、對外溝通。

[什麼是穩定幣，它是如何被監管的？](https://blocksec.com/zh-hant/stablecoin/what-is-a-stablecoin-and-how-is-it-regulated): 什麼是穩定幣、它如何被監管：法幣支撐、數字貨幣抵押與演算法型三類各自怎麼守住價值，以及各個市場管它們的規則。

[數字貨幣支付業務為什麼需要反洗錢](https://blocksec.com/zh-hant/stablecoin/why-crypto-payment-businesses-need-aml): 數字貨幣支付業務為什麼需要反洗錢：義務背後的 FATF 標準、商業理由背後的資金凍結風險，以及同時滿足兩者的控制措施。

[在 L2 排序器層面攔截攻擊 | Phalcon STOP](https://blocksec.com/zh-hant/stop): 排序器威脅監控計劃（STOP）利用 Phalcon Security 的檢測引擎，在排序器層面為 L2 公鏈阻止攻擊，讓使用者安全、放心地使用。

[服務條款](https://blocksec.com/zh-hant/terms-of-service): BlockSec 網頁諮詢與資訊提交的服務條款。

[USDT 凍結與黑名單查詢 —— 查詢任意地址](https://blocksec.com/zh-hant/usdt-freeze-checker): 即時查詢某個 USDT（ERC-20 / TRC-20）地址是否被 Tether 凍結或拉黑。覆蓋 Ethereum 與 Tron 的即時鏈上資料，另附完整的凍結統計。

[Web3 審計](https://blocksec.com/zh-hant/web3-audit): 用我們深入的 Web3 審計與架構核驗守護你的 DApp，獲得一份經得起實戰檢驗的程式碼庫，兼顧可靠性與行業標準的完整合規。

[Web3 Companion：安全的 Web3 AI 智能體](https://blocksec.com/zh-hant/web3-companion): Web3 Companion 是 BlockSec 出品的開源智能體錢包。你的 AI 智能體可以在鏈上交易，但永遠碰不到你的私鑰，也改不了你的安全策略。

[x402 Compliance API —— 按次付費的 KYA/KYT](https://blocksec.com/zh-hant/x402-compliance-api): 通過 x402 協議從 AI 智能體執行 KYA/KYT 地址篩查 —— 按次 USDC 支付，無需 API key，覆蓋 9 條鏈。立即試用合規 API。
## Audit Reports

[Security Audit Report for SoSoValue Index](https://blocksec.com/audit-report/Security-Audit-Report-for-SoSoValue-Index): The SoSoValue Index Protocol is a cutting-edge spot index solution designed to make crypto investments simple and secured. SSI Protocol leverages on-chain smart contracts to repackage multi-chain, multi-asset portfolios into Wrapped Tokens (SSI). These tokens represent a basket of underlying assets, enabling Wrapped Tokens to track the value fluctuations of the spots basket, effectively achieving the effects of passive index investing.

[Security Audit Report for Bitget's bgw-swap-aggregator-evm](https://blocksec.com/audit-report/audit-report-bitget-s-bgw-swap-aggregator-evm): BWAggregator is a DEX aggregator that enables swaps across Uniswap and its fork protocols through specialized router and handler actions. The platform supports ERC20-to-ERC20, ETH-to-ERC20, and ERC20-to-ETH swaps through a meta-transaction architecture. Users can specify complex action sequences for the aggregator to execute atomically on their behalf, typically involving multiple swaps across different protocols. The system employs a threephase execution method with fund tracking. Fee collection comprises two components: a fixed deduction amount and a proportional fee amount.

[Security Audit Report for Bitway Labs's Bitway App Chain](https://blocksec.com/audit-report/audit-report-bitway-labs-s-bitway-app-chain): The Bitway App Chain of the Bitway Lab is a L1 blockchain, facilitating to unlock the value of underutilized Bitcoins. To support full Bitcoin compatibilities, the Bitway App Chain is designed to enable transactions to be signed with standard Bitcoin wallets for flexibility. The Bitway App Chain natively integrate lending and farming services, powered by Discreet Log Contracts (i.e., DLC). For the Bitcoin-collateralized lending system of the Bitway App Chain, it enables native Bitcoin-backed loans, integrating decentralized oracles (i.e., Oracle++), permissionless liquidity pools, and liquidations. Specifically, The Bitway App Chain implements a liquidity pool-based lending protocol that allows Bitcoin holders to borrow while enabling lenders to earn returns. Loan assets are managed on the Bitway App Chain, removing the need for third-party custodians during the loan period. In addition to lending, the Bitway App Chain also provides a farming service that rewards users for staking their coins. By participating in farming, users can lock their assets and earn incentives, distributed on an epoch basis.

[Security Audit Report for KEYRING's multisig-wallet-contracts](https://blocksec.com/audit-report/audit-report-keyring-s-multisig-wallet-contracts-1784184202): This project implements a permissionless multisig wallet system. A factory deploys deterministic minimal-proxy wallets for users and stores each wallet’s signer set and approval threshold. Wallets can receive native tokens, ERC20, ERC721, and ERC1155 assets, and allow withdrawals only after validating threshold EIP-712 signatures from approved signers. Each withdrawal type uses an independent nonce and deadline for replay protection, while recipients are restricted to wallet signers. The factory also emits standardized withdrawal events for created wallets.

[Security Audit Report for Lista's Lista Lending](https://blocksec.com/audit-report/audit-report-lista-s-lista-lending): This audit focuses on the smart contracts located in the src/folder of the repository, excluding the following directories: src/moolah/mocks/* src/moolah-vault/mocks/* src/vault-allocator/mocks/*

[Security Audit Report for Mantle's Fiat24 Contracts](https://blocksec.com/audit-report/audit-report-mantle-s-fiat24-contracts): Fiat24 is a digital banking platform built on blockchain technology that bridges banking services with the crypto ecosystem. The platform provides NFT-based digital accounts as unique identifiers for users, with each account represented as an ERC-721 token featuring customizable features and status management. Fiat24 supports multiple fiat currencies through tokenized representations, including USD24, EUR24, CHF24, GBP24, and CNH24, with real-time exchange rates and seamless cross-currency transactions. The platform features crypto deposit functionality that enables users to deposit USDC and other cryptocurrencies, automatically converting them to fiat tokens at current market rates.

[Security Testing Report for MegaETH: MegaEVM, Stateless Validator & SALT](https://blocksec.com/audit-report/audit-report-megaeth--megaevm--stateless-validator---salt): The security testing was conducted over a six-week period, from October 11, 2025 to November 28, 2025, and focused on: MegaETH EVM (MegaEVM), Small Authentication Large Trie (SALT), and Stateless Validator.

[Security Audit Report for Morph Emerald upgrade](https://blocksec.com/audit-report/audit-report-morph-emerald-upgrade): The target of this audit is the code repositories of Morph Emerald upgrade. The Morph Emerald upgrade introduces alternative fee transactions, enabling native multi-token gas payments on the Morph L2 chain. This upgrade allows users to pay gas fees using registered ERC-20 tokens.

[Security Audit Report for Neo X](https://blocksec.com/audit-report/audit-report-neo-x): Neo X is an EVM compatible sidechain incorporating Neo’s distinctive dBFT consensus mechanism. Serving as a bridge between Neo N3 and the widely used EVM network, Neo X will play a crucial role in expanding the Neo ecosystem and offering developers more opportunities for innovation.

[Security Audit Report for OKX's OKX Smart Wallet](https://blocksec.com/audit-report/audit-report-okx-s-okx-smart-wallet): The project implements an Account Abstraction (AA) wallet implementation on the Ethereum Virtual Machine (EVM) compatible chains, allowing users to deploy AA smart contract wallets. It also allows Externally Owned Accounts (EOAs) to extend transaction execution logic by setting the AA wallet code, simplifying the processing of complex transaction operations.

[Security Audit Report for OKX's Smart Wallet Recovery](https://blocksec.com/audit-report/audit-report-okx-s-smart-wallet-recovery): The project implements a cross-chain recovery system for unified smart accounts, focusing on the Ethereum Virtual Machine (EVM) stack implementation. The system integrates ZKEmail and ECDSA technologies to deliver an extensible, low-interaction, and multi-chain reusable recovery mechanism for EVM-compatible chains.

[Security Audit Report for OKX's smart-wallet-recovery & groth16-solana](https://blocksec.com/audit-report/audit-report-okx-s-smart-wallet-recovery----groth16-solana): This project is a smart account recovery system deployed on Solana. It combines ZK-Email zero-knowledge proofs, ECDSA signature verification, and a DKIM registry to provide scalable, low-interaction account recovery. Smart wallet providers can pre-register their DKIM public keys via the DKIM registry, eliminating the need to trust third-party DNS providers. When a user needs to recover an account, they submit proofs to the recovery-manager contract, which consist of an off-chain generated ZK-Email proof demonstrating ownership of a specific email and an off-chain 2FA-verified ECDSA signature. After verification, the smart account’s owner key can be updated, completing the account recovery process.

[Security Audit Report for Rabby Wallet's swap-router-v1](https://blocksec.com/audit-report/audit-report-rabby-wallet-s-swap-router-v1): The protocol is a decentralized exchange (DEX) router that facilitates efficient token swaps by integrating multiple aggregators through a flexible adapter pattern, while ensuring robust fee management. Its core component, the DEX Aggregator, is a smart contract system that optimizes trades by splitting orders across various DEXs to secure better prices and minimize slippage for users.

[Security Audit Report for AllScale's EIP7702 Contracts](https://blocksec.com/audit-report/security-audit-report-for-all-scale-s-eip-7702-contracts): EIP7702 Contracts of AllScale is a gasless wallet infrastructure built on EIP7702 account delegation. It lets whitelisted sponsors relay signed EIP712 authorizations on behalf of EOAs, executing fee-split token transfers and deposits. All wallet logic runs through a three-layer beacon proxy pattern, enabling seamless logic upgrades without changing the delegated contract. Specifically, EOAs delegate to the contract BeaconStub, which resolves the active implementation (i.e., thecontract EIP7702 froman upgradeable beaconcontract. Then, the contract BeaconStub delegatecalls into the implementation to execute transfers.

[Security Audit Report for Alpaca Delta Neutral Vault](https://blocksec.com/audit-report/security-audit-report-for-alpaca-delta-neutral-vault): The Alpaca Finance is a leveraged yield farming and liquidity providing protocol running on Binance Smart Chain (BSC) and Fantom. The audited implementation extends the previous version by adding the support of a new Delta Neutral Vault and its associated workers, including the workers that support MDEX and PancakeSwap.

[Security Audit Report for Aura](https://blocksec.com/audit-report/security-audit-report-for-aura): Aura Network is a high performance Layer1 ecosystem with built-in modularity, leading the mass adoption of Web3 in emerging markets. It has robust partnership network, expansive engineering resources and rich track record.

[Security Audit Report for BridgeV2 Contracts](https://blocksec.com/audit-report/security-audit-report-for-bridge-v2-contracts): Spherium Bridge utilizes LayerZero framework to bridge tokens from source chain to target chain.

[Security Audit Report for BurrowLand](https://blocksec.com/audit-report/security-audit-report-for-burrow-land): Burrowland is a decentralized lending and borrowing platform based on the NEAR blockchain. Burrowland allows users to lend tokens and earn interest, as well as borrow tokens by providing collateral and paying interest. All supplied collateral assets and borrowed assets for each account are used to compute the health factor of that account. If the health factor is less than 100%, it means the account can be partially liquidated and cannot borrow more without repaying some amount of the existing borrowed assets or providing additional collateral assets. It also provides a farming mechanism to incentivize users.

[Security Audit Report for Cakepie Contracts](https://blocksec.com/audit-report/security-audit-report-for-cakepie-contracts): Cakepie is a yield optimization protocol built upon PancakeSwap. It enables users to manage PancakeSwap V2/V3 positions and claim rewards and convert their CAKE token or locked CAKE positions from PancakeSwap on Cakepie. Users with voting powers can vote in Cakepie and votes will be cast to Pancake’s GaugeVoting. Cakepie also incorporates a bribe market where users can add bribes that are distributed to active voters.

[Security Audit Report for DeltaTrade](https://blocksec.com/audit-report/security-audit-report-for-delta-trade): DeltaTrade is a multi-chain decentralized trading protocol that enhances user capabilities with sophisticated on-chain trading strategies such as Grid Trading,  DCA, Rebalancing Grid, MultiChain Support, OrderBook, Full Platform Market Making and AI Powered Strategy.

[Security Audit Report for EOS EVM](https://blocksec.com/audit-report/security-audit-report-for-eos-evm): The EOS EVM serves as an implementation of the Ethereum Virtual Machine (EVM). It is implemented in C++ and compiled to a WASM binary to be executed within the EOS blockchain. The EOS EVM utilizes a modified version of Silkworm and Evmone for the execution of the EVM operations.

[Security Audit Report for Halo](https://blocksec.com/audit-report/security-audit-report-for-halo): Halo is a social monetization platform for the AI era. Earn passive rewards from posts, transactions, and engagements with 1M+ pioneers.

[Security Audit Report for LiNEAR](https://blocksec.com/audit-report/security-audit-report-for-li-near-1): LiNEAR Protocol is a liquid staking solution built on the NEAR Protocol. LiNEAR unlocks liquidity of the staked NEAR by creating a staking derivative to be engaged with various DeFi protocols on NEAR and Aurora, while also enjoying over 10% APY staking rewards of the underlying base tokens. LiNEAR is the cornerstone piece of the NEAR-Aurora DeFi ecosystem.

[Security Audit Report for Magpie Radpie](https://blocksec.com/audit-report/security-audit-report-for-magpie-radpie): Magpie launched Radpie, a yield optimization protocol built upon Radiant. Users could deposit their assets on Radpie to earn enhanced yields.

[Security Audit Report for Mellow Vaults](https://blocksec.com/audit-report/security-audit-report-for-mellow-vaults): The Mellow project provides an open platform for liquidity providers to earn rewards from their liquidities and strategists to earn performance fees by implementing active liquidity management strategies to manipulate the liquidities.

[Security Audit Report for Multichain veMULTI Contracts](https://blocksec.com/audit-report/security-audit-report-for-multichain-ve-multi-contracts): Multichain is the ultimate Router for web3. It is an infrastructure developed for arbitrary cross-chain interactions.

[Security Audit Report for Noah-DAO](https://blocksec.com/audit-report/security-audit-report-for-noah-dao): Noah DAO is a decentralized exchange built on the EOS EVM. It introduces a mechanism to incentivize liquidity provision and active governance participation by rewarding users with protocol tokens and voting rights, thereby aligning interests within the ecosystem.

[Security Audit Report for Octopus Restaking](https://blocksec.com/audit-report/security-audit-report-for-octopus-restaking): The NEAR Restaking project is launched by Octopus Team, and aims at enhancing the utilization of NEAR. Any user can deposit NEAR assets into the  Restaking protocol, which provides proof of stake to side chains registered with the protocol through a Restaking method. Users will not only earn rewards on NEAR but also receive token rewards from specific side chains. When a side chain's validator acts maliciously, users' assets may be at risk of being slashed.

[Security Audit Report for PancakeSwap Cross Farming Contracts](https://blocksec.com/audit-report/security-audit-report-for-pancake-swap-cross-farming-contracts): PancakeSwap launched a cross farming project. It involves allowing users to deposit LP tokens on EVM-compatible chains to the MasterChefV2 contract on the Binance Smart Chain network using the cBridge SGN network as the cross-chain message forwarder.

[Security Audit Report for PancakeSwap VECake](https://blocksec.com/audit-report/security-audit-report-for-pancake-swap-ve-cake): Pancake launched a governance project VECake for voting. VECake enables users to acquire voting powers by depositing their CAKE tokens. These voting powers empower users to vote on Pancake Gauge weights.

[Security Audit Report for Phoenix Bonds](https://blocksec.com/audit-report/security-audit-report-for-phoenix-bonds): Phoenix Bonds is a principal-protected bonding platform that helps protocols with liquidity-bootstrapping, provides perpetually-boosted yield to users and works with all yield bearing assets.

[Security Audit Report for Poly Contracts](https://blocksec.com/audit-report/security-audit-report-for-poly-contracts): Poly Network is a global cross-chain protocol for implementing blockchain interoperability and building Web3.0 infrastructure. Poly Network has connected a variety of over 35 different blockchains, including popular ones such as Ethereum, Polygon, Arbitrum, and BNB Chain, as well as others such as Aptos, Optimism, Neo, Metis, and Gnosis Chain. Since the launch, the protocol has enabled cross-chain asset transfer of more than $16 billion USD.

[Security Audit Report for Puffer Finance pufETH Contracts](https://blocksec.com/audit-report/security-audit-report-for-puffer-finance-puf-eth-contracts): Puffer is a decentralized native liquid restaking protocol (nLRP) built on Eigenlayer. It makes native restaking on Eigenlayer more accessible, allowing anyone to run an Ethereum Proof of Stake (PoS) validator while supercharging their rewards.

[Security Audit Report for PumpBTC Contracts](https://blocksec.com/audit-report/security-audit-report-for-pump-btc-contracts): The audit focuses on PumpBTC Contracts, enabling users to stake Wrapped Bitcoin tokens into the PumpStaking contract and mint pumpBTC tokens at a 1:1 ratio. These assets are then unwrapped into BTC for staking and rewards on Babylon. The protocol offers standard and instant unstake options with fees.

[Security Audit Report for Ref Exchange](https://blocksec.com/audit-report/security-audit-report-for-ref-exchange): Ref-Exchange is a decentralized exchange (DEX) deployed on the NEAR blockchain by Ref Finance. The protocol implements different types of trading pairs based on token characteristics, such as simple pool, stable pool, and rated pool. For instance, for trading pairs involving stablecoins (i.e., stable pool), the protocol adopts the Curve model to minimize impermanent loss, fees, and slippage. Additionally, to facilitate user operations like providing liquidity and swapping, the protocol has implemented an internal account model. Users are required to pay a certain storage fee to register an internal account in order to interact with the protocol for fund transactions.

[Security Audit Report for Side Protocol](https://blocksec.com/audit-report/security-audit-report-for-side-protocol): Side Protocol serves as the extension layer of Bitcoin. At its core is Side Chain, the first high-performance, fully Bitcoin-compatible dPoS Layer 1 blockchain, designed to shape the future of Bitcoin finance. Side Chain supports bridging for native BTC and other Bitcoin assets, including runes.

[Security Audit Report for StakeTogether st-v1-contracts](https://blocksec.com/audit-report/security-audit-report-for-stake-together-st-v1-contracts): StakeTogether is an Ethereum staking protocol designed especially for communities. It allows users to deposit ETH into staking pools and receive stpETH tokens as collateral. The purpose of StakeTogether is to facilitate the creation of validators on the Ethereum 2.0 beacon chain to support the security and operation of the entire Ethereum network.

[Security Audit Report for Stratos Chain and Stratos Decentralized Storage (SDS)](https://blocksec.com/audit-report/security-audit-report-for-stratos-chain-and-stratos-decentralized-storage-sds): Stratos is a decentralized data architecture. Stratos provides scalable, reliable, and self-balanced storage, database, and computation networks, creating a robust foundation for data processing.

[Security Audit Report for WenCore](https://blocksec.com/audit-report/security-audit-report-for-wen-core): WEN Protocol is a decentralized, censorship-resistant, and community-owned protocol that enables users to secure loans using  Liquidity Staking Derivatives (LSDs) as collateral. These loans have minimal fees and provide up to 7x leverage, with repayments made in wenUSD.

[Security Audit Report for Windranger Auction Contract](https://blocksec.com/audit-report/security-audit-report-for-windranger-auction-contract): Windranger facilitates the growth of mantle and web3 ecosystems by partnering with builders to architect extraordinary cultures globally. It provides long-term talent, recruitment, HR, and operations services for companies in the Web3 and Metaverse space - including DAOs.

[Security Audit Report for YPool Smart Contract](https://blocksec.com/audit-report/security-audit-report-for-y-pool-smart-contract): XY Finance is a cross-chain interoperability protocol aggregating DEXs & Bridges. With the ultimate routing across multi-chains, borderless and seamless swapping is just one click away.

[Security Testing Report for Radiant V2](https://blocksec.com/audit-report/security-testing-report-for-radiant-v2): Radiant V2 is a cross-chain DeFi lending protocol developed by Radiant Capital. Radiant Capital has engaged us to perform security testing (as the red team) on the smart contracts of Radiant V2 to identify potential risks.

## Blog posts

[USDT Blacklisting in 2025: $1.26B Frozen on Ethereum & Tron](https://blocksec.com/blog/1-26-billion-frozen-usdt-blacklisting-on-ethereum-and-tron-in-2025): Tether blacklisted 4,163 USDT addresses in 2025, freezing $1.26B on Ethereum and Tron. See on-chain trends, risks, and how to protect your wallets. (Feb 2 2026)

[#10: ThirdWeb Incident: Incompatibility Between Trusted Modules Exposes Vulnerability](https://blocksec.com/blog/10-third-web-incident-incompatibility-between-trusted-modules-exposes-vulnerability): Discover how ThirdWeb's trusted modules incompatibility led to a critical security vulnerability. Learn key insights and protect your Web3 projects today. (Feb 22 2024)

[$17M Closed-Source Smart Contract Exploit: Arbitrary-Call Vulnerability in SwapNet and Aperture Finance](https://blocksec.com/blog/17m-closed-source-smart-contract-exploit-arbitrary-call-swapnet-aperture): An in-depth analysis of the $17M closed-source smart contract exploit affecting SwapNet and Aperture Finance, caused by an arbitrary-call vulnerability. We reconstruct attack paths from decompiled bytecode and on-chain traces. (Jan 28 2026)

[#9 1inch Incident: From Calldata Corruption to Forged Settlement: Binary Exploitation Goes On-Chain](https://blocksec.com/blog/1inch-incident-from-calldata-corruption-to-forged-settlement-binary-exploitation-goes-on-chain): Deep dive into the March 2025 1inch Fusion V1 resolver exploit: $5M lost via calldata underflow and trust boundary flaws, blending DeFi low-level ABI attacks (Feb 11 2026)

[#5: Platypus Finance: Surviving Three Attacks with a Stroke of Luck](https://blocksec.com/blog/5-platypus-finance-surviving-three-attacks-with-a-stroke-of-luck): We show the three attacks to Platypus Finance and how BlockSec rescued 2.4 Million USDC for the protocol. (Feb 22 2024)

[Best Crypto Compliance Software: 6 Top Picks Compared (2026)](https://blocksec.com/blog/6-best-blockchain-and-crypto-compliance-software-solutions): Compare 6 crypto compliance platforms: Phalcon Compliance, Chainalysis, Elliptic, TRM Labs, AMLBot, Merkle Science. Pricing, chains, and best-fit use cases. (May 8 2026)

[#6: Hundred Finance Incident: Catalyzing the Wave of Precision-Related Exploits in Vulnerable Forked Protocols](https://blocksec.com/blog/6-hundred-finance-incident-catalyzing-the-wave-of-precision-related-exploits-in-vulnerable-forked-protocols): On April 16th, 2023, Hundred Finance, a Compound V2 fork, was attacked, leading to a loss of about $7.4 million. (Feb 16 2024)

[#7: ParaSpace Incident: A Race Against Time to Thwart the Industry's Most Critical Attack Yet](https://blocksec.com/blog/7-para-space-incident-a-race-against-time-to-thwart-the-industry-s-most-critical-attack-yet): Discover how the ParaSpace attack exposed critical blockchain vulnerabilities and learn key mitigation strategies to protect your DeFi assets today. (May 25 2026)

[#8: SushiSwap Incident: A Clumsy Rescue Attempt Leads to a Series of Copycat Attacks](https://blocksec.com/blog/8-sushi-swap-incident-a-clumsy-rescue-attempt-leads-to-a-series-of-copycat-attacks): On April 9, 2023, SushiSwap became the target of an exploit due to an Unverified External Parameter. The total loss is about $3.3 million. (Feb 18 2024)

[#9: MEV Bot 0xd61492: From Predator to Prey in an Ingenious Exploit](https://blocksec.com/blog/9-mev-bot-0xd61492-from-predator-to-prey-in-an-ingenious-exploit): On August 3, 2023, an MEV Bot on Arbitrum was attacked, resulting in $800K in loss. The root cause of this attack was **Insufficient User Input Verification**. (Feb 21 2024)

[The Race Against Time and Strategy: About the AnySwap Rescue and Things We Have Learnt](https://blocksec.com/blog/AnySwap-Rescue-Analysis-Lessons-from-a-DeFi-Security-Triumph): Discover the critical insights from AnySwap's emergency rescue operation against a smart contract attack and the lessons learned for DeFi security (Mar 4 2024)

[Beyond the Market Risk: A Logic Bug Identified in SushiSwap's KashiPairMediumRiskV1 Contract](https://blocksec.com/blog/a-logic-bug-identified-in-sushiswaps-kashi-pair-medium-risk-v1-contract-1): Understanding the Impact of SushiSwap's Contract Flaw: Dozens of pools on Ethereum and BSC were at risk due to the KashiPairMediumRiskV1 contract's logic bug (Feb 4 2024)

[A New Memory Overwrite Vulnerability Discovered in Wyvern Protocol](https://blocksec.com/blog/a-new-memory-overwrite-vulnerability-discovered-in-wyvern-protocol): Wyvern Protocol Vulnerability Alert: Potential for Exploit Leads to Security Concerns (Jan 29 2024)

[A Short Analysis of the Wild Exploitation of CVE-2021–39137](https://blocksec.com/blog/a-short-analysis-of-the-wild-exploitation-of-cve-2021-39137): Explore the security breakdown of the CVE-2021-39137 exploit and its impact on Ethereum's blockchain (Jan 29 2024)

[Blockchain Regulations: From Legal Frameworks to Enforcement](https://blocksec.com/blog/a-strategic-guide-to-blockchain-regulations-from-legal-frameworks-to-on-chain-enforcement): Crypto's Wild West era is over. Learn how MiCA, US rules, and FATF shape blockchain regulations — and how Phalcon Compliance automates screening and reporting. (Mar 5 2026)

[Crypto Compliance for AI Agents: Build KYA/KYT with X402](https://blocksec.com/blog/agent-native-crypto-compliance-build-kya-kyt-with-x402): Learn how X402 lets AI agents run KYA/KYT compliance checks via per-request crypto payments—no API keys, no subscriptions. Build agent-native compliance today. (May 25 2026)

[AI Trading Security: How Risk Evolves in Web3](https://blocksec.com/blog/ai-trading-security-the-evolution-of-risk-in-the-age-of-intelligent-trading): How do AI agents reshape Web3 trading — and its risks? BlockSec and Bitget explore the new security paradigm for automated crypto trading. (Jan 27 2026)

[What Is AML Compliance for Crypto Exchanges? The Five VASP Obligations](https://blocksec.com/blog/aml-compliance-crypto-exchanges): AML compliance for crypto exchanges means five VASP obligations: registration and licensing, customer due diligence, transaction monitoring, suspicious transaction reporting, and record-keeping. Learn the framework and where on-chain monitoring fits. (Jul 29 2026)

[Analyze 10,000 TPS: Phalcon Explorer Now Supports Monad](https://blocksec.com/blog/analyze-10-000-tps-phalcon-explorer-now-supports-monad): Analyze Monad’s 10,000 TPS EVM with Phalcon Explorer: debug parallel execution, trace complex DeFi interactions, and monitor smart contract fund flows. (Dec 24 2025)

[As an LP, How to Withdraw Funds Timely Before Protocol Pauses](https://blocksec.com/blog/as-an-lp-how-to-withdraw-funds-timely-before-protocol-pauses): BlockSec and Cobo have collaborated to develop a solution that assists LPs in withdrawing funds before the protocol pauses and the liquidity pool freezes. (Nov 14 2023)

[Australia VASP Framework: What Institutions Must Prepare](https://blocksec.com/blog/australia-vasp-compliance-framework): Australia's DCE era ends as the VASP framework takes effect. Learn the new AML/CTF rules, key deadlines, and how to prepare for VASP compliance. (Jun 29 2026)

[Why Is Automated Incident Response Crucial in Web3 Security?](https://blocksec.com/blog/automated-incident-response-crucial-web3-security): Discover why automated incident response is essential for Web3 security. Learn how blockchain projects can quickly mitigate attacks and protect DeFi assets. (Apr 21 2026)

[#3 Balancer V2 Incident: A Rounding Inconsistency Breaks the Invariant and Propagates Across Chains](https://blocksec.com/blog/balancer-v2-incident-a-rounding-inconsistency-breaks-the-invariant-and-propagates-across-chains): Nov 3, 2025 Balancer V2 exploit: rounding inconsistency broke the invariant, deflated BPT pricing, spread across chains; $125M lost, $45M recovered. (Feb 11 2026)

[Basics of Blockchain legal Issues in 2026](https://blocksec.com/blog/basics-of-blockchain-legal-issues-in-2026): Blockchain legal issues can stall growth. Learn how to spot AML, sanctions, and fund flow risks in real time with one-click compliance reports. (May 25 2026)

[Best Practices for Smart Contract Security: Ensuring Trust and Confidence](https://blocksec.com/blog/best-practices-for-smart-contract-security-ensuring-trust-and-confidence): Discover the best practices and innovative solutions provided by BlockSec, a leading blockchain security company, to safeguard your smart contracts from potential hacks and ensure trust in the blockchain ecosystem. (Apr 20 2024)

[What Are the 7 Key Features of Transaction Simulation Phalcon Explorer 1.0](https://blocksec.com/blog/beyond-7-days-exploring-the-endless-possibilities-of-phalcon-beyond-7-days-exploring-the-endless-possibilities-of-phalcon): We were thrilled to receive so much positive feedback and engagement from both longtime users and new followers after launching our 7 Days of Phalcon journey on Twitter. (May 31 2023)

[Tracking Illicit Crypto Funds from Human Trafficking](https://blocksec.com/blog/block-sec-and-fbi-tracking-illicit-funds-from-human-trafficking): Learn how crypto "guarantee platforms" fuel human trafficking with USDT escrow — and how BlockSec's Phalcon Compliance helps trace illicit funds in real time. (Sep 23 2025)

[BlockSec and Tokenlon Reached Strategy Partnership](https://blocksec.com/blog/block-sec-and-tokenlon-reached-strategy-partnership): BlockSec and Tokenlon join forces to enhance crypto assets security and risk management (Mar 5 2024)

[BlockSec Closes Seed Plus Funding Round with $8M Raised](https://blocksec.com/blog/block-sec-closes-seed-plus-funding-round-with-8-m-raised): Blockchain security provider BlockSec has raised $8 million in a funding round led by Vitalbridge Capital and Matrix Partners, aiming to enhance decentralized application security. (Apr 18 2024)

[BlockSec: Enhancing Blockchain Security Audits with Fuzzing Techniques](https://blocksec.com/blog/block-sec-enhancing-blockchain-security-audits-with-fuzzing-techniques): Explore the application of fuzzing in blockchain security audits and how BlockSec utilizes this technique to proactively identify and mitigate vulnerabilities in smart contracts and EVM chains, ensuring comprehensive assessments for blockchain systems. (Apr 8 2024)

[BlockSec Has Closed the Seed Funding Raising](https://blocksec.com/blog/block-sec-has-closed-the-seed-funding-raising): BlockSec has closed the seed funding raising that was led by Fenbushi Capital, with participation from A&T Capital, Qulian, Impossible Finance, Incuba Alpha and NEAR MetaWeb Ventures. (Jun 5 2026)

[BlockSec Launches Phalcon: The World's First Crypto Hack Blocking System for Web3 Security](https://blocksec.com/blog/block-sec-launches-phalcon-block-the-world-s-first-crypto-hack-blocking-system-for-web3-security): BlockSec Phalcon will revolutionize the fight against hackers in the Web3 world. (Nov 15 2023)

[BlockSec Partners with IOC and AЯMRD to Enhance Web 3.0 Security](https://blocksec.com/blog/block-sec-partners-with-ioc-and-a-ya-mrd-to-enhance-web-3-0-security): BlockSec and Intelligence On Chain (IOC) have partnered to provide the 'AЯMRD' suite, delivering robust security solutions for Web 3.0 projects in the evolving blockchain landscape. (Jan 17 2024)

[BlockSec’s Perspective on the Jump “Counter Exploit”: Does the Vulnerability Really Exist?](https://blocksec.com/blog/block-sec-s-perspective-on-the-jump-counter-exploit-does-the-vulnerability-really-exist): The article provides a detailed analysis of the Jump counter exploit, explaining the steps involved and highlighting the fundamental differences between this exploit and the Platypus case. (Apr 18 2024)

[BlockSec September Business Travel Plans](https://blocksec.com/blog/block-sec-september-business-travel-plans): BlockSec announces its travel itinerary for September, with visits to Singapore, Berlin, and Shanghai, where they will be participating in various events and conferences to share their expertise in Web3 security and usability. (Apr 18 2024)

[BlockSec USDT Freeze Tracker Is Live](https://blocksec.com/blog/block-sec-usdt-freeze-tracker-is-live): USDT Freeze Tracker: real-time freeze/unfreeze/destroy checks on Ethereum and Tron. Search addresses, trace events, and review governance proposals. (Feb 4 2026)

[Developer Guide: Integrating Blockchain Compliance APIs and Infrastructure](https://blocksec.com/blog/blockchain-compliance-api-integration-developer-guide): Developer guide to blockchain compliance API integration. Covers KYT setup, address monitoring, and risk response logic. (Jun 8 2026)

[Rules of Engagement and Production Safety for Institutional Blockchain Penetration Testing](https://blocksec.com/blog/blockchain-penetration-testing-rules-of-engagement): Rules of engagement for blockchain penetration testing: scope, authorization, operating limits, production safeguards, stop criteria, and remediation retest. (Sep 3 2026)

[Blockchain Regulatory Compliance: A Practical Guide](https://blocksec.com/blog/blockchain-regulatory-compliance-making-it-practical-for-your-business): Struggling with blockchain regulatory compliance? Phalcon Compliance delivers real-time KYT/KYA, global rule coverage, and sub-100ms risk scoring to keep your crypto platform compliant. (Feb 5 2026)

[Blockchain Transaction Security Monitoring Tool with the Lowest False Positive Rate](https://blocksec.com/blog/blockchain-transaction-security-monitoring-tool-with-the-lowest-false-positive-rate): This article explains the importance of low false positive rates in hack monitoring systems and introduces Phalcon, a platform known for its accuracy in threat monitoring and attack-blocking capabilities. (May 25 2026)

[Blocked HomeCoin Attack: Industry's First Successful Blocking Story](https://blocksec.com/blog/blocked-home-coin-attack-the-industry-s-first-successful-blocking-story): Let's learn about the game-changing story in Web3: the industry's first successful defense against hacks. (Dec 18 2023)

[Blocked Paraspace Attack: Industry's Most Important Block that Rescued $5,000,000](https://blocksec.com/blog/blocked-paraspace-attack-industry-s-most-important-block-that-rescued-5-000-000): Let's take a look at the industry's industry's most important block that rescued $5,000,000. (Dec 22 2023)

[Blocked Platypus Attack: Industry's First Counter-Exploitation of a Hacker's Contract](https://blocksec.com/blog/blocked-platypus-attack-industry-s-first-counter-exploitation-of-a-hacker-s-contract): Let's take a look at the industry's first counter-exploitation of a hacker's contract. (Dec 21 2023)

[Blocked Saddle Finance Attack: Industry's First Influential Blocking to Rescue $3,800,000](https://blocksec.com/blog/blocked-saddle-finance-attack-industry-s-first-influential-blocking-to-rescue-3-800-000): Let's take a look at the industry's first influential blocking that rescued $3,800,000. (Dec 19 2023)

[Blocked TransitSwap Attack: Industry's First "Hacking Back" to Rescue $300,000](https://blocksec.com/blog/blocked-transit-swap-attack-industry-s-first-hacking-back-to-rescue-300-000): Let's take a look at the industry's first "hacking back" that rescued $300,000. (Dec 20 2023)

[BlockSec and Blockscout Join Forces for Advanced Transaction Analysis](https://blocksec.com/blog/blocksec-blockscout-metasuites-phalcon-partnership): We are thrilled to announce our partnership with Blockscout! 🎉 (Mar 26 2024)

[BlockSec Completed Security Audit for Neo X](https://blocksec.com/blog/blocksec-neo-x-audit-collaboration): BlockSec has completed the security audit for Neo X, the EVM-compatible and MEV-resistant sidechain of Neo. (Aug 1 2024)

[BlockSec’s Perspectives and Solutions on the Security of L2 Blockchains](https://blocksec.com/blog/blocksec-perspectives-and-solutions-on-the-security-of-l2-blockchains): We will first systematically review the security challenges of L2 blockchains and then propose our solutions. (Feb 1 2024)

[Phalcon Security 2.0 Unleashed: A New Era of Hack Prevention](https://blocksec.com/blog/blocksec-phalcon-2-0-unleashed-new-era-hack): Discover Phalcon Security 2.0, BlockSec's platform for real-time crypto hack prevention, mempool monitoring, and attack blocking. Secure your protocol now! (May 25 2026)

[BlockSec Phalcon Explorer: Empowering TVL Growth for the EVM Chain](https://blocksec.com/blog/blocksec-phalcon-explorer-empowering-tvl-growth-evm-chain): Discover how Phalcon Explorer drives TVL growth on EVM chains. Explore DeFi analytics and boost your blockchain insights today with BlockSec. (Aug 24 2023)

[Phalcon Security Safeguards Yei Finance's $140M+ Assets in Real Time](https://blocksec.com/blog/blocksec-phalcon-safeguards-yei-finance-140m-assets-in-real-time): How Yei Finance, the largest money market on Sei, protects $140M+ in TVL with Phalcon Security: 24/7 real-time monitoring and millisecond attack blocking. (Feb 12 2025)

[Phalcon Security Secures Solana Ecosystem with Enhanced Real-Time Protection](https://blocksec.com/blog/blocksec-phalcon-supports-solana): Enhance Solana security with Phalcon Security's real-time threat detection and proactive measures. Protect your blockchain protocols today with BlockSec. (Nov 13 2025)

[2025 Crypto Crime Report: Key Trends & On-Chain Data](https://blocksec.com/blog/blocksec-releases-the-2025-crypto-crime-report): Explore BlockSec's 2025 Crypto Crime Report: Ethereum & TRON trends, $100B sanctions surge, $1.5B Lazarus exploit, stablecoin enforcement. Download now. (Feb 27 2026)

[BlockSec’s Retrospective on DeFi Protocol Security in 2023](https://blocksec.com/blog/blocksec-retrospective-on-defi-protocol-security-in-2023): New trends in DeFi protocol security in 2023 and BlockSec's perspective on how to secure DeFi protocols (May 27 2026)

[BlockSec Supports The BTC Ecosystem!](https://blocksec.com/blog/blocksec-supports-btc-ecosystem): Discover how BlockSec boosts Bitcoin ecosystem security with advanced blockchain solutions. Safeguard your BTC projects today with our expert Web3 tools. (Aug 7 2024)

[BonqDAO Exploited on Polygon: $120M Stolen Due to Flawed Logic](https://blocksec.com/blog/bonq-dao-exploited-on-polygon-120-m-stolen-due-to-flawed-logic): BonqDAO on Polygon suffered a $120M attack due to flawed logic, resulting in significant losses and highlighting the importance of DeFi security. (May 25 2026)

[BTC Cross-Chain Monitoring & Chainlink PoR API: Setting a New Standard for BTCFi Security](https://blocksec.com/blog/btc-cross-chain-monitoring-por): Enhance BTCFi security with BlockSec's solutions. Learn about BTC-wrapped asset risks like depegging and cross-chain vulnerabilities, and how Chainlink PoR and (Jan 10 2025)

[Building a Secure Stablecoin Payment Network: BlockSec Partners with Morph](https://blocksec.com/blog/building-a-secure-stablecoin-payment-network-blocksec-partners-with-morph): BlockSec joins Morph to bring institutional-grade audits, pentesting, and protection to global stablecoin payments through the $150M Morph Payment Accelerator. (Mar 18 2026)

[#8 Bunni Incident: Repeated Small Withdrawals Compound a Rounding Error into an $8.4M Drain](https://blocksec.com/blog/bunni-incident-repeated-small-withdrawals-compound-a-rounding-error-into-an-8.4m-drain): On Sept 2, 2025, Bunni V2 was exploited via idle-balance rounding, draining ~$8.4M from USDC/USDT and weETH/ETH pools; protocol declared bankruptcy Oct 23. (Feb 11 2026)

[Bybit $1.5B Hack: In-Depth Analysis of the Malicious Safe Wallet Upgrade Attack](https://blocksec.com/blog/bybit-1-5-b-hack-in-depth-analysis-of-the-malicious-safe-wallet-upgrade-attack): This blog offers a comprehensive technical breakdown of the attack process and essential security lessons for digital asset protection. Learn effective strategies to bolster blockchain security and prevent similar exploits. (May 25 2026)

[#2 Bybit Incident: A Web2 Breach Enables the Largest Crypto Hack in History](https://blocksec.com/blog/bybit-incident-a-web2-breach-enables-the-largest-crypto-hack-in-history): Bybit lost ~$1.5B on Feb 21, 2025 after a Safe{Wallet} S3 code injection let an attacker swap the Safe multisig proxy's masterCopy and drain assets. (Feb 9 2026)

[#1 Cetus Incident: One Unchecked Shift Drains $223M in the Largest DeFi Hack of 2025](https://blocksec.com/blog/cetus-incident-one-unchecked-shift-drains-223m-largest): On May 22, 2025, Cetus Protocol on Sui was exploited, draining multiple pools and ~$223M, via a flawed u256 shift check that let attackers mint fake liquidity. (Feb 9 2026)

[Blockchain Compliance Platform: 2026 CEX Infrastructure Requirements](https://blocksec.com/blog/cex-blockchain-compliance-platform-2026): 2026 blockchain compliance guide for CEX. Covers real-time KYT, multi-chain attribution, case management, policy automation, and API integration for sanctions and exploit-linked funds. (Jun 8 2026)

[COLDCARD Incident: When a Wallet's "Random" Seed Wasn't Random](https://blocksec.com/blog/coldcard-entropy-failure-seed-recovery): A single build flag broke COLDCARD's seed entropy for years. Here's how it worked, $91M+ in verified losses, and why the hotfix itself needed fixing. (Aug 7 2026)

[Copycats of the Popsicle Finance Attack](https://blocksec.com/blog/copycats-of-the-popsicle-finance-attack): The article presents a list of transactions that have called the "collectFees(0,0)" function of the SorbettoFragola contract, along with their corresponding timestamps and transaction hashes. (Apr 18 2024)

[#6 Cork Protocol Incident: Two Independent Flaws Combine into One Devastating Exploit Chain](https://blocksec.com/blog/cork-protocol-incident-two-independent-flaws-combine-into-one-devastating-exploit-chain): Cork Protocol exploited on Ethereum, $12M lost due to HIYA manipulation and missing access control in Uniswap v4 hook; CT/DS drained from reserves. (Feb 11 2026)

[What Is Crypto Address Risk Screening: The Four-Step Mechanism Explained](https://blocksec.com/blog/crypto-address-risk-screening): Crypto address risk screening evaluates a wallet address for AML and CFT risk in a single pass. Learn the four-step mechanism, six risk levels, and seventeen risk indicators that shape the output. (Jul 29 2026)

[On-Chain Compliance for Crypto Payments: AML/CFT, Freeze Risk & a 7-Point Checklist](https://blocksec.com/blog/crypto-aml-cft-kyt-kya): On-chain AML/CFT for crypto payments: how KYA, KYT and SAR/STR cover what the Travel Rule misses, plus stablecoin freeze risk and a 7-point check. (Aug 5 2026)

[How to Evaluate a Crypto Compliance Platform: An AML Checklist](https://blocksec.com/blog/crypto-aml-checklist): AML checklist for crypto compliance platforms. Covers wallet screening, transaction monitoring, and vendor criteria for exchanges and custodians. (Jun 8 2026)

[Crypto ATMs Under Fire: FinCEN & AUSTRAC Tighten AML Rules](https://blocksec.com/blog/crypto-atms-under-global-scrutiny-fincen-austrac-tighten): Crypto ATMs face a global crackdown. Learn how FinCEN and AUSTRAC are targeting fraud and money laundering risks — and what it means for Web3 compliance. (Oct 17 2025)

[Crypto Compliance Infrastructure: Buy vs. Build ROI Analysis](https://blocksec.com/blog/crypto-compliance-infrastructure-buy-vs-build-roi): Buy vs. build ROI analysis for crypto AML infrastructure. Covers hidden costs, false positives, and scalability. (Jun 8 2026)

[Crypto Compliance Software: Daily Workflows for AML Analysts](https://blocksec.com/blog/crypto-compliance-software-aml-analyst-workflows): Daily AML workflow guide for crypto compliance. Covers alert triage, KYT tracing, mixer detection, and SAR filing. (Jun 8 2026)

[Best Crypto Compliance Software: KYT & AML Tools for VASPs](https://blocksec.com/blog/crypto-compliance-software-guide): Facing FATF or MiCA penalties? Compare crypto compliance software for VASPs: KYA screening, KYT monitoring, cross-chain tracing and one-click STR/SAR reporting. (May 28 2026)

[Crypto Compliance Tools: A Practical Guide for Web3 and TradFi Integration](https://blocksec.com/blog/crypto-compliance-tools-web3-tradfi-guide): Manual audits can't keep up with on-chain throughput. See how Web3 and TradFi teams deploy KYA, KYT, AML scoring, and STR tools to stay compliant at scale. (May 28 2026)

[Blockchain Compliance Platforms: An Integration Checklist for Custodian CTOs](https://blocksec.com/blog/crypto-custodian-compliance-platform-integration): Checklist for custodian CTOs evaluating blockchain compliance platforms. Covers API latency, wallet screening, AML engines, and phased deployment. (Jun 8 2026)

[Crypto Exchange Compliance: Real-Time AML/CFT Control](https://blocksec.com/blog/crypto-exchange-compliance-with-emphasis-on-real-time-aml-cft-control-in-2026): Is your crypto exchange truly compliant? Learn how real-time screening, live monitoring, and one-click STR/SAR reporting close the AML/CFT gap. (Feb 13 2026)

[Crypto Payment System Architecture: The 6 Layers and How Money Moves Through Them](https://blocksec.com/blog/crypto-payment-architecture): Crypto payment architecture in six layers, from blockchain settlement to custody and fiat ramps — what each does, plus the pay-in and pay-out flows. (Aug 5 2026)

[Biggest Crypto Payment Hacks & the Attack Surface Beneath Them](https://blocksec.com/blog/crypto-payment-hacks-attack-surface): Bybit $1.5B, UPCX $70M, MoonPay $250K: how supply-chain compromise, leaked admin keys and phishing hit crypto payments — and what contracts must enforce. (Aug 5 2026)

[Key Management & Operational Security for Crypto Payments](https://blocksec.com/blog/crypto-payment-key-management): Key management for crypto payments: MPC vs multisig, HSM vs TEE, hot vs cold — plus blind signing, signing isolation, DNS, identity and AI Agent risk. (Aug 5 2026)

[Global Crypto Payment License Map: MSB, MiCA, MPI](https://blocksec.com/blog/crypto-payment-license-map): Which crypto payment license you need by jurisdiction: US MSB/MTL, EU MiCA CASP, Singapore MPI, Hong Kong MSO, UK and UAE — plus 8 shared requirements. (Aug 5 2026)

[Crypto Payment Security & Compliance: The Controls to Confirm Before Going Live](https://blocksec.com/blog/crypto-payment-security-compliance-checklist): The crypto payment security & compliance controls every operator should confirm before going live. Wallet, MFA, AML/CFT, and monitoring checklist inside. (Jul 3 2026)

[#4: Curve Incident: Compiler Error Produces Faulty Bytecode from Innocent Source Code](https://blocksec.com/blog/curve-incident-compiler-error-produces-faulty-bytecode-from-innocent-source-code): Curve Incident: Compiler Error Produces Faulty Bytecode from Innocent Source Code (Feb 14 2024)

[DeFi and Stablecoin Security: BlockSec CEO Prof. Andy Zhou](https://blocksec.com/blog/de-fi-and-stablecoin-security-a-discussion-with-dr-andy-zhou-ceo-of-bloc-sec): BlockSec CEO Dr. Andy Zhou discusses DeFi security, stablecoin compliance, and how real-time monitoring protects protocols from on-chain threats. Key insights from Chaintech. (Nov 19 2025)

[DeFi KYC and AML: Balancing Compliance & Decentralization](https://blocksec.com/blog/de-fi-kyc-and-de-fi-aml-balancing-compliance-and-decentralization): DeFi KYC and AML don't have to kill decentralization. Learn how risk-based, on-chain KYT lets protocols stay compliant without gatekeeping users. (Feb 2 2026)

[DeFi Risk Mitigation Guide 01: Identifying Types of Risks DeFi Users Face](https://blocksec.com/blog/de-fi-risk-mitigation-guide-01-identifying-types-of-risks-de-fi-users-face-1): This part aims to enhance DeFi Users safety awareness through real-life cases, helping users protect their private keys and wallet assets. (Jul 5 2024)

[DeFi Risk Mitigation Guide 02: How DeFi Users Can Assess Risks](https://blocksec.com/blog/de-fi-risk-mitigation-guide-02-how-de-fi-users-can-assess-risks): This part aims to reveal the importance of reading audit reports, researching project teams, analyzing liquidity and token economics and so on, to effectively assess the risks of DeFi projects (Jul 5 2024)

[DeFi Risk Mitigation Guide 03: Safety Tips for DeFi Users](https://blocksec.com/blog/de-fi-risk-mitigation-guide-03-safety-tips-for-de-fi-users): This part introduce security tips for DeFi Users to staying Defi safety (Jul 5 2024)

[DeFi Risk Mitigation Guide 04: Security Practices for DeFi Project Team](https://blocksec.com/blog/de-fi-risk-mitigation-guide-04-security-practices-for-de-fi-project-team-1): This part introduce conduct thorough audits, adopt multi-signature wallets, establish bug bounty programs, and communicate transparently with the community to ensure the security of the platform For DeFi project teams (Jul 5 2024)

[DeFi Safety: Real-Time Risk Intelligence for On-Chain Finance](https://blocksec.com/blog/de-fi-safety-build-real-time-risk-intelligence-for-on-chain-finance): DeFi is growing fast—and so are its risks. Learn how Phalcon Compliance delivers real-time AML/CFT monitoring, deep risk insights, and pre-execution protection to help you scale safely. (Feb 10 2026)

[Deep Dive into HIP-3: A Builder-Centric Perspective](https://blocksec.com/blog/deep-dive-into-hip-3-a-builder-centric-perspective): Hyperliquid Improvement Proposal 3 (HIP-3) introduces a fundamental change in how perpetual markets are created and scaled on Hyperliquid. By opening the market listing process to third-party builders, HIP-3 shifts listing from a discretionary, platform-controlled action to a protocol-level, ruled-based interface. This report analyzes HIP-3 from a builder-centric perspective, focusing on how markets are defined and operated, the risks builders face, and how those risks, particularly oracle-related risks, can be mitigated. (Jan 18 2026)

[DeFi Compliance in 2026: A Technical Framework for Protocol Resilience](https://blocksec.com/blog/defi-compliance-in-2026-a-technical-framework-for-protocol-resilience): DeFi compliance in 2026: build a compliant-by-design framework to meet AML/KYC, unlock institutional capital, enhance security, and avoid regulatory shutdowns. (Mar 11 2026)

[DeFi Compliance Platform Requirements: Building an On-Chain Risk Stack](https://blocksec.com/blog/defi-compliance-platform-on-chain-risk): Guide to on-chain compliance for DeFi. Covers KYT, cross-chain tracing, risk scoring, case management, and SAR reporting for smart contract exposure. (Jun 8 2026)

[DeFi Exploit Analysis: The Root Cause of Euler's $200M Loss](https://blocksec.com/blog/defi-exploit-analysis-root-cause-euler-s-200m): Explore the Euler Finance exploit that led to a $200M DeFi loss. Learn the root causes, attack methods, and how to protect your blockchain assets today. (Jan 5 2024)

[Newsletter - July 2026](https://blocksec.com/blog/defi-security-incidents-afx-trade-ostium): Top 3 July 2026 DeFi incidents: ~$67.9M lost. AFX Trade supply chain attack (~$24.15M). Ostium oracle compromise (~$23.75M). BonkDAO governance drain (~$20M). (Jul 31 2026)

[Newsletter - August 2026](https://blocksec.com/blog/defi-security-incidents-cosmos-evm-moonwell): Cosmos EVM balance-sync flaw exploited across six chains (~$14.8M). Moonwell MAMO oracle manipulation (~$9.1M). Term Finance governance takeover (~$8.47M). (Sep 2 2026)

[Newsletter - May 2026](https://blocksec.com/blog/defi-security-incidents-echo-protocol-stablr-more): May 2026 saw ~$101M lost in DeFi incidents. Echo Protocol $76.7M key compromise, StablR $12.8M unauthorized minting, Verus Bridge $11.7M type-validation flaw. (Jun 3 2026)

[DeFi Security Landscape: 50 Key Players You Need to Know](https://blocksec.com/blog/defi-security-landscape): Explore 50 key players shaping DeFi security — from smart contract audits and attack detection to hack blocking and fund tracking. Your complete guide. (Aug 30 2024)

[Define Money Laundering: The Legal Definition Under 18 U.S.C. §1956](https://blocksec.com/blog/define-money-laundering): Money laundering is defined under 18 U.S.C. §1956 as knowingly conducting a financial transaction involving proceeds of a specified unlawful activity with intent to conceal, promote, or evade reporting. Learn the three offense types and four elements. (Jul 27 2026)

[Puffer Protocol: Why Does Access Control Mechanism Matter and How to Improve Its Security](https://blocksec.com/blog/demystify-the-access-control-mechanism-in-puffer-protocol): We reviewed the whole architecture of the access control mechanism and its current configuration in the Puffer protocol. (Feb 8 2024)

[Deposit Less, Get More: yCREDIT Attack Details](https://blocksec.com/blog/deposit-less-get-more-y-credit-attack-details): Exploiting yCREDIT: How Attackers Minted Excess Tokens for Profit" – Discover the vulnerability that disrupted yCREDIT's token balance (Jan 29 2024)

[Tether destroyBlackFunds: Burn & Reissue Explained (2026)](https://blocksec.com/blog/destroyblackfunds-tether-mechanic-explained): Tether burns USDT at frozen addresses via destroyBlackFunds, but the value often reaches victims as newly-minted replacement tokens. Code, cases, recovery policy. (Jul 27 2026)

[Crypto Crime Crackdown: DOJ Seizes $15B in Bitcoin](https://blocksec.com/blog/doj-seizes-15b-bitcoin-in-global-crypto-crime-crackdown): The DOJ seized $15B in Bitcoin tied to pig-butchering scams. Learn how the Prince Group and Huione network were exposed—and how to screen your wallets. (Oct 15 2025)

[Drift Protocol Incident: Multisig Governance Compromise via Durable Nonce Exploitation](https://blocksec.com/blog/drift-protocol-incident-multisig-governance-compromise-via-durable-nonce-exploitation): On April 1, 2026 (UTC), Drift Protocol on Solana suffered a $285.3M loss after an attacker exploited Solana's durable nonce mechanism to delay the execution of phished multisig approvals, ultimately transferring administrative control of the protocol's 2-of-5 Squads governance with zero timelock. With full admin privileges, the attacker created a malicious collateral market (CVT), inflated its oracle price, relaxed withdrawal protections, and drained USDC, JLP, SOL, cbBTC, and other assets through 31 rapid withdrawals in approximately 12 minutes. This incident highlights how durable nonce-based delayed execution can decouple signer intent from on-chain execution, bypassing the temporal assumptions that multisig security implicitly relies on. (Apr 3 2026)

[Newsletter - June 2026](https://blocksec.com/blog/efi-security-incidents-jaredfromsubway-aztec): ~$22M lost across June's top 3 incidents. JaredFromSubway MEV honeypot (~$15M). Aztec rollup exploits (~$4.35M). SecondFi Ed25519 key compromise (~$2.4M) (Jul 3 2026)

[Can Symbiotic Challenge EigenLayer in Restaking?](https://blocksec.com/blog/eigenlayer-competitor-symbiotic): Explore how Symbiotic competes with EigenLayer in restaking. Discover key differences, features, and which blockchain restaking platform leads in 2024. Read now (Jul 11 2024)

[What Is Enhanced Due Diligence (EDD) for Crypto Addresses: Triggers, Process, and Documents](https://blocksec.com/blog/enhanced-due-diligence-crypto-addresses): Enhanced Due Diligence (EDD) is the heightened AML check a VASP runs on a high-risk crypto address. Learn what EDD is, what triggers it, the document checklist, and where on-chain risk evidence fits. (Jul 27 2026)

[Enhancing Blockchain Security: The Role of Smart Contract Auditors](https://blocksec.com/blog/enhancing-blockchain-security-the-role-of-smart-contract-auditors): Discover the crucial role of smart contract auditors in blockchain security, safeguarding DeFi and NFT platforms from vulnerabilities and financial losses (Feb 5 2024)

[Enhancing Security and Trust in EVM-Compatible Chains: Insights from BlockSec's 2024 Audits](https://blocksec.com/blog/enhancing-security-and-trust-in-evm-compatible-chains-insights-from-block-sec-s-2024-audits): Gain valuable insights into BlockSec's 2024 audits for enhancing security and trust in EVM-compatible chains, including proactive measures, specialized expertise, and advanced countermeasures. (Apr 15 2024)

[Enhancing Web3 Security: Exploring the Top 5 Security Monitoring Platforms in 2024](https://blocksec.com/blog/enhancing-web3-security-exploring-the-top-5-security-monitoring-platforms-in-2024): Discover the top 5 security monitoring platforms in blockchain and experience the advantages of BlockSec Phalcon. With early attack detection and customizable rules, Phalcon secures web3 applications effectively. (May 14 2024)

[Stablecoins Explained: Is Ethena the Upgraded Luna? ](https://blocksec.com/blog/ethena-upgraded-luna-walk-stablecoins): Explore stablecoins, their security risks, and how Ethena's USDe offers a new approach. Learn more about stablecoin mechanisms and protection strategies. (Jul 26 2024)

[#2: Euler Finance Incident: The Largest Hack of 2023](https://blocksec.com/blog/euler-finance-incident-the-largest-hack-of-2023): Euler Finance Incident: The Largest Hack of 2023 (Feb 8 2024)

[EigenLayer Restaking: Security Risks and How to Mitigate Them](https://blocksec.com/blog/examining-eigenlayer-restaking-security-perspective): EigenLayer's restaking model hit $15.3B TVL — but it introduces new security risks like malicious operators and AVS exploits. Learn the threats and how to defend against them. (Apr 24 2026)

[Exploring the Tradeoff Between Convenience and Security in Unlimited Approval ERC20 Tokens](https://blocksec.com/blog/exploring-the-tradeoff-between-convenience-and-security-in-unlimited-approval-erc-20-tokens): Discover the delicate balance between ease of use and security in the world of ERC20 tokens with unlimited approval and its impact on the blockchain ecosystem (Feb 5 2024)

[Factors Making Web3 More Vulnerable to Hacks and Our Mitigation Strategies](https://blocksec.com/blog/factors-making-web3-more-vulnerable-to-hacks-and-our-mitigation-strategies): In a world where blockchain hacks and capital exploitation seem to occur almost weekly, the question arises: Can we effectively prevent these security breaches? (Aug 30 2023)

[Ryan Wedding Crypto Crime Network: BlockSec On-Chain Analysis](https://blocksec.com/blog/fall-olympian-blocksec-tracks-ryan-wedding-crypto-crime): BlockSec traces $200M+ in USDT laundered by ex-Olympian Ryan Wedding's cartel-linked network. See our on-chain analysis of the sanctioned crypto crime ring. (Feb 3 2026)

[FATF Stablecoin Report: A Shift to Secondary-Market Compliance](https://blocksec.com/blog/fatf-s-new-stablecoin-report-signals-a-shift-to-secondary-market-compliance): FATF's March 2026 report targets P2P stablecoin risks via unhosted wallets. Learn the key AML/CFT recommendations and how on-chain monitoring tools can help you stay compliant. (Mar 27 2026)

[Flash Loan Attack on Plouto Vault](https://blocksec.com/blog/flash-loan-attack-on-plouto-vault): BlockSec Team analyzes a malicious attack on Plouto Vault, where flash loans were utilized to manipulate liquidity, resulting in a gain of $698,775.32 USD. (Apr 18 2024)

[Following the Frozen: An On-Chain Analysis of USDT Blacklisting and Its Links to Terrorist Financing](https://blocksec.com/blog/following-the-frozen-an-on-chain-analysis-of-usdt-blacklisting-and-its-links-to-terrorist-financing): This report analyzes USDT blacklisting patterns and their links to terrorist financing, revealing laundering loops, cross-chain flows, and enforcement delays. (Jul 11 2025)

[Stablecoin Regulatory Fragmentation: FSB 2025 Assessment](https://blocksec.com/blog/fsb-2025-assessment-stablecoin-regulatory-fragmentation-intensifies-arbitrage-risks): The FSB's 2025 review exposes dangerous gaps in global stablecoin regulation. Learn how fragmentation fuels regulatory arbitrage and what it means for crypto compliance. (Oct 30 2025)

[Fun Coffee Scam: Tracing a 278% Ponzi on TRON](https://blocksec.com/blog/fun-coffee-scam-tron-usdt-tracing): Fun Coffee promised 278% a year, then went dark. We traced 72.8M USDT across 99 TRON addresses to separate investor payouts from funds carried away. (Aug 28 2026)

[How to Master DeFi Transaction Analysis with Phalcon Explorer 2.0](https://blocksec.com/blog/getting-started-with-phalcon-2-0-2): Phalcon 2.0 helps you analyze DeFi transactions with fund flow, invocation flow, code view, and simulation across 5 chains. (Jan 5 2023)

[#4 GMX Incident: Cross-Contract Reentrancy Bypasses a Four-Year-Old Guard](https://blocksec.com/blog/gmx-incident-cross-contract-reentrancy-bypasses-a-four-year-old-guard): GMX V1 Arbitrum exploit (July 9, 2025): cross-contract reentrancy skewed global shorts, inflated GLP price, draining $42M before a 10% bounty refund. (Feb 11 2026)

[#1: Harvesting MEV Bots by Exploiting Vulnerabilities in Flashbots Relay](https://blocksec.com/blog/harvesting-mev-bots-by-exploiting-vulnerabilities-in-flashbots-relay): MEV bots were exploited due to Flashbots relay vulnerability, the number one security incident in the top ten "awesome" security incidents in 2023. (Dec 15 2025)

[HKDAP Stablecoin Security Review: Live, Licensed, Not Ready](https://blocksec.com/blog/hkdap-stablecoin-security-review): Review of HKDAP, Hong Kong's first regulated stablecoin: KYC revocation fails, single key can mint/burn/freeze, and HKMA conflicts. On-chain analysis inside. (Aug 14 2026)

[How L2 Blockchains Can Do Better to Protect Their Users](https://blocksec.com/blog/how-L2-blockchains-can-do-better-to-protect-their-users): How layer 2 (L2) chains can implement several measures to enhance the security of top protocols and protect users' assets on the chain. (Mar 27 2024)

[How a Critical Bug in Solana Network was Detected and Timely Patched](https://blocksec.com/blog/how-a-critical-bug-in-solana-network-was-detected-and-timely-patched): Solana Vulnerability: Contract Execution Path Affected by rBPF Bug (Jan 15 2024)

[How a Vulnerability Is Silently Fixed by Coin98](https://blocksec.com/blog/how-a-vulnerability-is-silently-fixed-by-coin98): The article highlights a recent attack on the Coin98 smart contract on the Binance Smart Chain (BSC) and the subsequent fix implemented by the project owner to address the vulnerability. (Apr 20 2024)

[How Akutar NFT Loses $34,000,000 USD](https://blocksec.com/blog/how-akutar-nft-loses-34-m-usd): Uncovering serious logic vulnerabilities in @AkuDreams contracts, leading to a potential DoS attack and permanent locking of project funds (Jan 20 2024)

[How BlockSec Rescued Stolen DeFi Funds: 3 Case Studies](https://blocksec.com/blog/how-blocksec-rescued-stolen-funds-from-technical-perspectives-of-three-representative-cases): Learn how BlockSec recovered millions in stolen DeFi funds through pure technical methods — including Platypus Finance, TransitSwap, and Saddle Finance rescues. (Mar 4 2024)

[How Phalcon Security Prevents DeFi Attacks Using Front-Running Techniques](https://blocksec.com/blog/how-can-block-sec-phalcon-prevent-hacker-attacks-on-de-fi-protocols-by-using-front-running-techniques): How Phalcon Security turns front-running from an attack tactic into a defense: it spots malicious transactions in the mempool and blocks them before execution. (Apr 29 2024)

[How Does KYA (Know Your Address) Work for DeFi Protocols?](https://blocksec.com/blog/how-does-kya-work-for-defi-protocols): Phalcon Compliance's KYA screens wallet addresses for DeFi protocols in real time, blocking sanctioned and hacker-linked funds without breaking DeFi UX. (Jul 21 2026)

[How Long Does AML Address Screening Take in Crypto?](https://blocksec.com/blog/how-long-does-aml-address-screening-take): How long AML address screening takes in crypto: manual review (minutes to hours) versus automated API screening (milliseconds), what happens inside one screen, and where edge cases slow it down. (Jul 24 2026)

[Blocked Loot Attack: How Phalcon Saved $1.2M from Malicious Proposal](https://blocksec.com/blog/how-phlacon-block-helped-loot-block-1-m-usd-hack): The comprehensive process of how Phalcon saved more than 1 Million USD for Loot. (Jan 11 2024)

[How the Mirror Protocol got Exploited](https://blocksec.com/blog/how-the-mirror-protocol-got-exploited): Revealing How an Attacker Exploited Mirror Protocol by Manipulating mETH and USTC Values (Jan 25 2024)

[How the U.S. Traced $110M Crypto Money Laundering Cases](https://blocksec.com/blog/how-the-us-traced-110-m-crypto-money-laundering-cases-blocksec): Learn how U.S. authorities traced $110M in crypto money laundering tied to pig-butchering scams, and what BlockSec's on-chain analysis revealed about compliance gaps. (May 25 2026)

[How to Avoid Smart Contract Hacks with Fuzzing Technology？](https://blocksec.com/blog/how-to-avoid-smart-contract-hacks-with-fuzzing-technology): Explore how fuzzing technology and BlockSec's expertise in blockchain security can help prevent smart contract hacks and protect your assets in the ever-evolving blockchain ecosystem. (Apr 19 2024)

[How to Become a Smart Contract Auditor: Your Guide to Mastering Blockchain Security](https://blocksec.com/blog/how-to-become-a-smart-contract-auditor-your-guide-to-mastering-blockchain-security): Discover the essential steps to mastering smart contract audits with our comprehensive guide. Learn the skills, tools, and best practices needed to excel in blockchain security and become a pivotal player in the world of DeFi and NFTs (Jan 27 2024)

[How to Check if a USDT Address Is Frozen (Free 30s)](https://blocksec.com/blog/how-to-check-if-usdt-address-is-frozen): Check any USDT address in 30 seconds — free, no signup. What a Tether freeze means, alternative direct-query methods, and what to do next per scenario. (Jul 27 2026)

[How to Check the Security of Cosmos Bridge: A Comprehensive Guide](https://blocksec.com/blog/how-to-check-the-security-of-cosmos-bridge-a-comprehensive-guide): Explore the significance of securing Cosmos Bridge, learn how to assess Cosmos Bridge's security and discover BlockSec's expertise in providing tailored security audits for cross-chain transactions. (Apr 15 2024)

[How to Choose a Blockchain Compliance Platform Suitable for Your Business](https://blocksec.com/blog/how-to-choose-blockchain-compliance-platform): Stablecoins now move $36T a year, and so does illicit capital. Learn how to choose a blockchain compliance platform built for cross-chain AML at scale. (May 28 2026)

[How to Choose the Ideal Security Audit Company for Your Protocol: A Comprehensive Guide](https://blocksec.com/blog/how-to-choose-the-ideal-security-audit-company-for-your-protocol-a-comprehensive-guide): Discover the key factors to consider when choosing a security audit company for your blockchain project and explore how BlockSec offers unique security audit solutions and security products Phalcon to ensure the life-cycle safety of projects. (Apr 22 2024)

[How to Choose the Right Security Monitoring Platform for Your Protocol?](https://blocksec.com/blog/how-to-choose-the-right-security-monitoring-platform-for-your-protocols): Discover the importance of security monitoring for blockchain projects and the factors worth considering when choosing a security monitoring platform for your protocol (May 22 2024)

[How to Evaluate Project Security through Security Audit Report?](https://blocksec.com/blog/how-to-evaluate-project-security-through-security-audit-report): Explore the power of security audit reports in ensuring blockchain project security, and how BlockSec's comprehensive methodology delivers accurate assessments through automated scans, manual verification, and business logic analysis. (Apr 20 2024)

[How to Exploit the Same Vulnerability of MetaPool in Two Different Ways (Nerve Bridge / Saddle Finance): What You See Is Not What You Get](https://blocksec.com/blog/how-to-exploit-the-same-vulnerability-of-meta-pool-in-two-different-ways-nerve-bridge-saddle-finance-what-you-see-is-not-what-you-get): Exploring the Repeat Exploitation of MetaPool's Flaw in Nerve Bridge and Saddle Finance Incidents" – uncovering the persistence of a crypto vulnerability (Jan 25 2024)

[How to Get a Canada MSB License for Crypto Payments](https://blocksec.com/blog/how-to-get-a-canada-msb-license-for-crypto-payments-in-2026): Launching crypto payments in Canada 2026? MSB registration isn't enough. Build FINTRAC-ready, real-time KYT/Travel Rule compliance to secure banking and scale. (Feb 12 2026)

[How to Implement AML Screening for Crypto Exchange Deposits: A Step-by-Step Guide](https://blocksec.com/blog/how-to-implement-aml-screening-crypto-exchange-deposits): How to implement AML screening for crypto exchange deposits: map the deposit flow, integrate a KYA API, define risk thresholds, and build a compliance audit trail. (Jul 23 2026)

[How to Mitigate Smart Contract Risks: A Comprehensive Guide to Secure Blockchain Operations](https://blocksec.com/blog/how-to-mitigate-smart-contract-risks-a-comprehensive-guide-to-secure-blockchain-operations): Learn to mitigate smart contract risks and protect your blockchain operations with BlockSec's comprehensive solutions and expertise. (Apr 15 2024)

[How to Play Four.meme Without Getting “Sandwiched”](https://blocksec.com/blog/how-to-play-four-meme-without-getting-sandwiched): How to use BlockSec Anti-MEV RPC to avoid getting “sandwiched” when playing Four.meme. (Feb 21 2025)

[How to Track a Solana Wallet](https://blocksec.com/blog/how-to-track-a-solana-wallet): How to Track a Solana Wallet or account using MetaSleuth (May 2 2024)

[How to Unfreeze a USDT Address: 3 Paths, 3.6% Odds](https://blocksec.com/blog/how-to-unfreeze-usdt-address): USDT freezes can be reversed via Tether's removeBlackList — 3.6% of the time. Three legal paths, the canonical Poly Network case, and honest odds for each option. (Jul 27 2026)

[How to Verify a Signature in a Wrong Way — The AssociationNFT Case](https://blocksec.com/blog/how-to-verify-a-signature-in-a-wrong-way-the-association-nft-case-1): The article discusses a serious vulnerability in the NBA's Association NFT sale contract, highlighting the importance of implementing proper security measures in popular blockchain projects. (Apr 18 2024)

[Attack Analysis | How Unchecked Mapping Makes $200,000,000 Losses of Nomad Bridge](https://blocksec.com/blog/how-unchecked-mapping-makes-200-M-losses-of-nomad-bridge): How Nomad Bridge's Security Was Compromised: Analysis of the code that led to Nomad Bridge's vulnerability and the subsequent exploit of nearly $200M (Feb 4 2024)

[How We Recover the Stolen Funds for TransitSwap (and BabySwap)](https://blocksec.com/blog/how-we-recover-the-stolen-funds-for-transit-swap-and-baby-swap): BabySwap and TransitSwap on BSC experienced attacks on October 1, with a vulnerable bot being front-run and its private key recovered, resulting in the successful transfer of funds to a secure account. (Apr 18 2024)

[How We Recovered the Stolen Funds for TransitSwap and BabySwap](https://blocksec.com/blog/how-we-recover-the-stolen-funds-for-transitswap-and-babyswap): Swift Recovery of Stolen Funds: How we efficiently recovered stolen funds from the TransitSwap and BabySwap attack on the BSC network using a vulnerability in the attacker's bot (Feb 8 2024)

[In-depth Analysis and Reflections on the Resupply Protocol Attack Incident](https://blocksec.com/blog/in-depth-analysis-and-reflections-on-the-resupply-protocol-attack-incident): Resupply Protocol lost $10M to a donation attack. We trace the root cause, walk the attack transaction, and draw the lessons for lending markets on Curve. (Sep 16 2025)

[In-Depth Analysis: The Balancer V2 Exploit](https://blocksec.com/blog/in-depth-analysis-the-balancer-v2-exploit): On November 3, 2025, Balancer V2 and several forked projects were exploited, causing over $125 million in losses. This blog offers an in-depth technical analysis of the incident. (Nov 5 2025)

[In-Depth Analysis: The Truebit Incident](https://blocksec.com/blog/in-depth-analysis-the-truebit-incident): On January 8, 2026, the Truebit Protocol on Ethereum was exploited,, causing over $26 million in losses. This blog offers an in-depth technical analysis of the incident. (Jan 14 2026)

[Drainer-as-a-Service: Inside Ethereum's $135M Phishing Economy](https://blocksec.com/blog/inside-ethereum-s-shadow-economy-new-research-unmasks-the-135-m-drainer-as-a-service-industry): New research reveals how Drainer-as-a-Service industrialized crypto phishing on Ethereum, stealing $135M from 76K+ victims. Explore the full on-chain analysis. (Oct 21 2025)

[Phalcon Compliance 3.1: Faster Crypto AML & Flexible Pricing](https://blocksec.com/blog/instant-crypto-compliance-software-blocksec-phalcon-3-1): Speed up crypto AML/KYT with Phalcon Compliance 3.1: instant wallet/tx screening, lite sharing, multi-chain insights, and flexible pay‑as‑you‑go pricing. (Dec 15 2025)

[What Are Instant Crypto Exchanges, and Why Have They Become the Hotspot for Money Laundering?](https://blocksec.com/blog/instant-crypto-exchanges-money-laundering): While ICE offers efficiency and convenience, it has also quietly opened the door to illicit activities such as money laundering. (Jun 24 2025)

[Interlace Boosts Crypto Payment Compliance with BlockSec](https://blocksec.com/blog/interlace-boosts-crypto-payment-compliance-with-block-sec): How Interlace strengthened its crypto payment compliance with BlockSec's Phalcon Compliance—real-time KYA and KYT screening on every deposit and withdrawal. (Sep 16 2025)

[Key Highlights of EVM Chain Audits in 2024 - Insights from BlockSec](https://blocksec.com/blog/key-highlights-of-evm-chain-audits-in-2024-insights-from-block-sec): Discover the key trends in EVM Chain audits for 2024 —— BlockSec provides comprehensive solutions to address security concerns and provide actionable recommendations, ensuring the robustness and reliability of blockchain projects. (Apr 8 2024)

[Know Your Transaction (KYT) in Crypto: What It Is and How It Differs from KYA and KYC](https://blocksec.com/blog/know-your-transaction-crypto): Phalcon Compliance's KYT screens on-chain transfers for AML risk in real time. Learn how transaction-level monitoring differs from KYA and KYC. (Jul 21 2026)

[#3: KyberSwap Incident: Masterful Exploitation of Rounding Errors with Exceedingly Subtle Calculations](https://blocksec.com/blog/kyberswap-incident-masterful-exploitation-of-rounding-errors-with-exceedingly-subtle-calculations): KyberSwap Incident: Masterful Exploitation of Rounding Errors with Exceedingly Subtle Calculations (Feb 12 2024)

[KYT Definition: What Know Your Transaction Means](https://blocksec.com/blog/kyt-definition-what-know-your-transaction-means-and-why-it-matters-in-crypto-and-finance): Know Your Transaction (KYT) monitors risk in real time to stop fraud and sanctions, helping crypto and fintech stay compliant with clear, auditable decisions. (Mar 9 2026)

[Lead in: DeFi Risk Mitigation Guide](https://blocksec.com/blog/lead-in-de-fi-risk-mitigation-guide-2): In this series, explore detailed main DeFi risk types, how to assess project risk, user security tips, and how DeFi Project teams can ensure security (Jul 5 2024)

[Lead in: Phalcon's Hack Blocking Saga](https://blocksec.com/blog/lead-in-phalcon-s-hack-blocking-saga): In this series, explore how BlockSec Phalcon, the world's first crypto hack monitoring and blocking system, innovatively saved millions in assets. (Apr 26 2024)

[Lead in: Secure Smart Contract Development](https://blocksec.com/blog/lead-in-secure-smart-contract-development): Our series explores essential security practices for developing secure, efficient smart contracts, especially NFTs. (Apr 26 2024)

[Lead in: Uniswap V4 Hook Risks](https://blocksec.com/blog/lead-uniswap-v4-hook-risks): Deep dive into Uniswap v4 hook risks: flawed access control and input validation, exploits, and mitigations to harden DeFi security on Ethereum and L1/L2. (Apr 26 2024)

[Lethal Integration: Vulnerabilities in Hooks Due to Risky Interactions](https://blocksec.com/blog/lethal-integration-vulnerabilities-in-hooks-due-to-risky-interactions): Uniswap v4 hook security: learn how flawed access control and input validation put 30%+ of hooks at risk, with PoCs and fixes. (Nov 20 2023)

[LI.FI Attack: a Cross-chain Bridge Vulnerability? No, It’s Due to Unchecked External Call!](https://blocksec.com/blog/li-fi-attack-a-cross-chain-bridge-vulnerability-no-it-s-due-to-unchecked-external-call): "LI.FI's Cross-Chain Bridge Vulnerability: A Lesson in External Call Security for DeFi" - Offering insights into the need for better security practices in DeFi coding (Feb 4 2024)

[Loopring(LRC) Protocol Incident](https://blocksec.com/blog/loopring-lrc-protocol-incident): Discover how the Loopring LRC protocol incident led to a $48K loss. Learn key details, impact, and security insights. Stay informed and secure your assets today (Feb 29 2024)

[Major Upgrades to BlockSec Phalcon's Storage Analysis and Monitoring Functions](https://blocksec.com/blog/major-upgrades-to-block-sec-phalcon-s-storage-analysis-and-monitoring-functions): BlockSec is pleased to announce a significant upgrade to our crypto hack monitoring and blocking system Phalcon's storage analysis and monitoring capabilities. (Apr 30 2024)

[How to Make Blockchain Attacks Blockable: 5 Proven Strategies](https://blocksec.com/blog/make-blockchain-attack-blockable): Learn how to make blockchain attacks blockable with proven DeFi security strategies. Protect your smart contracts now with expert blockchain solutions. (Mar 7 2022)

[DeFi Risk Management: How to Stay Safe and Compliant](https://blocksec.com/blog/managing-de-fi-risk-a-complete-guide-to-staying-safe-and-compliant): DeFi risk doesn't stop at smart contract bugs. Learn how to detect tainted funds, track cross-chain exposure, and stay compliant with real-time on-chain tools. (Jan 26 2026)

[MAS Crypto Compliance in Singapore: A Guide for Payment Firms](https://blocksec.com/blog/mas-shapes-crypto-compliance-in-singapore): Learn how MAS shapes crypto payment compliance in Singapore — what PSA and tech risk rules demand, and how KYT and monitoring build trust. (Mar 26 2026)

[Secure Smart Contract Development (2) — How to Use Digital Signature and Use It Right in NFT (Markets)](https://blocksec.com/blog/mastering-digital-signatures-in-nft-smart-contracts-for-enhanced-security-and-efficiency): Ensuring NFT Authenticity with Digital Signatures: Learn how digital signatures provide authenticity and integrity in NFT smart contract development (Mar 4 2024)

[MetaDock Breaks Through 6K Users!](https://blocksec.com/blog/meta-dock-breaks-through-6-k-users): MetaDock, a web3 browser extension, reaches 6000 users, enhancing blockchain explorers with seamless integration and prioritizing user privacy and security. (Apr 18 2024)

[MetaSuites 5.0 Boosts Solana Scans with Full Support](https://blocksec.com/blog/metasuites-5-0-extends-full-support-solana-scans): Discover how MetaSuites 5.0 enhances Solana scans with cross-platform local labels and Phalcon Explorer integration. Upgrade your blockchain security now! (May 29 2024)

[Money Laundering Examples in Crypto: 3 Real Cases and What They Reveal](https://blocksec.com/blog/money-laundering-examples-crypto): 7,400 ETH laundered via mixer, a 20-hop bridge attack in 2 hours, 151 addresses blacklisted for terrorist financing. Real crypto cases, fully on-chain. (Jul 17 2026)

[Money Laundering Meaning: How Crypto Is Used and How It's Caught](https://blocksec.com/blog/money-laundering-meaning): Learn how crypto money laundering works through the $1.5B Bybit hack and a $12.47M instant exchange case, and how KYA and KYT tools detect it before funds settle. (Jul 17 2026)

[Money Laundering in Simple Terms: What It Is and Why Crypto Makes It Easier](https://blocksec.com/blog/money-laundering-simple-terms): Money laundering explained in plain terms: the three stages, real 2025 crypto cases like the $15B Bitcoin seizure, and free tools to check if a wallet address is flagged. (Jul 17 2026)

[Monthly Security Review: April 2024](https://blocksec.com/blog/monthly-security-review-april-2024): April 2024 DeFi exploits cost about $5M, led by unverified user input and access control flaws—Hedgey Finance, SaitaChain and Pike Finance broken down. (May 1 2024)

[Monthly Security Review: February 2024](https://blocksec.com/blog/monthly-security-review-february-2024): Stay updated with February's security trends and our recent developments. 🙌 (Mar 1 2024)

[Monthly Security Review: June 2024](https://blocksec.com/blog/monthly-security-review-june-2024-1): BlockSec June 2024 security review: the UwU Lend attacks and other DeFi incidents, plus Phalcon Explorer full Solana support and a Solana Summit recap. (Jul 9 2024)

[Monthly Security Review: May 2024](https://blocksec.com/blog/monthly-security-review-may-2024): Stay updated with May's security trends and our recent developments. 🙌 (Jun 10 2024)

[Monthly Security Review: October 2024](https://blocksec.com/blog/monthly-security-review-october-2024): BlockSec's October 2024 security review breaks down Radiant Capital's $58M Arbitrum breach and three smaller incidents, with the root cause behind each. (Nov 1 2024)

[MSO vs VA OTC in Hong Kong: Crypto Licensing Guide](https://blocksec.com/blog/mso-vs-va-otc-in-hong-kong-what-crypto-payment-companies-must-know-in-2026): 2026 Hong Kong crypto: master dual licensing. Understand MSO vs VA OTC, C&ED vs SFC oversight, who needs each, application steps, and bank-ready compliance. (Mar 4 2026)

[Navigating DeFi Regulation: AML/CFT Compliance Guide](https://blocksec.com/blog/navigating-de-fi-regulation-in-2026): Learn how to meet DeFi regulation requirements with Phalcon Compliance — real-time screening, on-chain monitoring, and automated AML/CFT reporting across jurisdictions. (Mar 3 2026)

[New Integer Overflow Bug Discovered in Solana rBPF](https://blocksec.com/blog/new-integer-overflow-bug-discovered-in-solana-r-bpf): Integer Overflow Bug Found in Solana's Virtual Machine That Puts the Network at Risk (Jan 8 2024)

[New Website Unveiled | BlockSec Safeguards Protocol's Lifecycle Security](https://blocksec.com/blog/new-website-unveiled-block-sec-safeguards-protocol-s-lifecycle-security): BlockSec launches the new website, unveiling a new era of full-stack, lifecycle blockchain security services.🙌 (Mar 18 2024)

[Newsletter - April 2026](https://blocksec.com/blog/newsletter-april-2026): Top DeFi incidents in April 2026: learn how KelpDAO, Drift, and Rhea Finance lost $593M+ and what these exploits mean for DeFi security (Apr 30 2026)

[Newsletter -  December 2025](https://blocksec.com/blog/newsletter-december-2025): In December 2025, the DeFi sector encountered three significant security incidents, resulting in total losses of approximately $19.7 million. Yearn Finance faced nearly $10 million in losses due to vulnerabilities in its yETH pool and legacy contracts. Trust Wallet suffered a malicious backdoor attack on its Chrome extension, leading to losses of about $7 million. Ribbon Finance experienced a loss of $2.7 million due to improper access controls. (Jan 6 2026)

[Newsletter -  February 2026](https://blocksec.com/blog/newsletter-february-2026): February 2026 saw three major DeFi security incidents: YieldBlox DAO lost ~$10M due to oracle price manipulation, IoTeX’s ioTube bridge suffered ~$4.4M from a private key compromise, and CrossCurve incurred ~$2.8M after a cross-chain validation bypass. (Mar 2 2026)

[Newsletter -  January 2026](https://blocksec.com/blog/newsletter-january-2026): In January 2026, the DeFi ecosystem experienced three major security incidents. Truebit Protocol lost ~$26M due to an integer overflow vulnerability, SwapNet and Aperture suffered ~$17M from improper input validation and allowance abuse, and Saga incurred ~$7M following a shared base-layer code vulnerability. (May 3 2026)

[Newsletter -  March 2026](https://blocksec.com/blog/newsletter-march-2026): In March 2026, the DeFi ecosystem experienced three major security incidents. Resolv Protocol lost ~$80M due to compromised privileged infrastructure keys, BitcoinReserveOffering suffered ~$2.7M from a double-minting logic flaw, and Venus Protocol incurred ~$2.15M following a donation attack combined with market manipulation. (Apr 1 2026)

[[Not All Tokens Are Good] The Quick Analysis of the Paraluni Attack](https://blocksec.com/blog/not-all-tokens-are-good-the-quick-analysis-of-the-paraluni-attack): The article provides a detailed analysis of an attack on the Paraluni project, highlighting vulnerabilities related to token verification and reentrancy, and emphasizing the importance of security measures in the emerging Web3 world. (Apr 20 2024)

[OFAC Sanctions ISIS Tron Addresses in Terror-Financing Trail](https://blocksec.com/blog/ofac-sanctions-isis-tron-addresses-terror-financing): OFAC sanctioned two Tron addresses tied to an ISIS facilitator. See how BlockSec traced the on-chain money trail to a Hamas-affiliated entity. (Jun 26 2026)

[OFAC Sinaloa Cartel Sanctions: On-Chain Fund Tracing](https://blocksec.com/blog/ofac-sinaloa-cartel-sanctions-on-chain-tracing): OFAC sanctioned six addresses tied to Sinaloa Cartel fentanyl laundering. We traced the funds on-chain — most flow straight through centralized exchange deposits. (Jun 12 2026)

[BlockSec and OKX Explorer Partner to Enhance On-Chain Data Security and Compliance](https://blocksec.com/blog/on-chain-data-security): BlockSec and OKX Explorer unite to boost on-chain security, compliance, and analytics, integrating threat intel and APIs for a safer, more transparent Web3 (Nov 18 2024)

[OTC USDT Freeze Playbook: Compliance SLA & Response (2026)](https://blocksec.com/blog/otc-desks-usdt-freeze-playbook): A field playbook for OTC desks: pre-transaction screening SLA, real-time monitoring for freezes on active addresses, and a first-15-minutes response timeline. (Jul 27 2026)

[Our Short Analysis of the Accusation Against the Wintermute Project](https://blocksec.com/blog/our-short-analysis-of-the-accusation-of-the-wintermute-project): Analyzing the Wintermute Hack: No Concrete Evidence of an Inside Job (Feb 7 2024)

[Our Short Analysis of the Accusation of the Wintermute Project](https://blocksec.com/blog/our-short-analysis-of-the-accusation-of-the-wintermute-project-1): BlockSec's investigation challenges the accusations made in the report analyzing the Wintermute Hack, questioning the solidity of the claims against the Wintermute project. (Apr 18 2024)

[Our Short Analysis of the Profanity Tool Vulnerability](https://blocksec.com/blog/our-short-analysis-of-the-profanity-tool-vulnerability): Exploring the Profanity Tool's Role in Wintermute's $160M Crypto Vulnerability (Mar 4 2024)

[Our Take on the Inverse Finance Security Incident: Price Manipulation Attack](https://blocksec.com/blog/our-take-on-the-inverse-finance-security-incident-price-manipulation-attack): Flashloan Exploit in Inverse Finance: Attacker Profits Nearly $100k USDT and 53.2 WBTC (Jan 29 2024)

[#10 Panoptic Incident: XOR Linearity Breaks the Position Fingerprint Scheme](https://blocksec.com/blog/panoptic-incident-xor-linearity-breaks-the-position-fingerprint-scheme): Aug 25, 2025: White hats secured ~$400K from Panoptic after exposing an XOR-based s_positionsHash flaw enabling forged IDs and collateral withdrawal. (Feb 11 2026)

[PEP Definition: The Three Types of Politically Exposed Persons Explained](https://blocksec.com/blog/pep-definition-three-types): PEP definition: anyone holding a prominent public function. The three FATF types, foreign, domestic, and international organization, set different EDD duties. (Sep 9 2026)

[Politically Exposed Person Definition Compared: FATF, FinCEN, and EU AMLD](https://blocksec.com/blog/pep-definitions-compared): Politically exposed person definition compared: FATF, FinCEN, and EU AMLD agree on foreign PEPs, split on domestic EDD. Which one governs your platform? (Sep 9 2026)

[Politically Exposed Person Meaning: The Role, Not the Registry](https://blocksec.com/blog/pep-meaning-role-not-registry): Politically exposed person meaning: status attaches to the public function itself, extends to family and close associates, and decays after office ends. (Sep 9 2026)

[How is the performance of BSC after full implementation of PBS？](https://blocksec.com/blog/performance-bsc-after-full-implementation-pbs): Explore BSC's PBS upgrade after BEP-322: how the Builder market consolidated, why validator centralization grew, and what drives the rise in sandwich attacks. (Jan 17 2025)

[BlockSec Introduces the World's First "Compliance + Security" Management Platform](https://blocksec.com/blog/phalcon-compliance-app): Phalcon Compliance helps VASPs meet AML/CFT fast with real-time monitoring, 600M+ labels, 1-click STRs, and custom risk engines. (Apr 24 2025)

[Phalcon Compliance: Self-Service On-Chain AML for All](https://blocksec.com/blog/phalcon-compliance-launches-self-service-platform-making-on-chain-aml-accessible-for-all): Phalcon Compliance now offers self-service on-chain AML screening. Run instant KYT/KYA checks, trace fund flows, and generate STR reports — no setup required. (Oct 14 2025)

[Phalcon Security Supports Mantle Network: Pioneering Unbreakable Ecosystem Security](https://blocksec.com/blog/phalcon-enhances-mantle-security): Phalcon Security now supports Mantle Network, helping block hacks automatically—learn how it’s stopped 20+ attacks and protected $20M+ assets. (Jul 31 2024)

[Phalcon Explorer: Next-Gen Web3 Transaction Analysis Tool](https://blocksec.com/blog/phalcon-explorer-next-gen-web3-transaction-analysis-tool-1): BlockSec's Phalcon Explorer upgrades Web3 blockchain transaction analysis with call traces, debugger, simulator, fuzzy/event search, 26+ chains, 100K+ users (Sep 19 2025)

[Best Blockchain Transaction Explorer for Solana](https://blocksec.com/blog/phalcon-explorer-now-fully-supports-solana): Simplify Solana transactions for users & a boon for developers. (Jun 20 2024)

[Oracle Monitoring Feature Now Live in Phalcon Security!](https://blocksec.com/blog/phalcon-oracle-monitor): Oracle attack prevention: Learn how Phalcon Security catches price anomalies and update delays to stop DeFi oracle exploits before losses happen. (May 28 2025)

[Phalcon | Overview of the Web3 Security Landscape in 2023](https://blocksec.com/blog/phalcon-overview-of-the-web3-security-landscape-in-2023): In 2023, losses ranging from $100K to $200M occurred across 69 hacking incidents caused by the exploitation of vulnerabilities. (Jan 16 2024)

[Phalcon's 2023 Year-End Recap](https://blocksec.com/blog/phalcon-s-2023-year-end-recap): Through the story of Phalcon, let's explore the relentless efforts made by BlockSec to advance Web3 security in 2023. (Dec 29 2023)

[Phalcon Security: The Proactive Defense Ending Zero-Day Web3 Attacks](https://blocksec.com/blog/phalcon-security-the-proactive-defense-ending-zero-day-web3-attacks): Discover how Phalcon Security spots and stops attacks in the mempool automatically. This shifts Web3 defense from reacting to being proactive. (Nov 4 2025)

[Join Our Free Hack Defense Game and Block REAL Attacks with Phalcon](https://blocksec.com/blog/phalcon-virtual-experience-join-our-free-hack-defense-game-and-block-real-attacks-with-phalcon): Ready for a LIFE-AND-DEATH battle against hackers? (May 17 2024)

[Phishing Contracts: How 37K Scams Work and How to Stop Them](https://blocksec.com/blog/phishing-contracts): BlockSec researchers uncovered 37K+ phishing contracts that stole $190M on Ethereum. Learn how these scams work and how to defend your crypto assets. (May 19 2025)

[Pig Butchering Scam Recovery: Legal Path & Timeline (2026)](https://blocksec.com/blog/pig-butchering-scam-recovery): Lost crypto to a pig butchering scam? Calm 2026 playbook: first-hour steps, tracing the money across chains, when recovery is realistic, and red flags. (Jul 23 2026)

[Podcast: How BlockSec Intercepted $15M of Web3 Exploits in Real Time](https://blocksec.com/blog/podcast-how-block-sec-intercepted-15-m-of-web3-exploits-in-real-time-1): Andy Zhou, as a guest on the Scraping Bits podcast, discusses how to block attacks in the Web3 area. (Feb 2 2024)

[Price Manipulation Attack in Reality (Again): RariCapital Incident](https://blocksec.com/blog/price-manipulation-attack-in-reality-again-rari-capital-incident): Exploring Indirect Price Manipulation: Understanding the Attack on RariCapital (Jan 19 2024)

[How did BlockSec Save $5M Worth of Crypto Assets in Successful ParaSpace Attack Blocking](https://blocksec.com/blog/proactive-threat-prevention-a-new-web3-security-paradigm-1): On 2023–03–17 05:48:59 (UTC), BlockSec successfully blocked an attack attempt on ParaSpace (a top NFT lending protocol) and protected crypto assets worth $5M. (Mar 17 2023)

[Public Transfer Vulnerability of the Tether Gold Smart Contract](https://blocksec.com/blog/public-transfer-vulnerability-of-the-tether-gold-smart-contract): Describe a public transfer vulnerability in Tether Gold smart contract (Jan 21 2024)

[Recent DeFi Hacks: How BlockSec Phalcon Could Protect User Assets Worth Millions](https://blocksec.com/blog/recent-de-fi-hacks-how-phalcon-block-could-protect-user-assets-worth-millions): Recent Hacks Highlight Need for Around-the-Clock Blockchain Security Through Automation (Jan 9 2024)

[Reflecting on Reflection Tokens: A Security Perspective](https://blocksec.com/blog/reflecting-on-reflection-tokens-a-security-perspective): In this blog, our primary focus is on sharing security-related insights from our research on the reflection token mechanism. (Jun 6 2024)

[Reveal the “Message’’ Replay Attacks on EthereumPoW](https://blocksec.com/blog/reveal-the-message-replay-attacks-on-ethereum-po-w): Learn about recent attacks on EthereumPoW involving message replay, highlighting the vulnerability in the Omni bridge and the need for chainId verification (Jan 19 2024)

[Revest Finance Vulnerabilities: More than Re-entrancy](https://blocksec.com/blog/revest-finance-vulnerabilities-more-than-re-entrancy): Securing the Future of DeFi: Lessons Learned from Revest Finance's Vulnerabilities (Feb 4 2024)

[Revisiting the CashioApp Security Incident](https://blocksec.com/blog/revisiting-the-cashio-app-security-incident): CashioApp was exploited due to insufficient input account validation, resulting in the unauthorized minting of $CASH tokens using fake collateral and Saber accounts. (Apr 18 2024)

[Revisiting the Wormhole Attacks](https://blocksec.com/blog/revisiting-the-wormhole-attacks): An in-depth analysis of the Wormhole attack reveals vulnerabilities in the signature verification process, allowing an attacker to mint 120,000 ETH on Solana without locking any assets on Ethereum. (Apr 23 2024)

[Revolutionizing L2 Chains: Building Intrinsic Security from Sequencers](https://blocksec.com/blog/revolutionizing-l2-chains-building-intrinsic-security-from-sequencers): How BlockSec's Sequencer Threat Overwatch Program builds Phalcon Security attack detection into L2 sequencers—with Manta Pacific as the first L2 to ship it. (Jul 5 2024)

[Rustle: the First Automatic Auditor for NEAR Community](https://blocksec.com/blog/rustle-the-first-automatic-auditor-for-near-community): Rustle, developed by BlockSec, is an automatic auditor for NEAR smart contracts, offering comprehensive vulnerability detection and analysis. (Apr 18 2024)

[BlockSec Launches Safe{Wallet} Security Monitoring Solution](https://blocksec.com/blog/safe-wallet-security-monitor): Displaying transaction information comprehensively, analyzing transaction risks, and simulating transaction outcomes to prevent asset loss. (Mar 6 2025)

[Secure Smart Contract Development — Code Reentrancy in NFT Contracts](https://blocksec.com/blog/secure-smart-contract-development-code-reentrancy-in-nft-contracts-1): Explore the critical security concerns in NFT smart contracts, focusing on the reentrancy vulnerability and its impact on the Ethereum ecosystem (Feb 7 2024)

[Lead in: Secure the Solana Ecosystem](https://blocksec.com/blog/secure-the-solana-ecosystem): In this series, explore detailed insights into securing Solana through deployment, upgrades, and complex functionalities. (Apr 26 2024)

[Secure the Solana Ecosystem (1) — Hello Solana](https://blocksec.com/blog/secure-the-solana-ecosystem-1-hello-solana): BlockSec's Mission for a Secure DApp Ecosystem: Discover how BlockSec aims to enhance the security of the DApp ecosystem with a focus on Solana smart contract security. (Feb 7 2024)

[Secure the Solana Ecosystem (2) — Calling Between Programs](https://blocksec.com/blog/secure-the-solana-ecosystem-2-calling-between-programs): Master the art of cross-program invocation in Solana with our comprehensive guide and hands-on examples, taking your smart contract development to the next level (Jan 25 2024)

[Secure the Solana Ecosystem (3) — Program Upgrade](https://blocksec.com/blog/secure-the-solana-ecosystem-3-program-upgrade): This article provides a guide on program upgrade in Solana, covering the deployment of upgradable programs, code review of a sample contract, sending transactions, performing upgrades, and verifying the upgraded program. (Apr 18 2024)

[Secure the Solana Ecosystem (4) — Account Validation](https://blocksec.com/blog/secure-the-solana-ecosystem-4-account-validation): The article discusses access control related problems in the context of Solana's programming environment, focusing on the importance of proper account validation and the potential security risks. (Apr 24 2024)

[Secure the Solana Ecosystem (5) — Multi-Sig](https://blocksec.com/blog/secure-the-solana-ecosystem-5-multi-sig): In this post, we explore the implementation of multi-signature functionality in Solana, highlighting its significance in decentralized applications for bolstering security and safeguarding against private key exposure. (Apr 20 2024)

[Secure the Solana Ecosystem (6) — Multi-Sig2](https://blocksec.com/blog/secure-the-solana-ecosystem-6-multi-sig2): The article discusses a general implementation of multisig on Solana, enabling on-chain transaction signing and providing code review and deployment details. (Apr 18 2024)

[Secure the Solana Ecosystem (7) — Type Confusion](https://blocksec.com/blog/secure-the-solana-ecosystem-7-type-confusion): The article discusses the Type Confusion security issue in Solana, highlighting its impact on account deserialization/serialization and the potential for exploitation by attackers. (Apr 23 2024)

[Securing Web3 Through Proactive Threat Prevention](https://blocksec.com/blog/securing-web3-through-proactive-threat-prevention-1): In the past three years, we have observed several security incidents in the DeFi ecosystem. To defend the threats, code-centric methods, e.g., static code auditing, smart contract scanning tool, or dynamic fuzzing, are adopted by the community. (Jan 28 2023)

[Security Audit Report for Cakepie Contracts](https://blocksec.com/blog/security-audit-report-for-cakepie-contracts): This is the security audit report that we conducted for Cakepie Contracts in November 2023. (Jan 16 2024)

[Security Audit Report for LiNEAR](https://blocksec.com/blog/security-audit-report-for-li-near): This is the security audit report that we conducted for LiNEAR in April 2022. (Feb 18 2024)

[Security Audit Report for NearOinDao](https://blocksec.com/blog/security-audit-report-for-near-oin-dao): This is the security audit report that we conducted for NearOinDao in December 2021. (Feb 18 2024)

[Security Check: Do EVM-Compatible Chains Hold Up?](https://blocksec.com/blog/security-check-do-evm-compatible-chains-hold-up): Revealing Hidden Security Risks in the EVM: How BlockSec's Automated Tool Helps Take a Closer Look (Jan 5 2024)

[Security Incident on Seal Finance](https://blocksec.com/blog/security-incident-on-seal-finance): Seal Finance Protocol Compromised, Attacker Nets 80.97 ETH Worth $48,849 (Mar 4 2024)

[Security Practices in Move Development (1): Hello World](https://blocksec.com/blog/security-practices-in-move-development-1-hello-world): Learn secure development practices in Move and create an Aptos application with this comprehensive guide (Apr 23 2024)

[Security Practices in Move Development (2): Aptos Coin](https://blocksec.com/blog/security-practices-in-move-development-2-aptos-coin): Create and manage your own coin: Discover how to easily create and manage your own coin using the official standard module, coin.move, in Aptos. (Apr 24 2024)

[Monthly Security Review: March 2024](https://blocksec.com/blog/security-report-PrismaFi-Munchables-ParaSwap): Stay updated with March's security trends and our recent developments. 🙌 (Apr 1 2024)

[Security Testing Report for Radiant V2](https://blocksec.com/blog/security-testing-report-for-radiant-v2): Radiant V2 security testing found 17 issues, including 2 high-risk flaws. Learn how BlockSec uncovered and helped fix critical smart contract bugs. (Jan 9 2024)

[Lead in: Solana Simplified](https://blocksec.com/blog/solana-guide): BlockSec's three-part Solana Simplified guide: Solana's core concepts and account model, writing your first program in Rust, and reading a transaction. (Jul 12 2024)

[Solana Simplified 02: Writing Your First Solana Smart Contract from Scratch](https://blocksec.com/blog/solana-simplified-02-writing-your-first-solana-smart-contract-from-scratch): Master writing Solana programs with just this one article! Covering everything from environment setup, contract logic, to program testing. (Jun 21 2024)

[Solana Simplified 03: Understand Solana Transactions in 5 Minutes](https://blocksec.com/blog/solana-simplified-03-understand-solana-transactions-5-minutes): Master Solana transactions in 5 minutes! Learn about Solana token implementation and analyze a real transaction step-by-step using BlockSec's Phalcon Explorer. (Jun 27 2024)

[Solana Simplified 01: Master Solana Core Concepts in One Read](https://blocksec.com/blog/solana-simplified-master-solana-core-concepts-in-one-read): In just 10 minutes, understand Solana's operating mechanism, account model, and transactions, and uncover the reasons behind its explosive growth. (Jun 7 2024)

[What Are Stablecoin Payments? A Complete Guide for Businesses](https://blocksec.com/blog/stablecoin-payments-explained): What are stablecoin payments? How on-chain settlement replaces SWIFT and correspondent banks, the real market size, and how they compare to bank rails. (Aug 5 2026)

[Stablecoins That Cannot Be Frozen: 2026 Map](https://blocksec.com/blog/stablecoins-that-cannot-be-frozen): A 2026 map of the freeze-capability spectrum across seven stablecoins (USDT, USDC, DAI, LUSD, Frax, RAI, USDe) with honest liquidity trade-offs. (Aug 4 2026)

[Systematic Approach to Maintaining EVM Compatibility and Security](https://blocksec.com/blog/systematic-approach-to-maintaining-evm-compatibility-and-security-1): EVM compatibility bugs found fast: BlockSec’s differential fuzzing uncovered 8 issues in Aurora and Moonbeam. Learn how it strengthens blockchain security. (Mar 27 2023)

[Taint Analysis in Crypto: Poison, Haircut, and FIFO Explained](https://blocksec.com/blog/taint-analysis-crypto): Taint analysis is how investigators trace stolen crypto across a blockchain. Learn the Poison, Haircut, and FIFO methods with a clear worked Ethereum example. (Jul 22 2026)

[Telcoin Security Incident Post-mortem and In-Depth Analysis](https://blocksec.com/blog/telcoin-security-incident-in-depth-analysis): A comprehensive post-mortem and analysis of the security breach Telcoin experienced on Christmas Day 2023. (Jan 11 2024)

[Ten Most Frequently Asked Questions About BlockSec Phalcon](https://blocksec.com/blog/ten-most-frequently-asked-questions-about-phalcon-block): We have found that users are particularly interested in the following questions about BlockSec Phalcon... (Dec 15 2023)

[Tether Freezes $6.76M USDT: On-Chain Compliance Explained](https://blocksec.com/blog/tether-freezes-6-76-m-usdt-linked-to-iran-s-irgc-and-houthi-forces-why-on-chain-compliance-is-now-a-geopolitical-battlefield): Tether freezes $6.76M USDT linked to IRGC-tied networks, spotlighting stricter 2026 stablecoin sanctions. See how real-time KYT blocks sanctioned funds. (May 8 2026)

[The Analysis of FEGtoken Security Incident: Devil’s in the Details](https://blocksec.com/blog/the-analysis-of-fegtoken-security-incident-devils-in-the-details): How a Subtle Contract Flaw Led to a Million-Dollar FEGtoken Heist on Multiple Blockchains (Feb 7 2024)

[The Analysis of Indexed Finance Security Incident](https://blocksec.com/blog/the-analysis-of-indexed-finance-security-incident): Learn secure development practices in Move and create an Aptos application with this comprehensive guide (Apr 20 2024)

[The Analysis of Nerve Bridge Security Incident](https://blocksec.com/blog/the-analysis-of-nerve-bridge-security-incident): Exploring the similarities between the Nerve Bridge and Synapse incidents, shedding light on the attacker's modus operandi (Jan 15 2024)

[The Analysis of the Array Finance Security Incident](https://blocksec.com/blog/the-analysis-of-the-array-finance-security-incident): Exploring the Array Finance Exploit: A Step-by-Step Attack Analysis" - A detailed breakdown of the malicious transactions that compromised Array Finance, offering insights into DeFi vulnerabilities (Feb 4 2024)

[The Analysis of the DAOMaker Attack](https://blocksec.com/blog/the-analysis-of-the-dao-maker-attack): Explore the step-by-step breakdown of the DAOMaker attack, examining the smart contract vulnerabilities that led to unauthorized admin role assignments and illicit fund withdrawals (Jan 29 2024)

[The Analysis of the Popsicle Finance Security Incident](https://blocksec.com/blog/the-analysis-of-the-popsicle-finance-security-incident): Attack Flow Unveiled: The Steps Taken by the Attacker to Exploit Popsicle Finance (Jan 19 2024)

[The Analysis of the Sanshu Inu Security Incident](https://blocksec.com/blog/the-analysis-of-the-sanshu-inu-security-incident): Ethereum Blockchain Exploit: Sanshu Inu Suffers Smart Contract Attack Revealed by DeFiRanger (Feb 4 2024)

[The Analysis of the Zerogoki Attack](https://blocksec.com/blog/the-analysis-of-the-zerogoki-attack): Investigating Zerogoki Attack: How Crafted Token Numbers Led to a Hefty Theft (Mar 4 2024)

[[The Butterfly Effect] The Compound Security Incident Caused by a Bugfix](https://blocksec.com/blog/the-butterfly-effect-the-compound-security-incident-caused-by-a-bugfix): The article describes two bugs in the Compound protocol and their impact on the distribution of COMP tokens to users. (Apr 18 2024)

[The Decentralization Dilemma: Cascading Risk and Emergency Power in the KelpDAO Crisis](https://blocksec.com/blog/the-decentralization-dilemma-cascading-risk-and-emergency-power-in-the-kelp-dao-crisis): This BlockSec deep-dive analyzes the KelpDAO $290M rsETH cross-chain bridge exploit (April 18, 2026), attributed to the Lazarus Group, tracing a causal chain across three layers: how a single-point DVN dependency enabled the attack, how DeFi composability cascaded the damage through Aave V3 lending markets to freeze WETH liquidity exceeding $6.7B across Ethereum, Arbitrum, Base, Mantle, and Linea, and how the crisis forced decentralized governance to exercise centralized emergency powers. The article examines three parameters that shaped the cascade's severity (LTV, pool depth, and cross-chain deployment count) and provides an exclusive technical breakdown of Arbitrum Security Council's forced state transition, an atomic contract upgrade that moved 30,766 ETH without the holder's signature. (Apr 22 2026)

[The Further Analysis of the Poly Network Attack](https://blocksec.com/blog/the-further-analysis-of-the-poly-network-attack): Delve into the attack flow on Ethereum, revealing a cross-chain exploit spanning Ontology, Poly, and Ethereum chains (Jan 25 2024)

[The Hidden Truths of Blockchain Legal Compliance in 2026](https://blocksec.com/blog/the-hidden-truths-of-blockchain-legal-compliance-in-2026): Blockchain legal compliance in 2026: learn the 10 hidden risks, from DAO liability to sanctions screening, before gaps turn into fines. (Feb 13 2026)

[The Informal Security Review of the Patch to Fix the Vulnerability of the Poly Network Hack](https://blocksec.com/blog/the-informal-security-review-of-the-patch-to-fix-the-vulnerability-of-the-poly-network-hack): This blog presents an informal security review of the patch implemented to fix the recent vulnerability in Poly network, highlighting the use of allow lists and the resulting security properties. (Apr 20 2024)

[The Initial Analysis of the bZx Security Incident](https://blocksec.com/blog/the-initial-analysis-of-the-b-zx-security-incident): The article discusses the hacking incident on the bZX protocol, attributing it to a compromised developer's private key and emphasizing the significance of protecting private keys in DApp security. (Apr 18 2024)

[The Initial Analysis of the PolyNetwork Hack](https://blocksec.com/blog/the-initial-analysis-of-the-poly-network-hack): PolyNetwork Hack: Exploit Analysis of the Root Cause of the 300 Million USDs Attack on Multiple Chains (Jan 12 2024)

[The Real Root Cause of the Vee Finance Security Incident](https://blocksec.com/blog/the-real-root-cause-of-the-vee-finance-security-incident): Vee Finance Report Misidentifies Root Cause of Security Breach (Mar 4 2024)

[The Retrospection of the Poly Network Hack from a Security Researcher Perspective](https://blocksec.com/blog/the-retrospection-of-the-poly-network-hack-from-a-security-researcher-perspective): An analysis of the Poly Network Hack and the lessons learned regarding security vulnerabilities in decentralized finance projects. (Apr 18 2024)

[The Short Analysis of the Flashloan Attack to the APE AirDrop](https://blocksec.com/blog/the-short-analysis-of-the-flashloan-attack-to-the-ape-air-drop): Analysis of an attack that manipulated the spot price of assets to profit from an APE token airdrop (Jan 12 2024)

[The Top 5 Smart Contract Auditors:  BlockSec Leading the Way](https://blocksec.com/blog/the-top-5-smart-contract-auditors-block-sec-leading-the-way): Explore the evolving landscape of smart contract audits in 2024 and discover the top five audit firms, including BlockSec, known for their comprehensive evaluations, professional reports, EVM chain expertise, and exceptional client satisfaction. (Apr 8 2024)

[The Top 5 Solidity Audit Vendors in 2024: A Comprehensive Review](https://blocksec.com/blog/the-top-5-solidity-audit-vendors-in-2024-a-comprehensive-review): Explore the top 5 Solidity audit vendors in 2024 and BlockSec's advantages in offering unparalleled expertise, tailored solutions, and comprehensive security assessments for smart contracts. (Apr 15 2024)

[Security and Privacy Concerns of Private Transaction Services on Binance Smart Chain](https://blocksec.com/blog/the-two-sides-of-the-private-tx-service-on-binance-smart-chain): The article explores privacy and security challenges of private transaction technologies in protecting users (Jan 19 2024)

[Thorns in the Rose: Exploring Security Risks in Uniswap v4's Novel Hook Mechanism](https://blocksec.com/blog/thorns-in-the-rose-exploring-security-risks-in-uniswap-v4-s-novel-hook-mechanism): This is the first article of our series exploring security risks in Uniswap v4’s hook mechanism! In this article, we provide a comprehensive overview and foundational understanding for our readers. (Nov 6 2023)

[Tiny Rounding Down, Big Fund Losses: An in-depth analysis of the recent Balancer incident](https://blocksec.com/blog/tiny-rounding-down-big-fund-losses-an-in-depth-analysis-of-the-recent-balancer-incident): A comprehensive analysis of the Balancer attack, which occurred on August 27 2023 (Jan 19 2024)

[Top 10 "Awesome" Security Incidents in 2025](https://blocksec.com/blog/top-10-awesome-security-incidents-in-2025): Top 10 crypto security incidents of 2025 by BlockSec: losses, root causes, novel techniques, and detailed follow-up analyses to strengthen Web3 defenses. (Feb 11 2026)

[Top 10 "Awesome" Security Incidents in 2023](https://blocksec.com/blog/top-ten-awesome-security-incidents-in-2023): In this series of articles, we will illustrate the top ten security incidents that are worth mentioning in 2023 and their reasons. (Feb 5 2024)

[Trace AI: Track Stolen Crypto With an AI Agent | BlockSec](https://blocksec.com/blog/trace-ai-track-stolen-crypto): Trace AI by BlockSec traces stolen crypto across 8 chains from a single conversation, producing a full fund-flow report you can use to report or recover funds. (Jul 10 2026)

[Tracing $1.6B in TRON USDT: Inside the VerilyHK Ponzi Infrastructure](https://blocksec.com/blog/tracing-16-b-in-tron-usdt-inside-the-verily-hk-ponzi-infrastructure): An on-chain investigation into VerilyHK, a fraudulent platform that moved $1.6B in TRON USDT through a multi-layered fund-routing infrastructure of rotating wallets, paired payout channels, and exchange exit funnels, with traced connections to the FinCEN-sanctioned Huione Group. (Apr 8 2026)

[Tracing the Stolen Fund of the Ronin Bridge](https://blocksec.com/blog/tracing-the-stolen-fund-of-the-ronin-bridge): Ronin Bridge security incident: Compromised private keys led to the theft of 173,600 ETH and 25,500,000 USDC. Stolen USDC swiftly swapped for ETH, with 6,250 ETH already transferred out. (Apr 18 2024)

[Track Stablecoin Payments on Plasma with Phalcon Explorer](https://blocksec.com/blog/track-stablecoin-payments-on-plasma-with-phalcon-explorer): Phalcon Explorer supports Plasma: analyze payment flows, debug smart contracts, and trace funds on a stablecoin‑native L1 with real-time monitoring (Dec 24 2025)

[Tradeoff Between Convenience and Security: Unlimited Approval in ERC20](https://blocksec.com/blog/tradeoff-between-convenience-and-security-unlimited-approval-in-erc-20): Exploring the Risks of Unlimited Approval in Ethereum's ERC20 Token Standard. (Jan 12 2024)

[#7 Trust Wallet Incident: A Stolen API Key Turns the Official Update Channel into a Backdoor](https://blocksec.com/blog/trust-wallet-incident-a-stolen-api-key-turns-the-official-update-channel-into-a-backdoor): Dec 25, 2025: Trust Wallet Chrome v2.68 backdoored via supply chain attack, exfiltrating seed phrases and enabling ~$8.5M theft across multiple chains. (Feb 11 2026)

[How to Unfreeze USDT on Binance: 5-Step Playbook](https://blocksec.com/blog/unfreeze-usdt-on-binance): A Binance USDT freeze is a Binance-side compliance hold (KYC / AML / jurisdiction), not a Tether on-chain blacklist. 5-step appeal playbook + timelines. (Aug 4 2026)

[Unlocking Web3 Security: How BlockSec Combats DeFi Hacks](https://blocksec.com/blog/unlocking-web3-security-battling-the-dark-side-1): In the ever-evolving world of Web3, the significance of security cannot be overstated. Despite bear market conditions, the alarming surge in DeFi hacks and scams has raised concerns. (Sep 5 2023)

[TxPhishScope: Detecting Transaction-Based Phishing on Ethereum](https://blocksec.com/blog/unveiling-block-sec-s-large-scale-tx-phish-website-detection-system): BlockSec's TxPhishScope detected 33,130+ phishing websites on Ethereum. Learn how transaction-based phishing works and how to defend against it. (Nov 24 2023)

[USDT and Illicit Finance: New Criminal Tactics and Compliance Solutions](https://blocksec.com/blog/usdt-and-illicit-finance-new-criminal-tactics-and-compliance-solutions): Criminals exploit USDT for laundering, scams, and fraud across chains. Learn six emerging tactics and how Phalcon Compliance detects and blocks illicit flows. (Sep 26 2025)

[USDT Blacklist 2026: Who's On It, How Tether Decides](https://blocksec.com/blog/usdt-blacklist-explained-2026): USDT blacklist 2026: $5.69B and 9,597 addresses frozen since 2018. See who's on it, why Tether blacklists, and how GENIUS Act changes the rules. (Jul 27 2026)

[USDT Freeze 2026: Who's Frozen, How to Check, Live Data](https://blocksec.com/blog/usdt-freeze-stablecoin-compliance-guide): USDT freeze mechanics, live blacklist stats ($5.7B), unfreeze paths, and reissue for victims. A 2026 guide for compliance teams, OTC desks, and receivers. (Jul 27 2026)

[Phalcon Debug Transaction: Step-by-Step Guide to Analyze Efficiently](https://blocksec.com/blog/use-phalcon-debug-dive-transaction): Learn how to use Phalcon debug transaction features to analyze blockchain transactions efficiently. Explore debug mode, console, and sharing tools now. (Mar 29 2023)

[Blockchain Compliance Platform Architecture: 2026 VASP Regulatory Guide](https://blocksec.com/blog/vasp-blockchain-compliance-platform-architecture-2026): 2026 VASP blockchain compliance guide. Covers KYT, risk scoring, SAR automation, and multi-jurisdictional API integration. (Jun 8 2026)

[VASP Crypto Compliance Obligations: A Practical Checklist for Virtual Asset Service Providers](https://blocksec.com/blog/vasp-compliance-checklist): VASP crypto compliance checklist: five obligations every virtual asset service provider owes, mapped to tooling, in a quarter-one build order for lean teams. (Sep 9 2026)

[VASP Guide: Engineering a Crypto Compliance Software Stack from Scratch](https://blocksec.com/blog/vasp-crypto-compliance-software-stack-engineering-guide): VASP engineering guide for crypto compliance stacks. Covers KYT pipelines, SAR automation, and multi-jurisdictional filing. (Jun 8 2026)

[Crypto Compliance Tools: A Pragmatic Purchasing Guide for VASPs](https://blocksec.com/blog/vasp-crypto-compliance-tools-guide): Crypto compliance tools guide for VASPs. Covers AML monitoring, wallet screening, KYT, case management, and a cost framework for small and mid-size virtual asset service providers. (Jun 8 2026)

[Venus Thena (THE) Incident: What Broke and What Was Missed](https://blocksec.com/blog/venus-thena-donation-attack): On March 15, 2026, an attacker bypassed the THE (Thena) supply cap on Venus Protocol (BNB Chain) through a donation attack, inflating a collateral position to 3.67x the intended limit and borrowing ~$14.9M in assets. Both sides lost money on-chain: Venus was left with ~$2.15M in bad debt after 254 liquidation bots competed across 8,048 transactions, while the attacker retained only ~$5.2M against a $9.92M investment. This deep dive examines what broke across three lines of defense (exposure limits, collateral valuation, and liquidation) and the monitoring gaps that left months of on-chain warning signals unacted upon. (Mar 18 2026)

[Web3 Attack Surfaces: A Penetration Testing Overview](https://blocksec.com/blog/web3-attack-surfaces-penetration-testing): What blockchain penetration testing must cover in a crypto institution: a four-component model and five attack surfaces, from signing intent to fund logic. (Sep 3 2026)

[Web3 Companion: The Open-Source Secure Agentic Wallet](https://blocksec.com/blog/web3-companion-secure-agentic-wallet): Current AI agent wallets are fundamentally broken. Learn how BlockSec's open-source Web3 Companion isolates private keys and enforces hard policies to keep funds safe. (Jun 23 2026)

[Web3 Compliance Essentials for Exchanges & Institutions](https://blocksec.com/blog/web3-compliance-essentials-for-exchanges-payment-platforms-and-financial-institutions): Learn how Web3 compliance works for exchanges, payment platforms, and financial institutions — from real-time AML screening to cross-chain fund tracing. (Mar 3 2026)

[Beyond the Smart Contract: Domain and DNS Operational Security in Web3](https://blocksec.com/blog/web3-dns-security-defi-domains): We scanned the DNS setup of 100 top DeFi domains: 72% have no CAA record and 47% fail DNSSEC. See the gaps attackers use to hijack your frontend. (Sep 9 2026)

[~$39.5M Lost: Allbridge, Wanchain & More | BlockSec Weekly](https://blocksec.com/blog/web3-security-allbridge-wanchain-exploits): ~$39.5M lost. Allbridge ~$1.65M Solana input validation flaw, AFX Trade ~$24.15M key compromise, Wanchain ~$500K message encoding flaw, Lien Finance ~$542K vali (Jul 30 2026)

[~$5.98M Lost: Aztec, Raydium & More | BlockSec Weekly](https://blocksec.com/blog/web3-security-aztec-raydium-more): Aztec $2.15M rollup input-validation bug, Raydium $1.34M AMM v3 exploit, Top Token $1.59M governance attack. Full on-chain analysis inside. (Jun 17 2026)

[~$1.35M Lost: BarnBridge, DeFiTuna | BlockSec Weekly](https://blocksec.com/blog/web3-security-barnbridge-defituna-exploits): ~$1.35M lost — BarnBridge ~$776K governance exploit on Ethereum, DeFiTuna ~$570K lending exploit on Solana. Full on-chain analysis. (Jul 22 2026)

[~$88M Lost: COLDCARD & LULA Exploits | BlockSec Weekly](https://blocksec.com/blog/web3-security-coldcard-entropy-lula-exploits): COLDCARD's hardware-wallet firmware entropy failure let ~1,370 BTC (~$88M) be swept in several drain waves; LULA lost ~$578K to BNB Chain reserve manipulation. (Aug 5 2026)

[~$23M Lost: Cosmos EVM, Moonwell Exploits | BlockSec Weekly](https://blocksec.com/blog/web3-security-cosmos-evm-moonwell-exploits): ~$22.7M lost across five exploits: a six-chain Cosmos EVM exploit (~$5.7M), Moonwell collateral+oracle manipulation (~$9.1M), plus Ajna, Rain, Tectonic. (Sep 4 2026)

[~$16M Lost: DxSale, SquidRouterModule & More | BlockSec Weekly](https://blocksec.com/blog/web3-security-dxsale-squidrouter-more): DxSale $7.3M token-locker exploit, Gravity Bridge $5.4M bridge exploit, SquidRouterModule $3.2M Axelar misuse. Full on-chain analysis inside. (Jun 3 2026)

[Harmony Cross-Shard ONE Mint + ~$47M Key Losses | BlockSec Weekly](https://blocksec.com/blog/web3-security-harmony-kite-exploits): Harmony's cross-shard receipt replay forged ~3.01T ONE (nominal value not realizable, excluded); the week's ~$47M came mainly from three private-key compromises (Aug 19 2026)

[~$800K Lost: Hinkal Double-Spend | BlockSec Weekly](https://blocksec.com/blog/web3-security-hinkal-double-spend): ~$800K lost as Hinkal shielded pool suffers double-spend on Ethereum. A legacy note format flaw likely allowed repeated withdrawals from one deposit. (Jul 9 2026)

[~$18M Lost: jaredFromSubway, Aztec & More | BlockSec Weekly](https://blocksec.com/blog/web3-security-jaredfromsubway-aztec-more): jaredFromSubway $15M reversed-approval exploit, Aztec $2.2M ZK escape-hatch circuit bug, plus one more incident. Full on-chain analysis inside. (Jun 25 2026)

[~$1.6M Lost: Moke Token, LpdFi Exploits | BlockSec Weekly](https://blocksec.com/blog/web3-security-moke-token-lpdfi-exploits): ~$1.6M lost to two BNB Chain price-manipulation exploits: Moke Token ~$906K via spot price and duplicated LP dividends, LpdFi ~$697K via reused AMM reserves. (Aug 12 2026)

[~$36M Lost: Summer.fi, Bonzo Lend & More | BlockSec Weekly](https://blocksec.com/blog/web3-security-summerfi-bonzo-lend-exploits): ~$36M lost: Summer.fi $6.04M share price inflation via incomplete offboarding, Bonzo Lend $9.05M oracle exploit, BonkDAO $21.2M governance attack. (Jul 15 2026)

[~$4.1M Lost: Taiko, SecondFi Exploits | BlockSec Weekly](https://blocksec.com/blog/web3-security-taiko-secondfi-exploits): ~$4.1M lost. Taiko bridge exploit via leaked SGX key and unchecked debug attribute (~$1.7M). SecondFi Ed25519 flaw enables private key recovery (~$2.4M) (Jul 1 2026)

[~$10.26M Lost: Term Finance, MAYAChain | BlockSec Weekly](https://blocksec.com/blog/web3-security-term-finance-mayachain-exploits): Term Finance lost ~$8.5M to a governance takeover of six vaults on Ethereum; MAYAChain lost ~$1.76M to a chained accounting flaw draining a low-liquidity pool. (Aug 26 2026)

[~$104.6M Lost: Verus, RetoSwap & More | BlockSec Weekly](https://blocksec.com/blog/web3-security-verus-bridge-retoswap-more): Verus $11.7M bridge exploit, RetoSwap $2.7M arbitrator hijack, plus $90.2M across three private-key compromises. Full on-chain analysis inside. (May 27 2026)

[Zcash Orchard Soundness Bug Analysis | BlockSec Weekly](https://blocksec.com/blog/web3-security-zcash-orchard-soundness-bug-analysis): A soundness bug in Zcash's Orchard circuit could have enabled undetectable ZEC counterfeiting in the shielded pool. Full AI-assisted audit inside. (Jun 10 2026)

[Web3 Smart Contract & EVM Chain Audits | BlockSec](https://blocksec.com/blog/web3-smart-contract-evm-chain-audits-blocksec): BlockSec secures Web3 with attacker-driven audits, chain reviews, and zero-day detection - battle-tested, blocking 20+ hacks and $20M+ losses. (Dec 4 2025)

[Weekly Web3 Security Incident Roundup | Apr 13 – Apr 19, 2026](https://blocksec.com/blog/weekly-web3-security-incident-roundup-apr-13-apr-19-2026): This BlockSec weekly security report covers four attack incidents detected between April 13 and April 19, 2026, across multiple chains such as Ethereum, Unichain, Arbitrum, and NEAR, with total estimated losses of approximately $310M. The highlighted incident is the $290M KelpDAO rsETH bridge exploit, where an attacker poisoned the RPC infrastructure of the sole LayerZero DVN to fabricate a cross-chain message, triggering a cascading WETH freeze across five chains and an Arbitrum Security Council forced state transition that raises questions about the actual trust boundaries of decentralized systems. Other incidents include a $242K MMR proof forgery on Hyperbridge, a $1.5M signed integer abuse on Dango, and an $18.4M circular swap path exploit on Rhea Finance's Burrowland protocol. (Apr 22 2026)

[Weekly Web3 Security Incident Roundup | Apr 6 – Apr 12, 2026](https://blocksec.com/blog/weekly-web3-security-incident-roundup-apr-6-apr-12-2026): This BlockSec weekly security report covers four DeFi attack incidents detected between April 6 and April 12, 2026, across Linea, BNB Chain, Arbitrum, Optimism, Avalanche, and Base, with total estimated losses of approximately $928.6K. Notable incidents include a $517K approval-related exploit where a user mistakenly approved a permissionless SquidMulticall contract enabling arbitrary external calls, a $193K business logic flaw in the HB token's reward-settlement logic that allowed direct AMM reserve manipulation, a $165.6K exploit in Denaria's perpetual DEX caused by a rounding asymmetry compounded with an unsafe cast, and a $53K access control issue in XBITVault caused by an initialization-dependent check that failed open. The report provides detailed vulnerability analysis and attack transaction breakdowns for each incident. (Apr 16 2026)

[Weekly Web3 Security Incident Roundup | Feb 16 – Feb 22, 2026](https://blocksec.com/blog/weekly-web3-security-incident-roundup-feb-16-feb-22-2026): During the week of February 16 to February 22, 2026, three blockchain security incidents were reported with total losses of ~$6.22M. The incidents occurred across Base, BSC, and Ethereum, exposing critical vulnerabilities in oracle configuration, mathematical logic, and bridge access control. The primary causes included an oracle misconfiguration during a governance upgrade that incorrectly assigned a raw exchange rate feed instead of a composite price oracle to undervalue collateral, an unchecked arithmetic overflow in a bonding curve contract that allowed game tokens to be minted at near-zero cost due to integer wrapping, and a private key compromise of a bridge validator owner that enabled the attacker to transfer contract ownership and drain locked reserve assets. (Feb 27 2026)

[Weekly Web3 Security Incident Roundup | Feb 2 – Feb 8, 2026](https://blocksec.com/blog/weekly-web3-security-incident-roundup-feb-2-feb-8-2026): During the week of February 2 to February 8, 2026, six blockchain security incidents were reported with total losses of ~$3.8M. These involved access control flaws, improper input validation, token design flaws, and user misuse across DeFi protocols on Ethereum and BNB Chain. The primary causes included permissionless cross-chain express execution bypassing gateway validation, unvalidated message payloads enabling arbitrary external calls, a flawed burn mechanism manipulating AMM pool reserves, unvalidated user-supplied calldata forwarded to external routers and Safe modules, and dangling ERC-20 approvals exploited through a permissionless batch executor. (Feb 12 2026)

[Weekly Web3 Security Incident Roundup | Feb 23 – Mar 1, 2026](https://blocksec.com/blog/weekly-web3-security-incident-roundup-feb-23-mar-1-2026): During the week of February 23 to March 1, 2026, seven blockchain security incidents were reported with total losses of ~$13M. The incidents affected multiple protocols, exposing critical weaknesses in oracle design/configuration, cryptographic verification, and core business logic. The primary drivers included oracle manipulation/misconfiguration that led to the largest loss at YieldBloxDAO (~$10M), a crypto-proof verification flaw that enabled the FOOMCASH (~$2.26M) exploit, and additional token design and logic errors impacting Ploutos, LAXO, STO, HedgePay, and an unknown contract, underscoring the need for rigorous audits and continuous monitoring across all protocol layers. (Mar 4 2026)

[Weekly Web3 Security Incident Roundup | Feb 9 – Feb 15, 2026](https://blocksec.com/blog/weekly-web3-security-incident-roundup-feb-9-feb-15-2026): During the week of February 9 to February 15, 2026, three blockchain security incidents were reported with total losses of ~$657K. All incidents occurred on the BNB Smart Chain and involved flawed business logic in DeFi token contracts. The primary causes included an unchecked balance withdrawal from an intermediary contract that allowed donation-based inflation of a liquidity addition targeted by a sandwich attack, a post-swap deflationary clawback that returned sold tokens to the caller while draining pool reserves to create a repeatable price-manipulation primitive, and a token transfer override that burned tokens directly from a Uniswap V2 pair's balance and force-synced reserves within the same transaction to artificially inflate the token price. (Feb 18 2026)

[Weekly Web3 Security Incident Roundup | Jan 25 – Feb 1, 2026](https://blocksec.com/blog/weekly-web3-security-incident-roundup-jan-25-feb-1-2026): During the week of January 25 to February 1, 2026, six blockchain security incidents were reported with total losses of ~$18.05M. These involved improper input validation, token design flaws, key compromises, and business logic errors across DeFi protocols on multiple chains. The primary causes included unchecked user inputs enabling arbitrary calls, flawed burn mechanisms allowing price manipulation, compromised developer tools, and missing solvency checks in lending functions. (Feb 4 2026)

[Weekly Web3 Security Incident Roundup | Mar 16 – Mar 22, 2026](https://blocksec.com/blog/weekly-web3-security-incident-roundup-mar-16-mar-22-2026): This BlockSec weekly security report covers seven DeFi attack incidents detected between March 16 and March 22, 2026, across Ethereum, BNB Chain, Polygon, and Polygon zkEVM, with total estimated losses of approximately $82.7M. The most significant event was the Resolv stablecoin protocol's infrastructure-key compromise, which led to over $80M in unauthorized USR minting and cross-protocol contagion across lending markets. Other incidents include a $2.15M donation attack combined with market manipulation on Venus Protocol, a $257K empty-market exploit on dTRINITY (Aave V3 fork), access control vulnerabilities in Fun.xyz and ShiMama, a weak-randomness exploit in BlindBox, and a redemption accounting flaw in Keom. (Mar 25 2026)

[Weekly Web3 Security Incident Roundup | Mar 2 – Mar 8, 2026](https://blocksec.com/blog/weekly-web3-security-incident-roundup-mar-2-mar-8-2026): During the week of March 2 to March 8, 2026, seven blockchain security incidents were reported with total losses of ~$3.25M. The incidents occurred across Base, BNB Chain, and Ethereum, exposing critical vulnerabilities in smart contract business logic, token deflationary mechanics, and asset price manipulation. The primary causes included a double-minting logic flaw during full token deposits that allowed an attacker to exponentially inflate their balances through repeated burn-and-mint cycles, a price manipulation vulnerability in an AMM-based lending market where artificially inflated vault shares created divergent price anchors to incorrectly force healthy positions into liquidation, and a flawed access control implementation relying on trivially spoofed contract interfaces that enabled attackers to bypass authorization to batch-mint and dump arbitrary tokens. (Mar 25 2026)

[Weekly Web3 Security Incident Roundup | Mar 23 – Mar 29, 2026](https://blocksec.com/blog/weekly-web3-security-incident-roundup-mar-23-mar-29-2026): This BlockSec weekly security report covers eight DeFi attack incidents detected between March 23 and March 29, 2026, across Ethereum and BNB Chain, with total estimated losses of approximately $1.53M. Incidents include a $679K flawed burn mechanism exploit on the BCE token, a $512K spot-price manipulation attack on Cyrus Finance's PancakeSwap V3 liquidity withdrawal, a $133.5K flash-loan-driven referral reward manipulation on a TUR staking contract, and multiple integer overflow, reentrancy, and accounting error vulnerabilities in DeFi protocols. The report provides detailed vulnerability analysis and attack transaction breakdowns for each incident. (Apr 2 2026)

[Weekly Web3 Security Incident Roundup | Mar 30 – Apr 5, 2026](https://blocksec.com/blog/weekly-web3-security-incident-roundup-mar-30-apr-5-2026): This BlockSec weekly security report covers nine DeFi attack incidents detected between March 30 and April 5, 2026, across Solana, BNB Chain, Arbitrum, and Polygon, with total estimated losses of approximately $287M. The week was dominated by the $285.3M Drift Protocol exploit on Solana, where attackers combined multisig signer social engineering with Solana's durable nonce mechanism to bypass a zero-timelock 2-of-5 Security Council, alongside notable incidents including a $950K flash loan TWAP manipulation against the LML staking protocol, a $359K Silo Finance vault inflation via an external `wstUSR` market donation exploiting a depegged-asset oracle and `totalAssets()` accounting flaw, and an EIP-7702 delegated-code access control failure. The report provides detailed vulnerability analysis and attack transaction breakdowns for each incident, covering flawed business logic, access control, price manipulation, phishing, and misconfiguration attack types. (Apr 9 2026)

[Weekly Web3 Security Incident Roundup | Mar 9 – Mar 15, 2026](https://blocksec.com/blog/weekly-web3-security-incident-roundup-mar-9-mar-15-2026): This BlockSec weekly security report covers eight DeFi attack incidents detected between March 9 and March 15, 2026, across Ethereum and BNB Chain, with total estimated losses of approximately $1.66M. Incidents include a $1.01M AAVE incorrect liquidation caused by oracle misconfiguration, a $242K exploit on the deflationary token MT due to flawed trading restrictions, a $149K exploit on the burn-to-earn protocol DBXen from `_msgSender()` and `msg.sender` inconsistency, and a $131K attack on AM Token exploiting a flawed delayed-burn mechanism. The report provides detailed vulnerability analysis and attack transaction breakdowns for each incident. (Mar 18 2026)

[~$7.04M Lost: GiddyDefi, Volo Vault & More | BlockSec Weekly](https://blocksec.com/blog/weekly-web3-security-roundup-2026-04-26): ~$7.04M lost: GiddyDefi $1.3M EIP-712 signature replay, Volo Vault $3.5M operator key leak, Purrlend $1.5M, SingularityFinance $413K oracle misconfig. (Apr 29 2026)

[~$15.9M Lost: Trusted Volumes, Wasabi & More | BlockSec Weekly](https://blocksec.com/blog/weekly-web3-security-roundup-2026-05-10): Trusted Volumes $5.87M RFQ authorization bypass, Wasabi $5.7M infrastructure compromise, Aftermath $1.14M fee exploit. Full on-chain analysis inside. (May 17 2026)

[~$4.72M Lost: TAC, Transit Finance & More | BlockSec Weekly](https://blocksec.com/blog/weekly-web3-security-roundup-2026-05-17): ~$4.72M lost: Transit Finance $1.88M legacy calldata exploit on TRON, TAC $2.8M bridge verification bypass on TON, Boost Hook $46.75K V4 spot price manipulation (May 19 2026)

[What Are the Security Risks Faced by DeFi Protocols and How to Ensure Protocol Security?](https://blocksec.com/blog/what-are-the-security-risks-faced-by-de-fi-protocols-and-how-to-ensure-protocol-security): This article focuses on mitigating risks to ensure robust DeFi protocol security, covering aspects such as code vulnerabilities, operational threats, and external dependencies. (Jun 12 2024)

[What Data Is Needed for a Crypto AML Address Check?](https://blocksec.com/blog/what-data-needed-crypto-aml-address-check): A crypto AML address check needs one input: the wallet address. Learn what optional context sharpens accuracy and what the screening engine returns. (Jul 23 2026)

[What Does PEP Mean at Work? Plain Answers for New Compliance Team Members](https://blocksec.com/blog/what-does-pep-mean): What does PEP mean? A risk category, not an accusation: public office raises money-laundering risk. Plain-language answers for new compliance team members. (Sep 9 2026)

[What Is Address-Based AML Monitoring in Crypto? A Plain Guide](https://blocksec.com/blog/what-is-address-based-aml-monitoring): Phalcon Compliance monitors blockchain addresses in real time against 600M+ labeled wallets. See how address monitoring catches illicit exposure identity checks miss. (Jul 21 2026)

[What Is Anti-Money Laundering (AML)? The Five-Pillar Framework Explained](https://blocksec.com/blog/what-is-anti-money-laundering): Anti-money laundering (AML) is the framework institutions use to detect, block, and report illicit funds. Learn AML and the FinCEN BSA five-pillar program. (Jul 29 2026)

[What Is BlockSec Phalcon? How Does Phalcon Accurately Identify and Rapidly Block Hacker Attacks?](https://blocksec.com/blog/what-is-block-sec-phalcon-how-does-phalcon-accurately-identify-and-rapidly-block-hacker-attacks): What is BlockSec Phalcon? Why Protocols Need Phalcon? How Phalcon Works Technically? How Can I Subscribe to Phalcon? This article will tell you the answer. (Apr 22 2024)

[What Is Blockchain Penetration Testing? Definitions and Boundaries](https://blocksec.com/blog/what-is-blockchain-penetration-testing): What blockchain penetration testing is: adversarial validation of exploitable paths in a running system, and how it differs from code audit and bug bounty. (Sep 3 2026)

[Customer Address Due Diligence in Crypto: On-Chain CDD Explained](https://blocksec.com/blog/what-is-customer-address-due-diligence-crypto): Customer address due diligence in crypto: how address-level CDD differs from identity verification, what risk signals it covers, and why ongoing monitoring is required. (Jul 23 2026)

[What Is Illicit Crypto and How Is It Flagged: A Compliance Primer](https://blocksec.com/blog/what-is-illicit-crypto): Illicit crypto is cryptocurrency tied to crime or sanctioned entities. Learn the two categories, three flagging layers, and why detection must be continuous. (Jul 27 2026)

[What Is the Best DeFi Hack Detection and Prevention System?](https://blocksec.com/blog/what-is-the-best-de-fi-hack-detection-and-prevention-system): Exploring vulnerabilities, attack types, and preventative strategies in DeFi protocols. (May 31 2024)

[VARA Compliance Guide for Crypto Payment Companies](https://blocksec.com/blog/what-is-vara-and-why-does-it-matter-for-payment-companies): Your guide to VARA compliance for crypto payment firms in Dubai: licensing, AML/KYC, sanctions, cybersecurity, governance, and building an audit-ready program. (Mar 23 2026)

[When MetaDock Met GPT: See Through Every Transaction Like an OG!](https://blocksec.com/blog/when-meta-dock-met-gpt-see-through-every-transaction-like-an-og): MetaDock is a powerful browser plugin that enhances blockchain exploration with useful tools and explanations for address labels, fund flows, and transaction analysis. (Apr 18 2024)

[When “SafeMint” Becomes Unsafe: Lessons from the HypeBears Security Incident](https://blocksec.com/blog/when-safe-mint-becomes-unsafe-lessons-from-the-hype-bears-security-incident): Understanding the security vulnerability of the 'SafeMint' function in ERC721 contracts. (Jan 12 2024)

[When "SafeTransfer" Becomes Unsafe: Lessons from the QBridge Security Incident](https://blocksec.com/blog/when-safe-transfer-becomes-unsafe-lessons-from-the-q-bridge-security-incident): QBridge hack analysis: learn how a safeTransfer flaw helped enable an $80M theft on Jan 28, plus key fixes to reduce smart contract risk. (Jan 25 2024)

[From Incidents to Regulation: Why Crypto Institutions Need Blockchain Penetration Testing](https://blocksec.com/blog/why-crypto-institutions-need-blockchain-penetration-testing): Blockchain penetration testing for crypto institutions: 7 of the 10 largest hacks were off-contract, and NYDFS, DORA, VARA, SFC and MAS require or expect it. (Sep 4 2026)

[Why Is My USDT Frozen? 4 Reasons + What to Do (2026)](https://blocksec.com/blog/why-is-my-usdt-frozen): Your USDT is frozen for one of 4 reasons: Tether blacklist, exchange hold, recipient blacklist, or compliance review. Direct answer + fix for each in 2026. (Aug 4 2026)

[#5 Yearn Finance Incident: Unsafe Arithmetic in the Invariant Solver Earns Its Name](https://blocksec.com/blog/yearn-finance-incident-unsafe-arithmetic-in-the-invariant-solver-earns-its-name): Deep dive into Yearn yETH $9M exploit: unsafe arithmetic and bootstrap flaw. Step-by-step simulations, loss breakdown, root-cause reclassification, fixes. (Feb 11 2026)

[Yet Another Tragedy of Precision Loss: An In-Depth Analysis of the KyberSwap Incident](https://blocksec.com/blog/yet-another-tragedy-of-precision-loss-an-in-depth-analysis-of-the-kyber-swap-incident-1): This article dives deep into the attacks targeting KyberSwap and gives a detailed analysis of the root cause of the issue: precision loss. (Dec 5 2023)

[YieldBlox DAO Incident on Stellar: Oracle Misconfiguration Enabled a $10M+ Drain](https://blocksec.com/blog/yieldblox-dao-incident-on-stellar-oracle-misconfiguration-enabled-a-10m-drain): In-depth analysis of the YieldBlox DAO pool exploit on Blend V2 (Stellar), showing how USTRY/USDC price manipulation and oracle misconfiguration enabled a $10M+ drain. (Feb 27 2026)

[zkLend Exploit Post-Mortem: Unraveling the Details and Clarifying Misunderstandings of the $10M Flash Loan Attack](https://blocksec.com/blog/zklend-exploit-post-mortem-unraveling-the-details-and-clarifying-misunderstandings-of-the-10m-flash-loan-attack): This blog provides a detailed analysis of the zkLend incident to clarify the misunderstandings. (Feb 20 2025)

## 中文博客 (Simplified Chinese blog posts)

[2025年USDT黑名单机制：以太坊与波场共冻结12.6亿美元](https://blocksec.com/zh/blog/1-26-billion-frozen-usdt-blacklisting-on-ethereum-and-tron-in-2025): Tether 在2025年将4,163个USDT地址列入黑名单,冻结了以太坊和Tron上共12.6亿美元资产。查看链上趋势、风险分析及钱包保护方法。 (Feb 2 2026)

[#10：ThirdWeb事件：可信模块不兼容导致漏洞暴露](https://blocksec.com/zh/blog/10-third-web-incident-incompatibility-between-trusted-modules-exposes-vulnerability): 了解ThirdWeb可信模块的不兼容性如何导致严重安全漏洞。掌握关键要点,及时保护您的Web3项目安全。 (Feb 22 2024)

[SwapNet与Aperture Finance的1700万美元闭源智能合约漏洞：任意调用漏洞](https://blocksec.com/zh/blog/17m-closed-source-smart-contract-exploit-arbitrary-call-swapnet-aperture): 分析SwapNet和Aperture Finance价值1700万美元的闭源智能合约漏洞，由任意调用漏洞引起。通过反编译字节码和链上追踪重构攻击路径。 (Jan 28 2026)

[#9 1inch事件：从Calldata损坏到伪造结算：链上二进制漏洞利用持续](https://blocksec.com/zh/blog/1inch-incident-from-calldata-corruption-to-forged-settlement-binary-exploitation-goes-on-chain): 深入解析2025年3月1inch Fusion V1解析器漏洞事件：因calldata下溢和信任边界缺陷，导致500万美元损失，融合了DeFi底层ABI攻击手法。 (Feb 11 2026)

[#5：Platypus Finance：三次遭遇攻击，全靠运气逃过一劫](https://blocksec.com/zh/blog/5-platypus-finance-surviving-three-attacks-with-a-stroke-of-luck): 我们展示了针对Platypus Finance的三次攻击，以及BlockSec如何为该协议追回240万美元USDC。 (Feb 22 2024)

[最佳加密货币合规软件：6款顶级产品对比评测（2026）](https://blocksec.com/zh/blog/6-best-blockchain-and-crypto-compliance-software-solutions): 比较6大加密合规平台：Phalcon Compliance、Chainalysis、Elliptic、TRM Labs、AMLBot、Merkle Science。涵盖定价、支持链及最佳适用场景。 (May 8 2026)

[#6：Hundred Finance事件：引发针对漏洞分叉协议的精准攻击浪潮](https://blocksec.com/zh/blog/6-hundred-finance-incident-catalyzing-the-wave-of-precision-related-exploits-in-vulnerable-forked-protocols): 2023年4月16日，Compound V2分叉协议Hundred Finance遭遇攻击，造成约740万美元的损失。 (Feb 16 2024)

[#7：ParaSpace事件：与时间赛跑，挫败行业迄今最严重的攻击](https://blocksec.com/zh/blog/7-para-space-incident-a-race-against-time-to-thwart-the-industry-s-most-critical-attack-yet): 了解ParaSpace攻击如何暴露关键区块链漏洞，学习关键的缓解策略，立即保护您的DeFi资产。 (May 25 2026)

[第8期：SushiSwap事件：拙劣的救援尝试引发一系列模仿攻击](https://blocksec.com/zh/blog/8-sushi-swap-incident-a-clumsy-rescue-attempt-leads-to-a-series-of-copycat-attacks): 2023年4月9日，SushiSwap因外部参数未经校验遭受攻击，导致约330万美元的资金损失。 (Feb 18 2024)

[#9：MEV机器人0xd61492：一场精妙攻击下的身份逆转，从狩猎者变为猎物](https://blocksec.com/zh/blog/9-mev-bot-0xd61492-from-predator-to-prey-in-an-ingenious-exploit): 2023年8月3日，Arbitrum上一款MEV机器人遭攻击，损失80万美元。此次攻击的根本原因是用户输入验证不足。 (Feb 21 2024)

[争分夺秒的策略：关于AnySwap救援及其启示](https://blocksec.com/zh/blog/AnySwap-Rescue-Analysis-Lessons-from-a-DeFi-Security-Triumph): AnySwap智能合约攻击紧急救援行动的关键洞察与DeFi安全经验教训。 (Mar 4 2024)

[超越市场风险：SushiSwap KashiPairMediumRiskV1合约中的逻辑漏洞](https://blocksec.com/zh/blog/a-logic-bug-identified-in-sushiswaps-kashi-pair-medium-risk-v1-contract-1): SushiSwap KashiPairMediumRiskV1合约逻辑漏洞，导致以太坊和BSC数十个资金池面临风险。 (Feb 4 2024)

[Wyvern协议新发现内存覆盖漏洞](https://blocksec.com/zh/blog/a-new-memory-overwrite-vulnerability-discovered-in-wyvern-protocol): 飞龙协议漏洞警报：潜在利用导致安全隐患 (Jan 29 2024)

[CVE-2021–39137 漏洞被野蛮利用的简要分析](https://blocksec.com/zh/blog/a-short-analysis-of-the-wild-exploitation-of-cve-2021-39137): 探索CVE-2021-39137漏洞利用的安全解析及其对以太坊区块链的影响 (Jan 29 2024)

[区块链监管战略指南：从法律框架到链上执法](https://blocksec.com/zh/blog/a-strategic-guide-to-blockchain-regulations-from-legal-frameworks-to-on-chain-enforcement): 加密货币"蛮荒时代"已成过去。了解MiCA法规、美国监管及FATF标准如何塑造区块链监管格局，以及Phalcon Compliance如何实现筛查与报告自动化。 (Mar 5 2026)

[AI代理的加密合规：使用X402构建KYA/KYT](https://blocksec.com/zh/blog/agent-native-crypto-compliance-build-kya-kyt-with-x402): 了解X402如何让AI代理通过按次加密支付方式运行KYA/KYT合规检查——无需API密钥,无需订阅。立即构建原生代理合规方案。 (May 25 2026)

[AI × 交易 × 安全：智能交易时代的风险演变](https://blocksec.com/zh/blog/ai-trading-security-the-evolution-of-risk-in-the-age-of-intelligent-trading): AI智能体如何重塑Web3交易及其风险？BlockSec与Bitget共同探讨自动化加密交易的全新安全范式。 (Jan 27 2026)

[加密货币交易所的反洗钱合规是什么？虚拟资产服务提供商的五项义务](https://blocksec.com/zh/blog/aml-compliance-crypto-exchanges): 加密货币交易所的反洗钱合规涉及五项VASP义务：注册许可、客户尽职调查、交易监控、可疑交易报告和记录保存。了解该合规框架及链上监控的作用。 (Jul 29 2026)

[分析每秒10,000笔交易：Phalcon Explorer现已支持Monad](https://blocksec.com/zh/blog/analyze-10-000-tps-phalcon-explorer-now-supports-monad): 使用Phalcon Explorer分析Monad每秒10,000次交易的EVM：调试并行执行、追踪复杂DeFi交互，并监控智能合约资金流动。 (Dec 24 2025)

[LP如何及时从协议暂停前提现](https://blocksec.com/zh/blog/as-an-lp-how-to-withdraw-funds-timely-before-protocol-pauses): BlockSec 与 Cobo 合作开发了一项解决方案，帮助 LP 在协议暂停和流动性池冻结前提取资金。 (Nov 14 2023)

[澳大利亚虚拟资产服务提供商监管框架：机构必须做好哪些准备](https://blocksec.com/zh/blog/australia-vasp-compliance-framework): 澳大利亚DCE(数字货币交易所)时代终结,VASP(虚拟资产服务提供商)框架正式生效。了解新的反洗钱/反恐融资(AML/CTF)规则、关键截止日期,以及如何为VASP合规做好准备。 (Jun 29 2026)

[Web3安全中，自动化事件响应为何至关重要？](https://blocksec.com/zh/blog/automated-incident-response-crucial-web3-security): 了解为什么自动化事件响应对Web3安全至关重要。学习区块链项目如何快速缓解攻击并保护DeFi资产。 (Apr 21 2026)

[#3 Balancer V2 事件：舍入不一致破坏了不变量并跨链传播](https://blocksec.com/zh/blog/balancer-v2-incident-a-rounding-inconsistency-breaks-the-invariant-and-propagates-across-chains): 2025年11月3日Balancer V2遭遇漏洞攻击：舍入误差破坏不变量，导致BPT定价被低估，影响波及多条链；损失1.25亿美元，已追回4500万美元。 (Feb 11 2026)

[2026年区块链法律问题基础](https://blocksec.com/zh/blog/basics-of-blockchain-legal-issues-in-2026): 区块链法律问题可能阻碍业务增长。了解如何实时识别反洗钱、制裁及资金流动风险，一键生成合规报告，助您防患于未然。 (May 25 2026)

[智能合约安全最佳实践：保障信任与信心](https://blocksec.com/zh/blog/best-practices-for-smart-contract-security-ensuring-trust-and-confidence): BlockSec，领先的区块链安全公司，提供最佳实践和创新解决方案，保护您的智能合约免受黑客攻击，确保区块链生态系统的信任。 (Apr 20 2024)

[Phalcon Explorer 1.0 交易模拟的 7 大关键特性](https://blocksec.com/zh/blog/beyond-7-days-exploring-the-endless-possibilities-of-phalcon-beyond-7-days-exploring-the-endless-possibilities-of-phalcon): Twitter 上的“Phalcon 7日之旅”发布后，我们非常高兴收到新老用户的大量积极反馈和互动。 (May 31 2023)

[追踪人口贩卖的非法资金](https://blocksec.com/zh/blog/block-sec-and-fbi-tracking-illicit-funds-from-human-trafficking): 了解加密“担保平台”如何利用USDT担保助长人口贩卖，以及BlockSec的Phalcon Compliance如何实时追踪非法资金流向。 (Sep 23 2025)

[BlockSec 与 Tokenlon 达成战略合作](https://blocksec.com/zh/blog/block-sec-and-tokenlon-reached-strategy-partnership): BlockSec与Tokenlon携手，提升加密资产安全与风险管理。 (Mar 5 2024)

[BlockSec 完成 800 万美元种子加轮融资](https://blocksec.com/zh/blog/block-sec-closes-seed-plus-funding-round-with-8-m-raised): 区块链安全公司BlockSec获Vitalbridge Capital和Matrix Partners领投的800万美元融资，旨在加强去中心化应用安全。 (Apr 18 2024)

[BlockSec：利用模糊测试技术增强区块链安全审计](https://blocksec.com/zh/blog/block-sec-enhancing-blockchain-security-audits-with-fuzzing-techniques): 本文探讨模糊测试在区块链安全审计中的应用，以及BlockSec如何运用此技术主动发现并缓解智能合约和EVM链的漏洞，为区块链系统提供全面评估。 (Apr 8 2024)

[BlockSec完成种子轮融资](https://blocksec.com/zh/blog/block-sec-has-closed-the-seed-funding-raising): BlockSec宣布完成种子轮融资，由分布式资本（Fenbushi Capital）领投，A&T Capital、趣链科技（Qulian）、Impossible Finance、Incuba Alpha及NEAR MetaWeb Ventures参投。 (Jun 5 2026)

[BlockSec推出Phalcon：首个Web3安全加密黑客拦截系统](https://blocksec.com/zh/blog/block-sec-launches-phalcon-block-the-world-s-first-crypto-hack-blocking-system-for-web3-security): BlockSec Phalcon 将革新 Web3 世界的黑客攻击防御。 (Nov 15 2023)

[BlockSec携手IOC与AЯMRD，提升Web3.0安全](https://blocksec.com/zh/blog/block-sec-partners-with-ioc-and-a-ya-mrd-to-enhance-web-3-0-security): BlockSec 与 Intelligence On Chain (IOC) 合作推出 'AЯMRD' 套件，为不断发展的区块链领域 Web 3.0 项目提供强大的安全解决方案。 (Jan 17 2024)

[BlockSec视角下的Jump“反向攻击”：漏洞真的存在吗？](https://blocksec.com/zh/blog/block-sec-s-perspective-on-the-jump-counter-exploit-does-the-vulnerability-really-exist): 本文详细分析了Jump counter漏洞，阐述了其利用步骤，并指出了该漏洞与Platypus案例之间的本质区别。 (Apr 18 2024)

[BlockSec 九月商务差旅计划](https://blocksec.com/zh/blog/block-sec-september-business-travel-plans): BlockSec 九月行程：新加坡、柏林、上海。将参加多项活动与会议，分享 Web3 安全与易用性专业见解。 (Apr 18 2024)

[BlockSec USDT冻结追踪器正式上线](https://blocksec.com/zh/blog/block-sec-usdt-freeze-tracker-is-live): USDT冻结追踪器：实时查询以太坊和波场USDT的冻结、解冻及销毁记录。支持地址搜索、事件追踪，并可查看相关治理提案。 (Feb 4 2026)

[开发者指南：集成区块链合规API与基础设施](https://blocksec.com/zh/blog/blockchain-compliance-api-integration-developer-guide): 区块链合规API集成开发者指南，涵盖KYT配置、地址监控及风险响应逻辑。 (Jun 8 2026)

[Rules of Engagement and Production Safety for Institutional Blockchain Penetration Testing](https://blocksec.com/zh/blog/blockchain-penetration-testing-rules-of-engagement): Rules of engagement for blockchain penetration testing: scope, authorization, operating limits, production safeguards, stop criteria, and remediation retest.

[区块链监管合规：实用指南](https://blocksec.com/zh/blog/blockchain-regulatory-compliance-making-it-practical-for-your-business): 区块链合规难题多？Phalcon Compliance 提供实时KYT/KYA、全球规则覆盖及低于100毫秒的风险评分，助您的加密平台轻松合规。 (Feb 5 2026)

[具有最低误报率的区块链交易安全监控工具](https://blocksec.com/zh/blog/blockchain-transaction-security-monitoring-tool-with-the-lowest-false-positive-rate): 本文阐述了降低入侵监测系统误报率的重要性，并介绍了以精准威胁监测和攻击拦截能力著称的Phalcon平台。 (May 25 2026)

[成功阻止 HomeCoin 攻击：行业首个成功阻击案例](https://blocksec.com/zh/blog/blocked-home-coin-attack-the-industry-s-first-successful-blocking-story): 在Web3领域，我们来了解一个改变游戏规则的故事：行业首次成功防御黑客攻击。 (Dec 18 2023)

[阻止Paraspace攻击：行业最重要的阻止，挽救了500万美元](https://blocksec.com/zh/blog/blocked-paraspace-attack-industry-s-most-important-block-that-rescued-5-000-000): 行业最重要的区块链，拯救了500万美元。 (Dec 22 2023)

[阻止鸭嘴兽攻击：行业首次反制黑客合约](https://blocksec.com/zh/blog/blocked-platypus-attack-industry-s-first-counter-exploitation-of-a-hacker-s-contract): 行业首个反制黑客攻击的合同。 (Dec 21 2023)

[封锁 Saddle Finance 攻击：行业首个有影响力阻断，拯救 380 万美元](https://blocksec.com/zh/blog/blocked-saddle-finance-attack-industry-s-first-influential-blocking-to-rescue-3-800-000): 行业首创的重磅封锁，成功挽救了380万美元。 (Dec 19 2023)

[阻止 TransitSwap 攻击：行业首例“反击”挽回 30 万美元](https://blocksec.com/zh/blog/blocked-transit-swap-attack-industry-s-first-hacking-back-to-rescue-300-000): 行业首个“反向黑客”行动，成功追回30万美元。 (Dec 20 2023)

[BlockSec与Blockscout携手，共促高级交易分析](https://blocksec.com/zh/blog/blocksec-blockscout-metasuites-phalcon-partnership): 我们非常激动地宣布与 Blockscout 达成合作！🎉 (Mar 26 2024)

[BlockSec 完成 Neo X 安全审计](https://blocksec.com/zh/blog/blocksec-neo-x-audit-collaboration): BlockSec已完成Neo X的安全审计。Neo X是Neo的EVM兼容且抗MEV的侧链。 (Aug 1 2024)

[BlockSec关于L2区块链安全性的观点与解决方案](https://blocksec.com/zh/blog/blocksec-perspectives-and-solutions-on-the-security-of-l2-blockchains): 我们将首先系统性地回顾二层区块链面临的安全挑战，并随之提出相应的解决方案。 (Feb 1 2024)

[Phalcon Security 2.0 强势来袭：黑客防范新时代](https://blocksec.com/zh/blog/blocksec-phalcon-2-0-unleashed-new-era-hack): 了解 Phalcon Security 2.0——BlockSec 推出的实时加密攻击防护平台，支持内存池监控与攻击拦截，助您即刻保护协议安全！ (May 25 2026)

[BlockSec Phalcon Explorer：助力EVM链TVL增长](https://blocksec.com/zh/blog/blocksec-phalcon-explorer-empowering-tvl-growth-evm-chain): 了解Phalcon Explorer如何推动EVM链上TVL增长。立即探索DeFi数据分析，借助BlockSec提升您的区块链洞察力。 (Aug 24 2023)

[Phalcon Security 实时保障 Yei Finance 超1.4亿美元资产安全](https://blocksec.com/zh/blog/blocksec-phalcon-safeguards-yei-finance-140m-assets-in-real-time): Yei Finance是Sei上最大的货币市场，通过Phalcon Security实现24/7实时监控与毫秒级攻击拦截，保障超1.4亿美元TVL的安全。 (Feb 12 2025)

[Phalcon Security 通过增强的实时保护为 Solana 生态系统提供安全保障](https://blocksec.com/zh/blog/blocksec-phalcon-supports-solana): 使用Phalcon Security的实时威胁检测和主动防护措施,提升Solana的安全性。立即通过BlockSec保护您的区块链协议。 (Nov 13 2025)

[BlockSec 发布 2025 年度加密货币犯罪报告](https://blocksec.com/zh/blog/blocksec-releases-the-2025-crypto-crime-report): 探索BlockSec《2025年加密货币犯罪报告》：以太坊与TRON趋势、1000亿美元制裁激增、Lazarus黑客组织15亿美元漏洞攻击、稳定币监管执法。立即下载。 (Feb 27 2026)

[BlockSec：2023年DeFi协议安全性回顾](https://blocksec.com/zh/blog/blocksec-retrospective-on-defi-protocol-security-in-2023): 2023年DeFi协议安全新趋势，以及BlockSec关于如何保障DeFi协议安全性的观点。 (May 27 2026)

[BlockSec 支持 BTC 生态系统！](https://blocksec.com/zh/blog/blocksec-supports-btc-ecosystem): 了解BlockSec如何通过先进的区块链解决方案提升比特币生态系统安全性。借助我们专业的Web3工具，立即为您的BTC项目提供保障。 (Aug 7 2024)

[Polygon上的BonqDAO遭攻击：逻辑漏洞致1.2亿美元被盗](https://blocksec.com/zh/blog/bonq-dao-exploited-on-polygon-120-m-stolen-due-to-flawed-logic): Polygon上的BonqDAO因逻辑漏洞遭遇1.2亿美元攻击，造成重大损失，凸显了DeFi安全的重要性。 (May 25 2026)

[BTC跨链监控与Chainlink PoR API:为BTCFi安全设立新标准](https://blocksec.com/zh/blog/btc-cross-chain-monitoring-por): BlockSec解决方案助力提升BTCFi安全性。深入了解BTC封装资产风险，如脱锚和跨链漏洞问题，以及Chainlink PoR（储备证明）等技术如何应对这些挑战，保障资产安全。 (Jan 10 2025)

[构建安全稳定币支付网络：BlockSec与Morph合作](https://blocksec.com/zh/blog/building-a-secure-stablecoin-payment-network-blocksec-partners-with-morph): BlockSec正式加入Morph生态,通过1.5亿美元Morph支付加速器计划,为全球稳定币支付提供机构级安全审计、渗透测试及资产保护服务。 (Mar 18 2026)

[#8 邦尼事件：重复小额提款导致舍入误差累积，造成840万美元损失](https://blocksec.com/zh/blog/bunni-incident-repeated-small-withdrawals-compound-a-rounding-error-into-an-8.4m-drain): 2025年9月2日,Bunni V2因闲置余额舍入漏洞遭利用,导致USDC/USDT和weETH/ETH资金池损失约840万美元;该协议已于10月23日宣布破产。 (Feb 11 2026)

[Bybit 15亿美元被盗事件：恶意Safe钱包升级攻击深度解析](https://blocksec.com/zh/blog/bybit-1-5-b-hack-in-depth-analysis-of-the-malicious-safe-wallet-upgrade-attack): 本博客全面解析攻击流程，并提供数字资产保护的关键安全准则。通过深入学习，您将掌握强化区块链安全并预防此类漏洞利用的有效策略。 (May 25 2026)

[Bybit事件二：Web2安全漏洞引发史上最大加密货币盗窃案](https://blocksec.com/zh/blog/bybit-incident-a-web2-breach-enables-the-largest-crypto-hack-in-history): 2025年2月21日,Bybit因Safe{Wallet}的S3代码注入攻击损失约15亿美元。攻击者借此篡改了Safe多签代理合约的masterCopy地址,进而转移并窃取了资产。 (Feb 9 2026)

[#1 鲸鱼事件：一次未被阻止的变动，2025年最大DeFi黑客攻击损失2.23亿美元](https://blocksec.com/zh/blog/cetus-incident-one-unchecked-shift-drains-223m-largest): 2025年5月22日,Sui链上的Cetus Protocol遭到攻击,黑客利用u256移位检查漏洞伪造虚假流动性,导致多个资金池被盗,损失约2.23亿美元。 (Feb 9 2026)

[区块链合规平台：2026年CEX基础设施要求](https://blocksec.com/zh/blog/cex-blockchain-compliance-platform-2026): 2026年中心化交易所（CEX）区块链合规指南：涵盖实时KYT监控、多链资金溯源、案件管理、合规策略自动化及API集成，助力识别制裁名单及黑客攻击关联资金。 (Jun 8 2026)

[COLDCARD事件：当钱包的"随机"助记词并不随机](https://blocksec.com/zh/blog/coldcard-entropy-failure-seed-recovery): 一个编译标志导致COLDCARD的种子熵多年存在缺陷。本文解析其原理、逾9100万美元的已确认损失，以及为何修复方案本身还需再修复。 (Aug 7 2026)

[冰棒金融攻击的模仿者](https://blocksec.com/zh/blog/copycats-of-the-popsicle-finance-attack): 文章列出了调用SorbettoFragola合约"collectFees(0,0)"函数的交易列表，附带时间戳和交易哈希。 (Apr 18 2024)

[第6号Cork协议事件：两个独立漏洞组合形成的毁灭性攻击链](https://blocksec.com/zh/blog/cork-protocol-incident-two-independent-flaws-combine-into-one-devastating-exploit-chain): Cork Protocol在以太坊上遭利用，因HIYA操纵和Uniswap v4钩子缺失访问控制，损失1200万美元；CT/DS资产从储备池中被抽空。 (Feb 11 2026)

[什么是加密货币地址风险筛查：四步机制详解](https://blocksec.com/zh/blog/crypto-address-risk-screening): 加密货币地址风险筛查通过一次性分析,评估钱包地址在反洗钱(AML)和反恐融资(CFT)方面的风险。了解影响结果的四步机制、六个风险等级及十七项风险指标。 (Jul 29 2026)

[加密支付的链上合规：反洗钱/反恐融资、冻结风险与七点检查清单](https://blocksec.com/zh/blog/crypto-aml-cft-kyt-kya): 加密支付链上反洗钱/反恐融资(AML/CFT):KYA、KYT与SAR/STR如何弥补旅行规则(Travel Rule)的不足,以及稳定币冻结风险与七项核查清单。 (Aug 5 2026)

[如何评估加密货币合规平台:反洗钱（AML）核查清单](https://blocksec.com/zh/blog/crypto-aml-checklist): 面向加密合规平台的AML(反洗钱)检查清单,涵盖钱包筛查、交易监控及交易所与托管机构的供应商评估标准。 (Jun 8 2026)

[加密货币ATM遭严打:FinCEN与AUSTRAC强化反洗钱规则](https://blocksec.com/zh/blog/crypto-atms-under-global-scrutiny-fincen-austrac-tighten): 加密ATM机正面临全球监管打击。了解FinCEN和AUSTRAC如何应对欺诈与洗钱风险，以及这对Web3合规意味着什么。 (Oct 17 2025)

[加密货币合规基础设施：购买与自建的投资回报率分析](https://blocksec.com/zh/blog/crypto-compliance-infrastructure-buy-vs-build-roi): 加密货币AML基础设施购买与自建ROI分析：涵盖隐藏成本、误报率及可扩展性问题。 (Jun 8 2026)

[加密合规软件：AML分析师的日常工作流程](https://blocksec.com/zh/blog/crypto-compliance-software-aml-analyst-workflows): 加密货币合规每日反洗钱(AML)工作流程指南,涵盖警报分类、KYT交易追踪、混币器检测及SAR(可疑活动报告)申报流程。 (Jun 8 2026)

[最佳加密货币合规软件：面向虚拟资产服务提供商的KYT与AML工具](https://blocksec.com/zh/blog/crypto-compliance-software-guide): 面临FATF或MiCA监管处罚风险?为虚拟资产服务商(VASP)精选加密合规软件对比:KYA地址筛查、KYT交易监控、跨链资金追踪,一键生成STR/SAR可疑交易报告,助您高效合规。 (May 28 2026)

[加密合规工具：Web3与传统金融整合实践指南](https://blocksec.com/zh/blog/crypto-compliance-tools-web3-tradfi-guide): 人工审核难以跟上链上交易的处理速度。了解Web3和传统金融团队如何部署KYA、KYT、AML评分及STR工具，实现大规模合规运营。 (May 28 2026)

[区块链合规平台：托管机构首席技术官集成清单](https://blocksec.com/zh/blog/crypto-custodian-compliance-platform-integration): 托管机构CTO评估区块链合规平台的检查清单。涵盖API延迟、钱包筛查、反洗钱引擎及分阶段部署等内容。 (Jun 8 2026)

[加密货币交易所合规：实时 AML/CFT 风控](https://blocksec.com/zh/blog/crypto-exchange-compliance-with-emphasis-on-real-time-aml-cft-control-in-2026): 您的加密货币交易所真正合规吗？了解实时筛查、实时监控和一键式STR/SAR报告如何弥补反洗钱/反恐融资(AML/CFT)方面的漏洞。 (Feb 13 2026)

[加密支付系统架构：六大层级与资金流转机制](https://blocksec.com/zh/blog/crypto-payment-architecture): 加密支付架构六大层次，从区块链结算到资产托管与法币兑换通道——详解各层功能，及收款与付款流程。 (Aug 5 2026)

[最大的加密货币支付黑客攻击及其背后的攻击面](https://blocksec.com/zh/blog/crypto-payment-hacks-attack-surface): Bybit损失15亿美元、UPCX损失7000万美元、MoonPay损失25万美元：供应链攻击、管理员密钥泄露和网络钓鱼如何冲击加密支付——以及合约必须强制执行哪些防护措施。 (Aug 5 2026)

[加密支付的密钥管理与操作安全](https://blocksec.com/zh/blog/crypto-payment-key-management): 加密支付密钥管理指南:MPC与多签对比、HSM与TEE对比、热钱包与冷钱包对比,涵盖盲签名、签名隔离、DNS安全、身份验证及AI Agent风险等关键议题。 (Aug 5 2026)

[全球加密货币支付牌照地图：MSB、MiCA、MPI](https://blocksec.com/zh/blog/crypto-payment-license-map): 各司法辖区所需的加密支付牌照：美国MSB/MTL、欧盟MiCA CASP、新加坡MPI、香港MSO、英国及阿联酋——附8项共同要求。 (Aug 5 2026)

[加密支付安全与合规:上线前需确认的控制措施](https://blocksec.com/zh/blog/crypto-payment-security-compliance-checklist): 每个运营商上线前都应确认的加密支付安全与合规控制。内含钱包、多因素认证（MFA）、反洗钱/反恐怖融资（AML/CFT）及监控核查清单。 (Jul 3 2026)

[#4：曲线事件：编译器错误导致无害源代码生成有缺陷的字节码](https://blocksec.com/zh/blog/curve-incident-compiler-error-produces-faulty-bytecode-from-innocent-source-code): Curve事件：编译器错误导致无害源代码生成错误字节码 (Feb 14 2024)

[DeFi与稳定币安全：对话BlockSec CEO周安迪博士](https://blocksec.com/zh/blog/de-fi-and-stablecoin-security-a-discussion-with-dr-andy-zhou-ceo-of-bloc-sec): BlockSec首席执行官Andy Zhou博士探讨了DeFi安全、稳定币合规问题，以及实时监控如何保护协议免受链上威胁。来自Chaintech的重要见解。 (Nov 19 2025)

[DeFi KYC 与 DeFi AML：平衡合规与去中心化](https://blocksec.com/zh/blog/de-fi-kyc-and-de-fi-aml-balancing-compliance-and-decentralization): DeFi的KYC和AML无需牺牲去中心化。了解基于风险的链上KYT如何帮助协议在合规的同时,不设门槛地服务用户。 (Feb 2 2026)

[DeFi风险减缓指南01：识别DeFi用户面临的风险类型](https://blocksec.com/zh/blog/de-fi-risk-mitigation-guide-01-identifying-types-of-risks-de-fi-users-face-1): 本部分旨在通过真实案例提高DeFi用户安全意识，帮助用户保护私钥和钱包资产。 (Jul 5 2024)

[DeFi风险缓解指南02：DeFi用户如何评估风险](https://blocksec.com/zh/blog/de-fi-risk-mitigation-guide-02-how-de-fi-users-can-assess-risks): 本文旨在阐述阅读审计报告、研究项目团队、分析流动性与代币经济等的重要性，以有效评估 DeFi 项目的风险。 (Jul 5 2024)

[DeFi风险规避指南03：DeFi用户安全贴士](https://blocksec.com/zh/blog/de-fi-risk-mitigation-guide-03-safety-tips-for-de-fi-users): 本部分介绍 DeFi 用户安全使用 DeFi 的贴士。 (Jul 5 2024)

[DeFi风险缓释指南04：DeFi项目团队安全实践](https://blocksec.com/zh/blog/de-fi-risk-mitigation-guide-04-security-practices-for-de-fi-project-team-1): 为DeFi项目团队，本部分介绍如何通过进行彻底审计、采用多签钱包、设立赏金计划并与社区透明沟通来确保平台安全。 (Jul 5 2024)

[DeFi安全：为链上金融构建实时风险智能](https://blocksec.com/zh/blog/de-fi-safety-build-real-time-risk-intelligence-for-on-chain-finance): DeFi发展迅猛,风险也随之增加。了解Phalcon Compliance如何提供实时AML/CFT监控、深度风险洞察和执行前保护,助您安全扩展业务。 (Feb 10 2026)

[深入解读 HIP-3：以构建者为中心](https://blocksec.com/zh/blog/deep-dive-into-hip-3-a-builder-centric-perspective): Hyperliquid 改进提案3（HIP-3）彻底改变了 Hyperliquid 永续合约市场的创建和扩展方式。通过向第三方开发者开放市场上线流程，HIP-3 将上线从平台自行决定转变为协议级别的、基于规则的接口。��... (Jan 18 2026)

[2026年DeFi合规:协议韧性的技术框架](https://blocksec.com/zh/blog/defi-compliance-in-2026-a-technical-framework-for-protocol-resilience): 2026年DeFi合规指南：构建合规优先的框架体系，满足AML/KYC监管要求，吸引机构资金入场，提升安全防护能力，规避监管关停风险。 (Mar 11 2026)

[DeFi合规平台需求：构建链上风险技术栈](https://blocksec.com/zh/blog/defi-compliance-platform-on-chain-risk): DeFi链上合规指南。涵盖KYT交易监控、跨链追踪、风险评分、案件管理及智能合约风险敞口的可疑活动报告（SAR）流程。 (Jun 8 2026)

[DeFi 漏洞分析：Euler 损失 2 亿美元的根本原因](https://blocksec.com/zh/blog/defi-exploit-analysis-root-cause-euler-s-200m): 探索Euler Finance漏洞事件，该事件导致DeFi损失2亿美元。了解根本原因、攻击手法，以及如何保护您的区块链资产。 (Jan 5 2024)

[通讯简报 - 2026年7月](https://blocksec.com/zh/blog/defi-security-incidents-afx-trade-ostium): 2026年7月DeFi三大安全事件：损失约6790万美元。AFX Trade供应链攻击（约2415万美元）；Ostium预言机被攻破（约2375万美元）；BonkDAO治理漏洞被盗（约2000万美元）。 (Jul 31 2026)

[2026年8月通讯](https://blocksec.com/zh/blog/defi-security-incidents-cosmos-evm-moonwell): Cosmos EVM余额同步漏洞被利用，波及六条链（约1480万美元）。Moonwell MAMO预言机操纵事件（约910万美元）。Term Finance治理权被夺取（约847万美元）。 (Sep 2 2026)

[通讯简报 - 2026年5月](https://blocksec.com/zh/blog/defi-security-incidents-echo-protocol-stablr-more): 2026年5月，DeFi领域因安全事件损失约1.01亿美元。其中包括Echo Protocol因密钥泄露损失7670万美元、StablR因未经授权铸币损失1280万美元，以及Verus Bridge因类型验证漏洞损失1170万美元。 (Jun 3 2026)

[DeFi安全生态：你需要了解的50家关键企业](https://blocksec.com/zh/blog/defi-security-landscape): 探索50家引领DeFi安全的关键企业——涵盖智能合约审计、攻击检测、黑客攻击拦截与资金追踪。您的完整指南。 (Aug 30 2024)

[根据美国法典第18编第1956条：洗钱的法律定义](https://blocksec.com/zh/blog/define-money-laundering): 根据18 U.S.C. §1956规定，洗钱是指明知资金来源于特定非法活动所得，仍故意进行金融交易，意图隐瞒、促进该活动或逃避申报义务的行为。了解洗钱罪的三种类型及四大构成要件。 (Jul 27 2026)

[Puffer协议：为什么访问控制机制至关重要，以及如何提升其安全性](https://blocksec.com/zh/blog/demystify-the-access-control-mechanism-in-puffer-protocol): 我们对Puffer协议的访问控制机制及其当前配置的整体架构进行了审查。 (Feb 8 2024)

[少存多得：yCREDIT攻击详情](https://blocksec.com/zh/blog/deposit-less-get-more-y-credit-attack-details): yCREDIT攻击：攻击者如何牟利铸造超量代币。揭示扰乱yCREDIT代币余额的漏洞。 (Jan 29 2024)

[Tether销毁黑名单资金：销毁与重新发行机制详解（2026）](https://blocksec.com/zh/blog/destroyblackfunds-tether-mechanic-explained): Tether通过destroyBlackFunds功能销毁被冻结地址中的USDT，但受害者通常会以新铸造的替代代币形式获得赔付。包含代码解析、真实案例及资金找回政策说明。 (Jul 27 2026)

[加密货币犯罪打击:美国司法部查获150亿美元比特币](https://blocksec.com/zh/blog/doj-seizes-15b-bitcoin-in-global-crypto-crime-crackdown): 美国司法部查获价值150亿美元的比特币，涉及"杀猪盘"诈骗。了解Prince Group与Huione网络如何被曝光，以及如何检测您的钱包安全。 (Oct 15 2025)

[Drift协议事件：通过持久nonce漏洞的Multisig治理被攻破](https://blocksec.com/zh/blog/drift-protocol-incident-multisig-governance-compromise-via-durable-nonce-exploitation): 2026年4月1日，Solana上的Drift Protocol因攻击者利用其持久nonce机制延迟多签批准执行，导致28530万美元损失。攻击者获得了协议的管理权，绕过了时间锁，创建恶意抵押品市场，操纵价格，放宽提... (Apr 3 2026)

[简讯 - 2026年6月](https://blocksec.com/zh/blog/efi-security-incidents-jaredfromsubway-aztec): 6月三大安全事件共损失约2200万美元:JaredFromSubway MEV蜜罐攻击(约1500万美元)、Aztec rollup漏洞攻击(约435万美元)、SecondFi Ed25519密钥泄露事件(约240万美元)。 (Jul 3 2026)

[Symbiotic能否在再质押领域挑战EigenLayer？](https://blocksec.com/zh/blog/eigenlayer-competitor-symbiotic): 探索Symbiotic如何在再质押领域与EigenLayer竞争。了解两者的关键差异与功能,洞悉2024年谁将领跑区块链再质押平台。立即阅读! (Jul 11 2024)

[什么是加密货币地址的强化尽职调查（EDD）：触发因素、流程和所需文件](https://blocksec.com/zh/blog/enhanced-due-diligence-crypto-addresses): 增强型尽职调查(EDD)是虚拟资产服务商(VASP)针对高风险加密地址执行的强化反洗钱审查。了解EDD的定义、触发条件、所需文件清单，以及链上风险证据在其中的作用。 (Jul 27 2026)

[提升区块链安全：智能合约审计员的角色](https://blocksec.com/zh/blog/enhancing-blockchain-security-the-role-of-smart-contract-auditors): 智能合约审计员在区块链安全中扮演着至关重要的角色，保护 DeFi 和 NFT 平台免受漏洞和经济损失。 (Feb 5 2024)

[提升 EVM 兼容链的安全与信任：BlockSec 2024 年度审计洞察](https://blocksec.com/zh/blog/enhancing-security-and-trust-in-evm-compatible-chains-insights-from-block-sec-s-2024-audits): 了解 BlockSec 2024 年审计，提升 EVM 兼容链安全与信任。内容包括主动防护、专业知识及高级反制措施。 (Apr 15 2024)

[提升Web3安全：2024年五大安全监控平台探索](https://blocksec.com/zh/blog/enhancing-web3-security-exploring-the-top-5-security-monitoring-platforms-in-2024): 发现区块链领域排名前 5 的安全监控平台，体验 BlockSec Phalcon 的优势。Phalcon 可进行早期攻击检测并自定义规则，有效保护 web3 应用。 (May 14 2024)

[稳定币解析:Ethena是升级版Luna吗?](https://blocksec.com/zh/blog/ethena-upgraded-luna-walk-stablecoins): 探索稳定币及其安全风险,了解Ethena的USDe如何提供新方案。深入了解稳定币机制与保护策略。 (Jul 26 2024)

[#2: Euler Finance事件：2023年最大黑客攻击](https://blocksec.com/zh/blog/euler-finance-incident-the-largest-hack-of-2023): Euler Finance事件：2023年最大黑客攻击 (Feb 8 2024)

[EigenLayer再质押:安全风险及应对策略](https://blocksec.com/zh/blog/examining-eigenlayer-restaking-security-perspective): EigenLayer的再质押模式TVL已达153亿美元——但也带来了恶意运营商、AVS漏洞等新型安全风险。了解这些威胁及应对方法。 (Apr 24 2026)

[无限制批准ERC20代币的便利性与安全性权衡探索](https://blocksec.com/zh/blog/exploring-the-tradeoff-between-convenience-and-security-in-unlimited-approval-erc-20-tokens): 探索ERC20代币无限授权的易用性与安全性之间的微妙平衡，及其对区块链生态的影响。 (Feb 5 2024)

[Web3易受攻击的因素与防范策略](https://blocksec.com/zh/blog/factors-making-web3-more-vulnerable-to-hacks-and-our-mitigation-strategies): 在区块链安全事件频发、资本剥削屡见不鲜的世界里，我们不禁要问：能否有效阻止这些安全漏洞？ (Aug 30 2023)

[Ryan Wedding犯罪网络：BlockSec链上分析](https://blocksec.com/zh/blog/fall-olympian-blocksec-tracks-ryan-wedding-crypto-crime): BlockSec追踪追溯前奥运选手Ryan Wedding涉毒品卡特尔网络洗钱的2亿多美元USDT资金。查看我们对该被制裁加密犯罪团伙的链上分析。 (Feb 3 2026)

[金融行动特别小组 (FATF) 新稳定币报告预示着转向二级市场合规](https://blocksec.com/zh/blog/fatf-s-new-stablecoin-report-signals-a-shift-to-secondary-market-compliance): FATF 2026年3月报告聚焦非托管钱包带来的P2P稳定币风险。了解其中的关键反洗钱/反恐融资建议，以及链上监控工具如何助力合规。 (Mar 27 2026)

[闪电贷攻击 Plouto 金库](https://blocksec.com/zh/blog/flash-loan-attack-on-plouto-vault): BlockSec团队分析Plouto Vault遭闪电贷攻击事件，攻击者通过操纵流动性获利698,775.32美元。 (Apr 18 2024)

[冰封之后：USDT黑名单机制及其与恐怖融资关联的链上分析](https://blocksec.com/zh/blog/following-the-frozen-an-on-chain-analysis-of-usdt-blacklisting-and-its-links-to-terrorist-financing): 本报告分析了USDT被列入黑名单的模式及其与恐怖主义融资的关联，揭示了洗钱循环、跨链资金流动以及执法延时等关键问题。 (Jul 11 2025)

[金融稳定委员会 2025 评估：稳定币监管分散加剧套利风险](https://blocksec.com/zh/blog/fsb-2025-assessment-stablecoin-regulatory-fragmentation-intensifies-arbitrage-risks): 金融稳定委员会(FSB)2025年报告揭示全球稳定币监管存在重大漏洞。监管碎片化如何滋生监管套利?这对加密货币合规又意味着什么? (Oct 30 2025)

[Fun Coffee骗局:追踪TRON上278%的资金盘骗局](https://blocksec.com/zh/blog/fun-coffee-scam-tron-usdt-tracing): Fun Coffee承诺年化278%回报,随后突然消失。我们追踪了TRON链上99个地址间转移的7280万USDT,以区分投资者返款与被转出资金。 (Aug 28 2026)

[如何使用Phalcon Explorer 2.0掌握DeFi交易分析](https://blocksec.com/zh/blog/getting-started-with-phalcon-2-0-2): Phalcon 2.0帮助您通过资金流向、调用流程、代码视图和模拟功能,分析跨5条链的DeFi交易。 (Jan 5 2023)

[#4 GMX事件：跨合约重入漏洞绕过四年旧防线](https://blocksec.com/zh/blog/gmx-incident-cross-contract-reentrancy-bypasses-a-four-year-old-guard): GMX V1 Arbitrum被利用事件（2025年7月9日）：跨合约重入攻击扭曲了全局空头头寸，抬高GLP价格，导致4200万美元被盗，后经10%赏金协议部分退还。 (Feb 11 2026)

[通过利用 Flashbots 中继漏洞“收割” MEV 机器人](https://blocksec.com/zh/blog/harvesting-mev-bots-by-exploiting-vulnerabilities-in-flashbots-relay): 由于Flashbots中继漏洞，MEV机器人遭到攻击，该事件位列2023年十大“卓越”安全事件之首。 (Dec 15 2025)

[HKDAP稳定币安全审查:已上线、已持牌,但尚未就绪](https://blocksec.com/zh/blog/hkdap-stablecoin-security-review): 香港首个受监管稳定币HKDAP评测:KYC吊销机制失效,单一密钥可增发/销毁/冻结代币,且与香港金融管理局要求存在冲突。内附链上数据分析。 (Aug 14 2026)

[二层区块链如何更好地保护其用户](https://blocksec.com/zh/blog/how-L2-blockchains-can-do-better-to-protect-their-users): 二层（L2）链可采取多项措施，增强顶层协议的安全性，保护链上用户资产。 (Mar 27 2024)

[Solana 网络重大漏洞的发现与及时修复](https://blocksec.com/zh/blog/how-a-critical-bug-in-solana-network-was-detected-and-timely-patched): Solana漏洞：rBPF错误影响合约执行路径 (Jan 15 2024)

[Coin98如何悄无声息地修复漏洞](https://blocksec.com/zh/blog/how-a-vulnerability-is-silently-fixed-by-coin98): 文章重点介绍了近期对币安智能链(BSC)上Coin98智能合约的攻击，以及项目方为修复漏洞而实施的后续措施。 (Apr 20 2024)

[Akutar NFT 损失 3400 万美元](https://blocksec.com/zh/blog/how-akutar-nft-loses-34-m-usd): 在@AkuDreams合约中发现严重逻辑漏洞，可能导致DoS攻击和项目资金永久锁定。 (Jan 20 2024)

[BlockSec如何追回被盗的DeFi资金：三个案例研究](https://blocksec.com/zh/blog/how-blocksec-rescued-stolen-funds-from-technical-perspectives-of-three-representative-cases): 了解BlockSec如何通过纯技术手段追回被盗的数百万DeFi资金，包括Platypus Finance、TransitSwap和Saddle Finance的资金救援案例。 (Mar 4 2024)

[Phalcon Security如何利用抢先交易技术防止DeFi攻击](https://blocksec.com/zh/blog/how-can-block-sec-phalcon-prevent-hacker-attacks-on-de-fi-protocols-by-using-front-running-techniques): Phalcon Security如何将抢先交易从攻击手段转变为防御手段：在交易执行前，从内存池中识别恶意交易并将其拦截。 (Apr 29 2024)

[KYA（了解您的地址）如何在DeFi协议中运作？](https://blocksec.com/zh/blog/how-does-kya-work-for-defi-protocols): Phalcon Compliance的KYA功能可实时筛查DeFi协议的钱包地址，拦截被制裁及黑客关联资金，同时不影响DeFi用户体验。 (Jul 21 2026)

[AML地址筛查在加密货币中需要多长时间？](https://blocksec.com/zh/blog/how-long-does-aml-address-screening-take): 加密货币AML地址筛查耗时对比:人工审核(数分钟至数小时)与自动化API筛查(毫秒级)。解析单次筛查的内部流程,以及哪些边缘情况会拖慢筛查速度。 (Jul 24 2026)

[Phalcon 阻止掠夺性提案：成功拦截 120 万美元](https://blocksec.com/zh/blog/how-phlacon-block-helped-loot-block-1-m-usd-hack): Phalcon为Loot节省超过100万美元的全面过程。 (Jan 11 2024)

[Mirror Protocol 如何被利用](https://blocksec.com/zh/blog/how-the-mirror-protocol-got-exploited): 攻击者如何通过操纵 mETH 和 USTC 价值来利用 Mirror Protocol (Jan 25 2024)

[美国如何追踪1.1亿美元加密货币洗钱案](https://blocksec.com/zh/blog/how-the-us-traced-110-m-crypto-money-laundering-cases-blocksec): 了解美国当局如何追踪与"杀猪盘"骗局相关的1.1亿美元加密货币洗钱活动，以及BlockSec链上分析揭示的合规漏洞。 (May 25 2026)

[如何利用模糊测试技术避免智能合约被黑客攻击？](https://blocksec.com/zh/blog/how-to-avoid-smart-contract-hacks-with-fuzzing-technology): 探索模糊测试技术和BlockSec的区块链安全专业知识，如何帮助预防智能合约被黑客攻击，保护您的资产。 (Apr 19 2024)

[智能合约审计师入门指南：掌握区块链安全](https://blocksec.com/zh/blog/how-to-become-a-smart-contract-auditor-your-guide-to-mastering-blockchain-security): 掌握智能合约审计的关键步骤。学习区块链安全技能、工具及最佳实践，成为DeFi和NFT领域的重要人物。 (Jan 27 2024)

[如何检查USDT地址是否被冻结（免费30秒）](https://blocksec.com/zh/blog/how-to-check-if-usdt-address-is-frozen): 30秒内查询任意USDT地址——免费,无需注册。了解Tether冻结的含义、可用的直接查询替代方法,以及针对不同情况的应对建议。 (Jul 27 2026)

[Cosmos跨链桥安全检查指南](https://blocksec.com/zh/blog/how-to-check-the-security-of-cosmos-bridge-a-comprehensive-guide): 探索Cosmos Bridge的安全性重要性，学习如何评估其安全，并了解BlockSec在定制化跨链交易安全审计方面的专业能力。 (Apr 15 2024)

[如何为您的企业选择合适的区块链合规平台](https://blocksec.com/zh/blog/how-to-choose-blockchain-compliance-platform): 稳定币年交易量已达36万亿美元，非法资金也随之流动。了解如何选择适合大规模跨链反洗钱的区块链合规平台。 (May 28 2026)

[如何为您的协议选择理想的安全审计公司：综合指南](https://blocksec.com/zh/blog/how-to-choose-the-ideal-security-audit-company-for-your-protocol-a-comprehensive-guide): 选择区块链安全审计公司需考虑关键因素。BlockSec提供独特的审计解决方案及Phalcon产品，保障项目全生命周期安全。 (Apr 22 2024)

[如何为您选择合适的协议安全监控平台？](https://blocksec.com/zh/blog/how-to-choose-the-right-security-monitoring-platform-for-your-protocols): 了解区块链项目安全监控的重要性，并掌握选择协议安全监控平台时的关键考量因素。 (May 22 2024)

[如何通过安全审计报告评估项目安全](https://blocksec.com/zh/blog/how-to-evaluate-project-security-through-security-audit-report): 探索安全审计报告在保障区块链项目安全中的作用，以及BlockSec如何通过自动化扫描、人工验证和业务逻辑分析提供准确评估。 (Apr 20 2024)

[MetaPool 同一漏洞的两种利用方式（Nerve Bridge / Saddle Finance）：所见非所得](https://blocksec.com/zh/blog/how-to-exploit-the-same-vulnerability-of-meta-pool-in-two-different-ways-nerve-bridge-saddle-finance-what-you-see-is-not-what-you-get): MetaPool 在 Nerve Bridge 和 Saddle Finance 事件中被重复利用的漏洞分析：揭示加密漏洞的持续存在。 (Jan 25 2024)

[如何获取加拿大加密货币支付MSB牌照](https://blocksec.com/zh/blog/how-to-get-a-canada-msb-license-for-crypto-payments-in-2026): 2026年在加拿大开展加密货币支付业务？仅有MSB注册资格是不够的。您还需建立符合FINTRAC要求的实时KYT监控与旅行规则合规体系，以获得银行支持并实现业务规模化增长。 (Feb 12 2026)

[如何为加密货币交易所存款实施反洗钱筛查：分步指南](https://blocksec.com/zh/blog/how-to-implement-aml-screening-crypto-exchange-deposits): 如何为加密货币交易所存款实施反洗钱（AML）筛查：梳理存款流程、集成KYA（了解你的地址）API、设定风险阈值，并建立合规审计跟踪记录。 (Jul 23 2026)

[如何降低智能合约风险：保障区块链运营的安全指南](https://blocksec.com/zh/blog/how-to-mitigate-smart-contract-risks-a-comprehensive-guide-to-secure-blockchain-operations): 用 BlockSec 全面的解决方案和专业知识，学习如何规避智能合约风险，保护您的区块链运营。 (Apr 15 2024)

[如何玩Four.meme而不被“夹在中间”](https://blocksec.com/zh/blog/how-to-play-four-meme-without-getting-sandwiched): 如何使用 BlockSec Anti-MEV RPC 避免在玩 Four.meme 时被“三明治攻击”。 (Feb 21 2025)

[如何追踪 Solana 钱包](https://blocksec.com/zh/blog/how-to-track-a-solana-wallet): 如何使用 MetaSleuth 追踪 Solana 钱包或账户 (May 2 2024)

[如何解冻USDT地址：3条途径，3.6%的成功概率](https://blocksec.com/zh/blog/how-to-unfreeze-usdt-address): USDT被冻结后可通过Tether的removeBlackList解冻，成功率仅3.6%。本文介绍三种合法途径、经典的Poly Network案例，以及每种方式的真实成功概率。 (Jul 27 2026)

[如何错误地验证签名——AssociationNFT案例](https://blocksec.com/zh/blog/how-to-verify-a-signature-in-a-wrong-way-the-association-nft-case-1): 文章揭示NBA官方NFT销售合同的严重漏洞，强调热门区块链项目应实施严格安全措施。 (Apr 18 2024)

[攻击分析 | 映射检查缺失如何导致 Nomad 跨链桥损失 2 亿美元](https://blocksec.com/zh/blog/how-unchecked-mapping-makes-200-M-losses-of-nomad-bridge): Nomad Bridge安全漏洞解析：深入剖析导致协议漏洞的代码缺陷，以及该漏洞如何被利用导致近2亿美元资产被窃。 (Feb 4 2024)

[我们如何为TransitSwap（及BabySwap）追回被盗资金](https://blocksec.com/zh/blog/how-we-recover-the-stolen-funds-for-transit-swap-and-baby-swap): 10月1日，BSC上的BabySwap和TransitSwap遭遇攻击，漏洞机器人被抢跑，私钥被窃，资金已成功转移至安全账户。 (Apr 18 2024)

[我们如何为TransitSwap和BabySwap追回被盗资金](https://blocksec.com/zh/blog/how-we-recover-the-stolen-funds-for-transitswap-and-babyswap): 闪电追回失款：利用攻击者机器人漏洞，高效从 BSC 网络 TransitSwap 和 BabySwap 攻击中追回被盗资金。 (Feb 8 2024)

[对Resupply协议攻击事件的深度分析与思考](https://blocksec.com/zh/blog/in-depth-analysis-and-reflections-on-the-resupply-protocol-attack-incident): Resupply协议因捐赠攻击损失1000万美元。我们追溯根本原因，逐步解析攻击交易，并总结Curve借贷市场的经验教训。 (Sep 16 2025)

[深入分析：Balancer V2 漏洞](https://blocksec.com/zh/blog/in-depth-analysis-the-balancer-v2-exploit): 2025年11月3日，Balancer V2及其多个分叉项目遭遇了超1.25亿美元的攻击。本文将深入技术分析此次事件。 (Nov 5 2025)

[深度分析：Truebit事件](https://blocksec.com/zh/blog/in-depth-analysis-the-truebit-incident): 2026年1月8日，以太坊上的Truebit Protocol遭到利用，造成超2600万美元损失。本文将深入分析此次事件技术细节。 (Jan 14 2026)

[“盗币即服务”：探秘以太坊 1.35 亿美元的网络钓鱼经济](https://blocksec.com/zh/blog/inside-ethereum-s-shadow-economy-new-research-unmasks-the-135-m-drainer-as-a-service-industry): 新研究揭示"钱包窃取即服务"（Drainer-as-a-Service）如何使以太坊上的加密钓鱼攻击产业化，导致超7.6万名受害者被盗1.35亿美元。深入了解完整链上分析。 (Oct 21 2025)

[Phalcon Compliance 3.1：更快的加密货币反洗钱与灵活定价](https://blocksec.com/zh/blog/instant-crypto-compliance-software-blocksec-phalcon-3-1): 借助 Phalcon Compliance 3.1，加速加密货币 AML/KYT 合规：即时钱包/交易筛查、轻量分享、多链洞察，以及灵活的按需付费定价方案。 (Dec 15 2025)

[即时加密货币兑换平台是什么？为何成为洗钱热点？](https://blocksec.com/zh/blog/instant-crypto-exchanges-money-laundering): ICE在提供高效便捷的同时，也悄然为洗钱等非法活动打开了方便之门。 (Jun 24 2025)

[BlockSec助力Interlace提升加密支付合规性](https://blocksec.com/zh/blog/interlace-boosts-crypto-payment-compliance-with-block-sec): 全球加密支付服务商 Interlace 如何借助 BlockSec 的 Phalcon Compliance 强化加密支付合规：对每一笔充提款进行实时 KYA 与 KYT 风险筛查，同时不影响用户体验。 (Sep 16 2025)

[2024年EVM链安全审计要点 - BlockSec深度解读](https://blocksec.com/zh/blog/key-highlights-of-evm-chain-audits-in-2024-insights-from-block-sec): 2024年EVM链审计关键趋势 —— BlockSec提供全面解决方案，解决安全担忧，提供可行建议，确保区块链项目的稳健与可靠。 (Apr 8 2024)

[加密货币中的了解您的交易（KYT）：是什么以及它与KYA和KYC有何不同](https://blocksec.com/zh/blog/know-your-transaction-crypto): Phalcon Compliance的KYT功能可实时筛查链上转账,识别反洗钱风险。了解交易级监控与KYA、KYC的区别。 (Jul 21 2026)

[#3：KyberSwap事件：通过极其精妙的计算，巧妙利用舍入误差](https://blocksec.com/zh/blog/kyberswap-incident-masterful-exploitation-of-rounding-errors-with-exceedingly-subtle-calculations): KyberSwap事件：精妙的四舍五入错误利用， cálculos 极其微妙。 (Feb 12 2024)

[KYT定义：什么是“了解你的交易”](https://blocksec.com/zh/blog/kyt-definition-what-know-your-transaction-means-and-why-it-matters-in-crypto-and-finance): 了解您的交易（KYT）实时监控风险，防止欺诈和制裁行为，通过清晰、可审计的决策帮助加密货币和金融科技企业保持合规。 (Mar 9 2026)

[导言：DeFi 风险规避指南](https://blocksec.com/zh/blog/lead-in-de-fi-risk-mitigation-guide-2): 在本系列中，我们将深入解析DeFi核心风险类型、项目风险评估方法、用户安全建议，以及DeFi项目团队如何全方位提升安全性。 (Jul 5 2024)

[导读：Phalcon黑客拦截记](https://blocksec.com/zh/blog/lead-in-phalcon-s-hack-blocking-saga): 在本系列中，探索全球首个加密黑客监控与拦截系统——BlockSec Phalcon，如何通过创新技术成功挽回数百万资产损失。 (Apr 26 2024)

[安全智能合约开发：入门](https://blocksec.com/zh/blog/lead-in-secure-smart-contract-development): 本系列探讨开发安全高效的智能合约（尤其是NFT）的关键安全实践。 (Apr 26 2024)

[Uniswap V4 Hook 风险](https://blocksec.com/zh/blog/lead-uniswap-v4-hook-risks): 深入解析Uniswap v4 Hook风险：访问控制与输入验证缺陷、攻击案例及防护措施，助力强化以太坊及L1/L2上的DeFi安全。 (Apr 26 2024)

[致命集成：钩子中因危险交互引发的漏洞](https://blocksec.com/zh/blog/lethal-integration-vulnerabilities-in-hooks-due-to-risky-interactions): Uniswap v4 钩子安全：了解访问控制和输入验证缺陷如何使超过30%的钩子面临风险，附漏洞验证代码与修复方案。 (Nov 20 2023)

[LI.FI攻击：跨链桥漏洞？不，是未经验证的外部调用！](https://blocksec.com/zh/blog/li-fi-attack-a-cross-chain-bridge-vulnerability-no-it-s-due-to-unchecked-external-call): LI.FI 跨链桥漏洞：DeFi 外部调用安全警示。提升 DeFi 编码安全实践。 (Feb 4 2024)

[Loopring (LRC) 协议事件](https://blocksec.com/zh/blog/loopring-lrc-protocol-incident): 了解Loopring LRC协议事件如何导致4.8万美元损失。掌握关键细节、影响及安全见解，助您及时了解并保护资产安全。 (Feb 29 2024)

[BlockSec Phalcon 存储分析和监控功能重大升级](https://blocksec.com/zh/blog/major-upgrades-to-block-sec-phalcon-s-storage-analysis-and-monitoring-functions): BlockSec 很高兴宣布，对我们加密攻击监控与拦截系统 Phalcon 的存储分析和监控能力进行了重大升级。 (Apr 30 2024)

[如何让区块链攻击变得可阻挡：5个行之有效的策略](https://blocksec.com/zh/blog/make-blockchain-attack-blockable): 了解如何利用经过验证的DeFi安全策略,使区块链攻击变得可防御。立即采用专业的区块链解决方案,保护您的智能合约安全。 (Mar 7 2022)

[管理 DeFi 风险：安全合规完全指南](https://blocksec.com/zh/blog/managing-de-fi-risk-a-complete-guide-to-staying-safe-and-compliant): DeFi风险不仅限于智能合约漏洞。了解如何检测非法资金、追踪跨链资产流向,并借助实时链上工具保持合规。 (Jan 26 2026)

[MAS规范新加坡加密货币合规](https://blocksec.com/zh/blog/mas-shapes-crypto-compliance-in-singapore): 了解新加坡金融管理局(MAS)如何塑造加密货币支付合规体系——《支付服务法》(PSA)及科技风险管理规定有哪些要求,以及KYT(了解你的交易)与交易监控如何帮助建立信任。 (Mar 26 2026)

[安全智能合约开发 (2) — NFT (市场) 中的数字签名使用指南](https://blocksec.com/zh/blog/mastering-digital-signatures-in-nft-smart-contracts-for-enhanced-security-and-efficiency): 利用数字签名确保NFT的真实性：了解数字签名如何在NFT智能合约开发中提供真实性和完整性。 (Mar 4 2024)

[MetaDock用户突破6000！](https://blocksec.com/zh/blog/meta-dock-breaks-through-6-k-users): MetaDock，一款 Web3 浏览器扩展，已达 6000 用户，通过无缝集成增强区块链浏览器，并优先考虑用户隐私与安全。 (Apr 18 2024)

[MetaSuites 5.0 强化 Solana 扫描：全面支持](https://blocksec.com/zh/blog/metasuites-5-0-extends-full-support-solana-scans): 了解MetaSuites 5.0如何通过跨平台本地标签和Phalcon Explorer集成来增强Solana扫描功能。立即升级您的区块链安全防护！ (May 29 2024)

[加密货币洗钱案例：3个真实案例及其揭示的问题](https://blocksec.com/zh/blog/money-laundering-examples-crypto): 7,400枚ETH经混币器洗钱，2小时内完成20跳跨链桥攻击，151个地址因资助恐怖主义被列入黑名单。真实加密货币案例，链上数据全程可查。 (Jul 17 2026)

[洗钱的含义：加密货币如何被用于洗钱及如何被识破](https://blocksec.com/zh/blog/money-laundering-meaning): 了解加密货币洗钱的运作方式，通过15亿美元Bybit黑客事件和1247万美元即时兑换案例，揭示KYA和KYT工具如何在资金结算前进行检测。 (Jul 17 2026)

[简单解释洗钱：什么是洗钱以及为何加密货币使其更容易](https://blocksec.com/zh/blog/money-laundering-simple-terms): 通俗解读洗钱三个阶段，结合2025年真实加密货币案例（如150亿美元比特币没收事件），并提供免费工具查询钱包地址是否被标记为可疑。 (Jul 17 2026)

[月度安全审查：2024年4月](https://blocksec.com/zh/blog/monthly-security-review-april-2024): 2024年4月DeFi攻击事件损失约500万美元,主因是未验证用户输入和访问控制漏洞——详解Hedgey Finance、SaitaChain和Pike Finance被攻击事件。 (May 1 2024)

[每月安全回顾：2024年2月](https://blocksec.com/zh/blog/monthly-security-review-february-2024): 掌握二月安全趋势及我们的最新进展。🙌 (Mar 1 2024)

[2024年6月安全月报](https://blocksec.com/zh/blog/monthly-security-review-june-2024-1): BlockSec 2024年6月安全回顾:UwU Lend攻击事件及其他DeFi安全事件,Phalcon Explorer全面支持Solana,以及Solana Summit活动回顾。 (Jul 9 2024)

[每月安全回顾：2024年5月](https://blocksec.com/zh/blog/monthly-security-review-may-2024): 掌握五月安全趋势及最新进展。🙌 (Jun 10 2024)

[月度安全回顾：2024年10月](https://blocksec.com/zh/blog/monthly-security-review-october-2024): BlockSec发布2024年10月安全报告，深入剖析Radiant Capital在Arbitrum上损失5800万美元的重大安全事件，及另外三起较小规模事件，逐一揭示每起事件的根本原因。 (Nov 1 2024)

[香港MSO与VA OTC：加密货币牌照指南](https://blocksec.com/zh/blog/mso-vs-va-otc-in-hong-kong-what-crypto-payment-companies-must-know-in-2026): 2026香港加密货币:掌握双重牌照制度。了解MSO与VA OTC的区别、海关(C&ED)与证监会(SFC)监管分工、各类主体所需牌照、申请流程,以及满足银行开户要求的合规要点。 (Mar 4 2026)

[2026年去中心化金融（DeFi）监管导航](https://blocksec.com/zh/blog/navigating-de-fi-regulation-in-2026): 了解如何借助 Phalcon Compliance 满足 DeFi 合规要求——提供实时筛查、链上监控及跨司法辖区的自动化反洗钱/反恐融资(AML/CFT)报告服务。 (Mar 3 2026)

[Solana rBPF 发现新的整数溢出漏洞](https://blocksec.com/zh/blog/new-integer-overflow-bug-discovered-in-solana-r-bpf): Solana虚拟机整数溢出漏洞，网络安全堪忧。 (Jan 8 2024)

[BlockSec 揭示新网站 | 全方位守护协议生命周期安全](https://blocksec.com/zh/blog/new-website-unveiled-block-sec-safeguards-protocol-s-lifecycle-security): BlockSec 新官网上线，开启全栈、全生命周期区块链安全服务新纪元。🙌 (Mar 18 2024)

[简报 - 2026年4月](https://blocksec.com/zh/blog/newsletter-april-2026): 2026年4月DeFi重大安全事件盘点：KelpDAO、Drift和Rhea Finance共损失超5.93亿美元，深入解析这些漏洞攻击事件及其对DeFi安全领域的影响与启示 (Apr 30 2026)

[新闻通讯 - 2025年12月](https://blocksec.com/zh/blog/newsletter-december-2025): 2025年12月，DeFi领域发生三起重大安全事件，损失约1970万美元。Yearn Finance因yETH池及旧合同漏洞损失近1000万美元；Trust Wallet Chrome插件遭遇后门攻击损失约700万美元；Ribbon Finance因访问控制不当�... (Jan 6 2026)

[通讯 - 2026年2月](https://blocksec.com/zh/blog/newsletter-february-2026): 2026年2月发生三起重大DeFi安全事件：YieldBlox DAO因预言机价格操纵损失约1000万美元；ioTube跨链桥因私钥泄露损失约440万美元；CrossCurve因跨链验证绕过损失约280万美元。 (Mar 2 2026)

[通讯 - 2026年1月](https://blocksec.com/zh/blog/newsletter-january-2026): 2026年1月，DeFi生态发生三起重大安全事件。Truebit Protocol因整数溢出漏洞损失约2600万美元；SwapNet和Aperture因输入验证不当及授权滥用损失约1700万美元；Saga因共享基础层代码漏洞损失约700万美��... (May 3 2026)

[通讯 - 2026年3月](https://blocksec.com/zh/blog/newsletter-march-2026): 2026年3月，DeFi生态发生三起重大安全事件：Resolv Protocol因特权基础设施密钥泄露损失约8000万美元；BitcoinReserveOffering因双重铸币逻辑漏洞损失约270万美元；Venus Protocol因捐赠攻击结合市场操纵��... (Apr 1 2026)

[并非所有代币都是好的：Paraluni 攻击快速分析](https://blocksec.com/zh/blog/not-all-tokens-are-good-the-quick-analysis-of-the-paraluni-attack): 本文详细分析了对Paraluni项目的攻击，揭示了代币验证和重入漏洞，并强调了Web3世界安全措施的重要性。 (Apr 20 2024)

[OFAC制裁ISIS波场网络地址以追踪恐怖主义融资线索](https://blocksec.com/zh/blog/ofac-sanctions-isis-tron-addresses-terror-financing): OFAC制裁了与ISIS资助者相关的两个Tron地址。了解BlockSec如何追踪链上资金流向哈马斯关联实体。 (Jun 26 2026)

[OFAC锡纳罗亚卡特尔制裁：链上资金追踪](https://blocksec.com/zh/blog/ofac-sinaloa-cartel-sanctions-on-chain-tracing): OFAC制裁了与锡那罗亚贩毒集团芬太尼洗钱相关的六个地址。我们对链上资金进行了追踪，发现大部分资金直接流入中心化交易所的充值地址。 (Jun 12 2026)

[BlockSec与OKX Explorer合作，增强链上数据安全与合规](https://blocksec.com/zh/blog/on-chain-data-security): BlockSec与OKX Explorer强强联合,提升链上安全、合规与数据分析能力,整合威胁情报与API接口,共同打造更安全、更透明的Web3生态。 (Nov 18 2024)

[OTC USDT冻结应对手册：合规SLA与响应指南（2026）](https://blocksec.com/zh/blog/otc-desks-usdt-freeze-playbook): OTC柜台实战手册：交易前审核筛查SLA标准、活跃地址冻结实时监控，以及事件发生后前15分钟应急响应时间线。 (Jul 27 2026)

[对Wintermute项目指控的简要分析](https://blocksec.com/zh/blog/our-short-analysis-of-the-accusation-of-the-wintermute-project): 分析Wintermute黑客攻击：无内部作案确凿证据 (Feb 7 2024)

[对Wintermute项目指控的简要分析](https://blocksec.com/zh/blog/our-short-analysis-of-the-accusation-of-the-wintermute-project-1): BlockSec 的调查质疑了分析 Wintermute 黑客事件的报告中的指控，对 Wintermute 项目的指控的可靠性提出了质疑。 (Apr 18 2024)

[关于脏话工具漏洞的简要分析](https://blocksec.com/zh/blog/our-short-analysis-of-the-profanity-tool-vulnerability): 探索“亵渎工具”在Wintermute 1.6亿美元加密漏洞中的作用。 (Mar 4 2024)

[我们对反向金融安全事件的看法：操纵价格攻击](https://blocksec.com/zh/blog/our-take-on-the-inverse-finance-security-incident-price-manipulation-attack): Inverse Finance闪电贷攻击：攻击者获利近10万美元USDT和53.2 WBTC。 (Jan 29 2024)

[#10 全景事件：XOR线性打破位置指纹方案](https://blocksec.com/zh/blog/panoptic-incident-xor-linearity-breaks-the-position-fingerprint-scheme): 2025年8月25日：白帽黑客发现Panoptic存在基于XOR的s_positionsHash漏洞，攻击者可伪造ID并提取抵押品，白帽因此获得约40万美元奖励。 (Feb 11 2026)

[PEP的定义:政治敏感人物(PEP)的三种类型详解](https://blocksec.com/zh/blog/pep-definition-three-types): PEP定义：担任重要公职的人员。FATF划分的三类PEP——外国、国内和国际组织类——分别对应不同的强化尽职调查（EDD）要求。 (Sep 9 2026)

[政治公开人物（PEP）定义对比：FATF、FinCEN 与欧盟 AMLD](https://blocksec.com/zh/blog/pep-definitions-compared): 政治公众人物(PEP)定义对比:FATF、FinCEN与欧盟AMLD在境外PEP上意见一致,但在境内客户尽职调查(EDD)上存在分歧。哪一标准适用于你的平台? (Sep 9 2026)

[政治敏感人物（PEP）的含义：角色而非名录](https://blocksec.com/zh/blog/pep-meaning-role-not-registry): 政治公开人物（PEP）含义：该身份与其公共职务本身相关联，并延伸至其家属及关系密切者，且在离职后逐渐失效。 (Sep 9 2026)

[PBS全面实施后，BSC的表现如何？](https://blocksec.com/zh/blog/performance-bsc-after-full-implementation-pbs): 探索BEP-322后BSC的PBS升级：Builder市场如何走向集中、验证者中心化为何加剧，以及三明治攻击激增的深层原因。 (Jan 17 2025)

[BlockSec推出全球首个"合规+安全"管理平台](https://blocksec.com/zh/blog/phalcon-compliance-app): Phalcon Compliance帮助VASP快速满足AML/CFT合规要求，提供实时监控、6亿+标签、一键生成STR报告及定制风险引擎。 (Apr 24 2025)

[Phalcon Compliance：面向全体用户的自助式链上反洗钱服务](https://blocksec.com/zh/blog/phalcon-compliance-launches-self-service-platform-making-on-chain-aml-accessible-for-all): Phalcon Compliance 现已推出自助式链上反洗钱筛查服务。即时进行 KYT/KYA 检测，追踪资金流向，并生成可疑交易报告（STR），无需任何设置即可使用。 (Oct 14 2025)

[Phalcon Security支持Mantle网络：引领坚不可摧的生态安全](https://blocksec.com/zh/blog/phalcon-enhances-mantle-security): Phalcon Security现已支持Mantle Network，可自动阻止黑客攻击——了解其如何成功拦截20余次攻击，并保护超过2000万美元的资产安全。 (Jul 31 2024)

[Phalcon Explorer：下一代 Web3 交易分析工具](https://blocksec.com/zh/blog/phalcon-explorer-next-gen-web3-transaction-analysis-tool-1): BlockSec Phalcon Explorer 升级 Web3 区块链交易分析：支持调用跟踪、调试器、模拟器、模糊/事件搜索，覆盖 26+ 链，服务 10 万+ 用户。 (Sep 19 2025)

[Solana最佳区块链交易浏览器](https://blocksec.com/zh/blog/phalcon-explorer-now-fully-supports-solana): 为用户简化Solana交易，为开发者带来福音。 (Jun 20 2024)

[Phalcon Security现已推出Oracle监控功能!](https://blocksec.com/zh/blog/phalcon-oracle-monitor): 预防预言机攻击：了解Phalcon Security如何识别价格异常和更新延迟，在DeFi预言机攻击造成损失之前及时拦截。 (May 28 2025)

[Phalcon | 2023年Web3安全概览](https://blocksec.com/zh/blog/phalcon-overview-of-the-web3-security-landscape-in-2023): 2023年，69起漏洞利用攻击导致损失10万至2亿美元。 (Jan 16 2024)

[Phalcon 2023年终回顾](https://blocksec.com/zh/blog/phalcon-s-2023-year-end-recap): 通过Phalcon的故事，让我们共同回顾BlockSec在2023年为推进Web3安全所做的不懈努力。 (Dec 29 2023)

[Phalcon Security：主动防御零日网络3攻击](https://blocksec.com/zh/blog/phalcon-security-the-proactive-defense-ending-zero-day-web3-attacks): 了解 Phalcon Security 如何在 mempool 中自动发现并阻止攻击。这将 Web3 的防御从被动反应转变为主动出击。 (Nov 4 2025)

[加入我们的免费黑客防御游戏，用 Phalcon 阻挡真实攻击](https://blocksec.com/zh/blog/phalcon-virtual-experience-join-our-free-hack-defense-game-and-block-real-attacks-with-phalcon): 准备好与黑客展开一场生死搏杀了吗？ (May 17 2024)

[钓鱼合约:3.7万起诈骗如何运作及应对方法](https://blocksec.com/zh/blog/phishing-contracts): BlockSec研究人员发现超过3.7万个网络钓鱼合约，在以太坊上窃取了1.9亿美元。了解这些骗局的运作方式以及如何保护您的加密资产。 (May 19 2025)

[杀猪盘诈骗资金追回：法律途径与时间线（2026）](https://blocksec.com/zh/blog/pig-butchering-scam-recovery): 加密货币遭遇"杀猪盘"骗局？2026年冷静应对指南：首小时应对步骤、跨链追踪资金流向、判断资金追回的现实可能性，以及常见风险预警信号。 (Jul 23 2026)

[播客：BlockSec 实时拦截 1500 万美元 Web3 攻击](https://blocksec.com/zh/blog/podcast-how-block-sec-intercepted-15-m-of-web3-exploits-in-real-time-1): 周安迪做客Scraping Bits播客，探讨如何防御Web3领域的攻击。 (Feb 2 2024)

[现实中的价格操纵攻击（再现）：RariCapital事件](https://blocksec.com/zh/blog/price-manipulation-attack-in-reality-again-rari-capital-incident): 探索间接价格操纵：理解针对 RariCapital 的攻击 (Jan 19 2024)

[BlockSec 成功阻止 ParaSpace 攻击，挽救 500 万美元加密资产](https://blocksec.com/zh/blog/proactive-threat-prevention-a-new-web3-security-paradigm-1): 2023年3月17日05:48:59 (UTC)，BlockSec成功阻止了针对ParaSpace（顶级NFT借贷协议）的攻击，保护了价值500万美元的加密资产。 (Mar 17 2023)

[泰达金智能合约的公开转账漏洞](https://blocksec.com/zh/blog/public-transfer-vulnerability-of-the-tether-gold-smart-contract): Tether Gold智能合约中存在公共转账漏洞。 (Jan 21 2024)

[近期DeFi安全事件：BlockSec Phalcon 如何保障数百万用户资产](https://blocksec.com/zh/blog/recent-de-fi-hacks-how-phalcon-block-could-protect-user-assets-worth-millions): 近期黑客攻击凸显了通过自动化实现全天候区块链安全的需求 (Jan 9 2024)

[反思反射令牌：安全视角](https://blocksec.com/zh/blog/reflecting-on-reflection-tokens-a-security-perspective): 本文分享我们对反射令牌机制安全研究的洞察。 (Jun 6 2024)

[揭秘以太坊PoW上的“消息”重放攻击](https://blocksec.com/zh/blog/reveal-the-message-replay-attacks-on-ethereum-po-w): 近期以太坊PoW（ETHW）遭受重放攻击，Omni跨链桥存在漏洞，亟需链ID验证。 (Jan 19 2024)

[Revest Finance 漏洞：不只是重入攻击](https://blocksec.com/zh/blog/revest-finance-vulnerabilities-more-than-re-entrancy): 重塑 DeFi 未来：Revest Finance 漏洞教训 (Feb 4 2024)

[重审CashioApp安全事件](https://blocksec.com/zh/blog/revisiting-the-cashio-app-security-incident): CashioApp 因输入账户验证不足被利用，导致使用虚假抵押品和 Saber 账户未经授权铸造了 $CASH 代币。 (Apr 18 2024)

[重访虫洞攻击](https://blocksec.com/zh/blog/revisiting-the-wormhole-attacks): Wormhole攻击深度分析揭示了签名验证的漏洞，攻击者无需在以太坊锁定资产即可在Solana铸造12万ETH。 (Apr 23 2024)

[重塑Layer2链：从排序器构建内在安全性](https://blocksec.com/zh/blog/revolutionizing-l2-chains-building-intrinsic-security-from-sequencers): BlockSec的Sequencer Threat Overwatch Program如何将Phalcon Security攻击检测能力集成到L2 Sequencer中——Manta Pacific成为首个上线该功能的L2。 (Jul 5 2024)

[Rustle：NEAR社区首个自动化审计工具](https://blocksec.com/zh/blog/rustle-the-first-automatic-auditor-for-near-community): Rustle，由BlockSec开发，是NEAR智能合约的自动化审计工具，提供全面的漏洞检测与分析。 (Apr 18 2024)

[BlockSec推出Safe{Wallet}安全监控解决方案](https://blocksec.com/zh/blog/safe-wallet-security-monitor): 全面展示交易信息，分析交易风险，模拟交易结果，以防资产损失。 (Mar 6 2025)

[安全智能合约开发——NFT合约中的重入漏洞](https://blocksec.com/zh/blog/secure-smart-contract-development-code-reentrancy-in-nft-contracts-1): 探索NFT智能合约的关键安全隐患，聚焦重入攻击漏洞及其对以太坊生态的影响。 (Feb 7 2024)

[引言：保护Solana生态系统](https://blocksec.com/zh/blog/secure-the-solana-ecosystem): 本系列深入探讨如何在部署、升级及复杂功能实现过程中保障Solana的安全性。 (Apr 26 2024)

[保护 Solana 生态系统 (1) — Hello Solana](https://blocksec.com/zh/blog/secure-the-solana-ecosystem-1-hello-solana): BlockSec 致力于为 DApp 生态系统提供安全保障，尤其专注于 Solana 智能合约安全。 (Feb 7 2024)

[保障 Solana 生态（二）—— 程序间调用](https://blocksec.com/zh/blog/secure-the-solana-ecosystem-2-calling-between-programs): 掌握Solana跨程序调用艺术，学习详尽指南与实践示例，助力智能合约开发更上一层楼。 (Jan 25 2024)

[保护 Solana 生态系统 (3) — 程序升级](https://blocksec.com/zh/blog/secure-the-solana-ecosystem-3-program-upgrade): 本文提供Solana程序升级指南，涵盖可升级程序部署、示例合约代码审查、交易发送、执行升级及验证升级后程序。 (Apr 18 2024)

[保障Solana生态系统安全（4）— 账户验证](https://blocksec.com/zh/blog/secure-the-solana-ecosystem-4-account-validation): 本文讨论了Solana编程环境中与访问控制相关的问题，重点关注账户验证的重要性及潜在安全风险。 (Apr 24 2024)

[保护 Solana 生态系统（5）— 多重签名](https://blocksec.com/zh/blog/secure-the-solana-ecosystem-5-multi-sig): 本文探讨Solana的多签实现，强调其在去中心化应用中增强安全、防范私钥泄露的重要性。 (Apr 20 2024)

[安全 Solana 生态（6）——多签2](https://blocksec.com/zh/blog/secure-the-solana-ecosystem-6-multi-sig2): 本文探讨了 Solana 多签的通用实现，支持链上交易签名，并提供代码审查与部署详情。 (Apr 18 2024)

[保障 Solana 生态（7）— 类型混淆](https://blocksec.com/zh/blog/secure-the-solana-ecosystem-7-type-confusion): 文章探讨了 Solana 的类型混淆安全问题，重点说明其对账户反序列化/序列化造成的影响，以及攻击者可能利用此漏洞的风险。 (Apr 23 2024)

[Web3 主动威胁防护安全](https://blocksec.com/zh/blog/securing-web3-through-proactive-threat-prevention-1): 过去三年，DeFi 生态系统发生了多起安全事件。为应对威胁，社区普遍采用代码为中心的防御方法，如静态代码审计、智能合约扫描工具或动态模糊测试。 (Jan 28 2023)

[Cakepie合约安全审计报告](https://blocksec.com/zh/blog/security-audit-report-for-cakepie-contracts): 这是我们在2023年11月为Cakepie Contracts进行的安全审计报告。 (Jan 16 2024)

[LiNEAR 安全审计报告](https://blocksec.com/zh/blog/security-audit-report-for-li-near): 这是我们于2022年4月为LiNEAR进行的安审报告。 (Feb 18 2024)

[NearOinDao安全审计报告](https://blocksec.com/zh/blog/security-audit-report-for-near-oin-dao): 这是我们于2021年12月为NearOinDao进行的安全审计报告。 (Feb 18 2024)

[安全检查：EVM 兼容链经得起考验吗？](https://blocksec.com/zh/blog/security-check-do-evm-compatible-chains-hold-up): 揭示EVM中的隐藏安全风险：BlockSec自动化工具如何助力深度审查 (Jan 5 2024)

[Seal Finance 安全事件](https://blocksec.com/zh/blog/security-incident-on-seal-finance): Seal Finance协议遭攻击，攻击者获利80.97 ETH，价值48,849美元。 (Mar 4 2024)

[移动开发中的安全实践 (1)：Hello World](https://blocksec.com/zh/blog/security-practices-in-move-development-1-hello-world): 学习Move语言安全开发实践，并使用此综合指南创建Aptos应用程序。 (Apr 23 2024)

[移动开发中的安全实践（二）：Aptos Coin](https://blocksec.com/zh/blog/security-practices-in-move-development-2-aptos-coin): 使用 Aptos 官方标准模块 coin.move，轻松创建和管理您自己的代币。 (Apr 24 2024)

[月度安全回顾：2024年3月](https://blocksec.com/zh/blog/security-report-PrismaFi-Munchables-ParaSwap): 掌握三月安全趋势及最新动态。🙌 (Apr 1 2024)

[Radiant V2 安全测试报告](https://blocksec.com/zh/blog/security-testing-report-for-radiant-v2): Radiant V2安全测试发现17个问题，包括2个高危漏洞。了解BlockSec如何发现并帮助修复关键智能合约漏洞。 (Jan 9 2024)

[Solana 简化版](https://blocksec.com/zh/blog/solana-guide): BlockSec的Solana简明指南三部曲：Solana的核心概念与账户模型、用Rust编写你的第一个程序，以及如何解读交易。 (Jul 12 2024)

[Solana 简化 02：从零开始编写你的第一个 Solana 智能合约](https://blocksec.com/zh/blog/solana-simplified-02-writing-your-first-solana-smart-contract-from-scratch): 掌握Solana编程的秘密！本文涵盖环境设置、合约逻辑和程序测试，让你一文读懂！ (Jun 21 2024)

[Solana 简明教程 03：5 分钟理解 Solana 交易](https://blocksec.com/zh/blog/solana-simplified-03-understand-solana-transactions-5-minutes): 5分钟掌握Solana交易！了解Solana代币实现原理，并使用BlockSec的Phalcon Explorer逐步分析真实交易案例。 (Jun 27 2024)

[Solana简化版01：一文掌握Solana核心概念](https://blocksec.com/zh/blog/solana-simplified-master-solana-core-concepts-in-one-read): 仅需10分钟，了解Solana的运行机制、账户模型与交易流程，揭秘其爆发式增长背后的原因。 (Jun 7 2024)

[什么是稳定币支付？企业完整指南](https://blocksec.com/zh/blog/stablecoin-payments-explained): 什么是稳定币支付？链上结算如何取代SWIFT和代理银行体系，实际市场规模有多大，以及与传统银行支付渠道的比较。 (Aug 5 2026)

[无法被冻结的稳定币：2026年全景图](https://blocksec.com/zh/blog/stablecoins-that-cannot-be-frozen): 2026年七种稳定币（USDT、USDC、DAI、LUSD、Frax、RAI、USDe）冻结能力全景图，附真实流动性权衡分析。 (Aug 4 2026)

[系统化方法保障EVM兼容性与安全性](https://blocksec.com/zh/blog/systematic-approach-to-maintaining-evm-compatibility-and-security-1): 快速发现EVM兼容性漏洞：BlockSec的差分模糊测试在Aurora和Moonbeam中发现8个问题。了解其如何增强区块链安全性。 (Mar 27 2023)

[加密货币污点分析：毒化法、削减法与先进先出法详解](https://blocksec.com/zh/blog/taint-analysis-crypto): 污点分析是调查人员追踪被盗加密货币在区块链上转移路径的方法。本文通过一个清晰的以太坊实例，讲解毒化法、折减法（Haircut）和先进先出法（FIFO）三种追踪方法。 (Jul 22 2026)

[Telcoin 安全事件事后分析与深度剖析](https://blocksec.com/zh/blog/telcoin-security-incident-in-depth-analysis): 2023年圣诞节Telcoin安全漏洞全面事后剖析与分析。 (Jan 11 2024)

[BlockSec Phalcon 最常问的十个问题](https://blocksec.com/zh/blog/ten-most-frequently-asked-questions-about-phalcon-block): 用户对 BlockSec Phalcon 尤为关注以下问题…… (Dec 15 2023)

[Tether冻结676万USDT：链上合规机制解析](https://blocksec.com/zh/blog/tether-freezes-6-76-m-usdt-linked-to-iran-s-irgc-and-houthi-forces-why-on-chain-compliance-is-now-a-geopolitical-battlefield): Tether冻结与伊斯兰革命卫队相关网络挂钩的676万美元USDT，凸显2026年更严格的稳定币制裁趋势。了解实时KYT技术如何拦截受制裁资金。 (May 8 2026)

[FEGtoken安全事件分析：细节决定成败](https://blocksec.com/zh/blog/the-analysis-of-fegtoken-security-incident-devils-in-the-details): 一处微妙的合同漏洞导致多个区块链上的 FEGtoken 被盗百万美元 (Feb 7 2024)

[Indexed Finance安全事件分析](https://blocksec.com/zh/blog/the-analysis-of-indexed-finance-security-incident): 学习Move安全开发实践，用这份综合指南创建Aptos应用。 (Apr 20 2024)

[神经桥安全事件分析](https://blocksec.com/zh/blog/the-analysis-of-nerve-bridge-security-incident): 探索“神经桥”与“突触”事件的相似之处，揭示攻击者的作案手法。 (Jan 15 2024)

[金融数组安全事件分析](https://blocksec.com/zh/blog/the-analysis-of-the-array-finance-security-incident): 探索 Array Finance 漏洞：分步攻击分析” - 详细解析 Array Finance 被恶意攻击的交易，深入了解 DeFi 漏洞。 (Feb 4 2024)

[DAOMaker攻击分析](https://blocksec.com/zh/blog/the-analysis-of-the-dao-maker-attack): 探究 DAOMaker 攻击的详细步骤，分析导致未经授权的管理员角色分配和非法资金提取的智能合约漏洞。 (Jan 29 2024)

[冰棒金融安全事件分析](https://blocksec.com/zh/blog/the-analysis-of-the-popsicle-finance-security-incident): 攻击流程揭秘：攻击者利用 Popsicle Finance 的步骤 (Jan 19 2024)

[三株犬安全事件分析](https://blocksec.com/zh/blog/the-analysis-of-the-sanshu-inu-security-incident): 以太坊区块链漏洞：Sanshu Inu智能合约遭受攻击，DeFiRanger披露 (Feb 4 2024)

[零御机攻击分析](https://blocksec.com/zh/blog/the-analysis-of-the-zerogoki-attack): 调查Zerogoki攻击事件：精心构造的代币数量如何导致巨额盗窃 (Mar 4 2024)

[Bug修复引发的蝴蝶效应：复合安全事件](https://blocksec.com/zh/blog/the-butterfly-effect-the-compound-security-incident-caused-by-a-bugfix): 本文描述了Compound协议中的两个bug及其对COMP代币分配给用户的影响。 (Apr 18 2024)

[去中心化困境：KelpDAO危机中的连锁风险与应急权力](https://blocksec.com/zh/blog/the-decentralization-dilemma-cascading-risk-and-emergency-power-in-the-kelp-dao-crisis): BlockSec 深度分析 KelpDAO $290M rsETH 跨链桥漏洞（2026年4月18日），归因于 Lazarus Group。分析DVK依赖、DeFi可组合性通过Aave V3冻结超67亿ETH流动性，以及去中心化治理被迫行使中心化紧急权力。文章��... (Apr 22 2026)

[Poly Network 攻击的进一步分析](https://blocksec.com/zh/blog/the-further-analysis-of-the-poly-network-attack): 探索以太坊攻击流程，揭示跨越Ontology、Poly和以太坊链的跨链漏洞。 (Jan 25 2024)

[2026年区块链合规的隐秘真相](https://blocksec.com/zh/blog/the-hidden-truths-of-blockchain-legal-compliance-in-2026): 2026年区块链法律合规指南：了解从DAO责任到制裁审查的10大隐藏风险，在合规漏洞演变成罚款之前提前防范。 (Feb 13 2026)

[Poly网络黑客漏洞修复补丁的非正式安全审查](https://blocksec.com/zh/blog/the-informal-security-review-of-the-patch-to-fix-the-vulnerability-of-the-poly-network-hack): 本文对Poly网络近期漏洞修复补丁进行非正式安全回顾，重点介绍白名单使用及其安全属性。 (Apr 20 2024)

[bZx安全事件的初步分析](https://blocksec.com/zh/blog/the-initial-analysis-of-the-b-zx-security-incident): 文章讨论了 bZX 协议遭黑客攻击事件，指出攻击源于开发者私钥泄露，并强调了保护私钥在 DApp 安全中的重要性。 (Apr 18 2024)

[PolyNetwork黑客事件初步分析](https://blocksec.com/zh/blog/the-initial-analysis-of-the-poly-network-hack): PolyNetwork黑客攻击：3亿美元跨链攻击根本原因分析 (Jan 12 2024)

[Vee Finance安全事件的真正根源](https://blocksec.com/zh/blog/the-real-root-cause-of-the-vee-finance-security-incident): Vee Finance 报告错误指明安全漏洞根源。 (Mar 4 2024)

[从安全研究员的视角回顾Poly Network黑客事件](https://blocksec.com/zh/blog/the-retrospection-of-the-poly-network-hack-from-a-security-researcher-perspective): 对Poly Network黑客事件的分析以及去中心化金融项目安全漏洞的经验教训。 (Apr 18 2024)

[闪电贷攻击APE空投简析](https://blocksec.com/zh/blog/the-short-analysis-of-the-flashloan-attack-to-the-ape-air-drop): 分析通过操纵资产现货价格，从APE代币空投中获利的攻击。 (Jan 12 2024)

[智能合约审计 Top 5：BlockSec 领跑](https://blocksec.com/zh/blog/the-top-5-smart-contract-auditors-block-sec-leading-the-way): 2024年智能合约审计新趋势， BlockSec等五大审计公司脱颖而出，提供全面评估、专业报告、EVM链专业知识和卓越客户满意度。 (Apr 8 2024)

[2024年五大Solidity审计服务商：综合评估](https://blocksec.com/zh/blog/the-top-5-solidity-audit-vendors-in-2024-a-comprehensive-review): 探索2024年排名前五的Solidity审计机构，了解BlockSec如何凭借卓越的专业知识、定制化解决方案及全面的智能合约安全评估服务脱颖而出。 (Apr 15 2024)

[币安智能链上隐私交易服务的安全与隐私担忧](https://blocksec.com/zh/blog/the-two-sides-of-the-private-tx-service-on-binance-smart-chain): 本文探讨了隐私交易技术在保障用户隐私与安全方面所面临的挑战。 (Jan 19 2024)

[玫瑰中的荆棘：探索 Uniswap v4 新型 Hook 机制的安全风险](https://blocksec.com/zh/blog/thorns-in-the-rose-exploring-security-risks-in-uniswap-v4-s-novel-hook-mechanism): 这是我们Uniswap v4钩子机制安全风险系列的第一篇文章。本文将为读者提供全面的概述和基础理解。 (Nov 6 2023)

[四舍五入引发巨额损失：Balancer近期事件深度解析](https://blocksec.com/zh/blog/tiny-rounding-down-big-fund-losses-an-in-depth-analysis-of-the-recent-balancer-incident): 对2023年8月27日发生的Balancer攻击事件进行的全面分析。 (Jan 19 2024)

[2025年十大“精彩”安全事件](https://blocksec.com/zh/blog/top-10-awesome-security-incidents-in-2025): BlockSec盘点2025年十大加密安全事件：损失金额、根本原因、新型攻击手法及深度跟踪分析，助力强化Web3安全防御体系。 (Feb 11 2026)

[2023年十大“惊艳”安全事件](https://blocksec.com/zh/blog/top-ten-awesome-security-incidents-in-2023): 本文将介绍2023年十大值得关注的安全事件及其原因。 (Feb 5 2024)

[Trace AI：使用AI代理追踪被盗加密货币 | BlockSec](https://blocksec.com/zh/blog/trace-ai-track-stolen-crypto): BlockSec推出的Trace AI可在单次对话中追踪8条链上的被盗加密货币，生成完整的资金流向报告，助您举报或追回资金。 (Jul 10 2026)

[追踪16亿美元波场（TRON）USDT：深析VerilyHK庞氏骗局架构](https://blocksec.com/zh/blog/tracing-16-b-in-tron-usdt-inside-the-verily-hk-ponzi-infrastructure): 针对诈骗平台VerilyHK的链上调查显示，该平台通过轮换钱包、配对支付通道和交易所出口漏斗，转移了16亿美元的波场USDT，并被追踪到与受FinCEN制裁的汇旺集团存在关联。 (Apr 8 2026)

[追踪浪人桥被盗资金](https://blocksec.com/zh/blog/tracing-the-stolen-fund-of-the-ronin-bridge): Ronin Bridge安全事件：私钥泄露导致173,600 ETH和25,500,000 USDC被盗。被盗USDC已迅速兑换成ETH，其中6,250 ETH已被转出。 (Apr 18 2024)

[Phalcon Explorer：在Plasma上跟踪稳定币支付](https://blocksec.com/zh/blog/track-stablecoin-payments-on-plasma-with-phalcon-explorer): Phalcon Explorer支持Plasma：在这条原生支持稳定币的L1上分析支付流程、调试智能合约、追踪资金流向，并提供实时监控 (Dec 24 2025)

[便捷与安全权衡：ERC20 的无限审批](https://blocksec.com/zh/blog/tradeoff-between-convenience-and-security-unlimited-approval-in-erc-20): 探索以太坊ERC20代币标准中无限批准的风险。 (Jan 12 2024)

[#7 Trust Wallet事件：API密钥泄露，官方更新通道沦为后门](https://blocksec.com/zh/blog/trust-wallet-incident-a-stolen-api-key-turns-the-official-update-channel-into-a-backdoor): 2025年12月25日：Trust Wallet Chrome插件v2.68遭供应链攻击植入后门，窃取用户助记词，导致跨多条链约850万美元被盗。 (Feb 11 2026)

[如何解冻币安上的USDT：5步操作指南](https://blocksec.com/zh/blog/unfreeze-usdt-on-binance): Binance USDT冻结属于币安平台端的合规审查（KYC/AML/司法管辖区问题），并非Tether链上黑名单。附五步申诉指南及处理时间参考。 (Aug 4 2026)

[解鎖Web3安全：BlockSec如何打擊DeFi駭客攻擊](https://blocksec.com/zh/blog/unlocking-web3-security-battling-the-dark-side-1): Web3世界日新月异，安全至关重要。即便熊市，DeFi黑客和诈骗的激增令人担忧。 (Sep 5 2023)

[TxPhishScope：以太坊上基于交易的钓鱼检测](https://blocksec.com/zh/blog/unveiling-block-sec-s-large-scale-tx-phish-website-detection-system): BlockSec的TxPhishScope在以太坊上检测到超过33,130个钓鱼网站。了解基于交易的钓鱼攻击原理及防范方法。 (Nov 24 2023)

[USDT 和非法金融：新的犯罪策略与合规解决方案](https://blocksec.com/zh/blog/usdt-and-illicit-finance-new-criminal-tactics-and-compliance-solutions): 犯罪分子利用USDT在多条链上进行洗钱、诈骗等非法活动。了解六种新型作案手法，以及Phalcon Compliance如何检测并拦截非法资金流动。 (Sep 26 2025)

[USDT黑名单2026：谁在名单上，Tether如何决定](https://blocksec.com/zh/blog/usdt-blacklist-explained-2026): 2026年USDT黑名单：自2018年以来累计冻结56.9亿美元，涉及9,597个地址。了解上榜者身份、Tether冻结原因，以及《GENIUS法案》将如何改变相关规则。 (Jul 27 2026)

[USDT冻结2026：谁被冻结、如何查询、实时数据](https://blocksec.com/zh/blog/usdt-freeze-stablecoin-compliance-guide): USDT冻结机制解析、实时黑名单数据（57亿美元）、解冻流程及受害者重新发行指南。这是一份面向合规团队、OTC柜台和接收方的2026年实用指南。 (Jul 27 2026)

[Phalcon 调试交易：高效分析的分步指南](https://blocksec.com/zh/blog/use-phalcon-debug-dive-transaction): 了解如何使用Phalcon的调试交易功能高效分析区块链交易。立即探索调试模式、控制台和分享工具。 (Mar 29 2023)

[区块链合规平台架构：2026年VASP监管指南](https://blocksec.com/zh/blog/vasp-blockchain-compliance-platform-architecture-2026): 2026年VASP区块链合规指南，涵盖KYT交易监控、风险评分、可疑活动报告（SAR）自动化及多司法管辖区API集成。 (Jun 8 2026)

[VASP加密货币合规义务：虚拟资产服务提供商实用清单](https://blocksec.com/zh/blog/vasp-compliance-checklist): VASP虚拟资产服务商加密合规清单：梳理五项核心义务及对应工具，并给出适合精简团队在第一季度落地实施的建设顺序。 (Sep 9 2026)

[VASP指南：从零开始构建加密货币合规软件技术栈](https://blocksec.com/zh/blog/vasp-crypto-compliance-software-stack-engineering-guide): 针对加密合规技术栈的VASP工程指南,涵盖KYT交易监控流程、SAR自动化生成,以及多司法辖区合规申报。 (Jun 8 2026)

[加密货币合规工具：虚拟资产服务提供商实用采购指南](https://blocksec.com/zh/blog/vasp-crypto-compliance-tools-guide): 面向VASP的加密合规工具指南，涵盖AML监控、钱包筛查、KYT交易分析、案件管理，并为中小型虚拟资产服务提供商提供成本评估框架。 (Jun 8 2026)

[金星塞纳（THE）事件：何故失灵，何事错漏](https://blocksec.com/zh/blog/venus-thena-donation-attack): 2026年3月15日，攻击者利用捐赠攻击绕过Venus Protocol (BNB Chain)的THE（Thena）供应上限，将抵押仓位膨胀至预设上限的3.67倍，借贷约1490万美元资产。Venus Protocol产生约215万美元坏账，攻击者投资992... (Mar 18 2026)

[Web3攻击面：渗透测试概览](https://blocksec.com/zh/blog/web3-attack-surfaces-penetration-testing): 加密机构区块链渗透测试必须覆盖的内容：四要素模型与五大攻击面，从签名意图到资金逻辑。 (Sep 3 2026)

[Web3伴侣：开源安全智能代理钱包](https://blocksec.com/zh/blog/web3-companion-secure-agentic-wallet): 当前的AI代理钱包存在根本性缺陷。了解BlockSec开源的Web3 Companion如何隔离私钥并执行严格的安全策略,确保资金安全。 (Jun 23 2026)

[Web3 交易所、支付平台和金融机构合规要点](https://blocksec.com/zh/blog/web3-compliance-essentials-for-exchanges-payment-platforms-and-financial-institutions): 了解Web3合规如何应用于交易所、支付平台和金融机构——从实时反洗钱(AML)筛查到跨链资金追踪。 (Mar 3 2026)

[超越智能合约:Web3中的域名与DNS运营安全](https://blocksec.com/zh/blog/web3-dns-security-defi-domains): 我们扫描了100个头部DeFi域名的DNS配置：72%缺少CAA记录，47%未通过DNSSEC验证。了解攻击者用来劫持前端的安全漏洞。 (Sep 9 2026)

[~$3950万美元损失：Allbridge、Wanchain等项目 | BlockSec周报](https://blocksec.com/zh/blog/web3-security-allbridge-wanchain-exploits): 损失约3950万美元。Allbridge因Solana输入验证漏洞损失约165万美元，AFX Trade因密钥泄露损失约2415万美元，Wanchain因消息编码漏洞损失约50万美元，Lien Finance因验证漏洞损失约54.2万美元。 (Jul 30 2026)

[~$598万损失：Aztec、Raydium等平台安全事件 | BlockSec周报](https://blocksec.com/zh/blog/web3-security-aztec-raydium-more): Aztec Rollup输入验证漏洞损失215万美元，Raydium AMM v3遭利用损失134万美元，Top Token治理攻击损失159万美元。完整链上分析详见内文。 (Jun 17 2026)

[~$135万损失：BarnBridge、DeFiTuna | BlockSec周报](https://blocksec.com/zh/blog/web3-security-barnbridge-defituna-exploits): 损失约135万美元——BarnBridge在以太坊上遭治理攻击损失约77.6万美元，DeFiTuna在Solana上遭借贷漏洞攻击损失约57万美元。完整链上分析。 (Jul 22 2026)

[~$8800万损失：COLDCARD与LULA漏洞利用事件 | BlockSec周报](https://blocksec.com/zh/blog/web3-security-coldcard-entropy-lula-exploits): COLDCARD硬件钱包固件熵值故障导致约1,370枚BTC（约8800万美元）被分批盗取；LULA因BNB链储备被操纵损失约57.8万美元。 (Aug 5 2026)

[损失约2300万美元：Cosmos EVM与Moonwell遭利用攻击 | BlockSec Weekly](https://blocksec.com/zh/blog/web3-security-cosmos-evm-moonwell-exploits): 五起漏洞事件共损失约2270万美元:六链Cosmos EVM漏洞(约570万美元)、Moonwell抵押品与预言机操纵(约910万美元),以及Ajna、Rain、Tectonic事件。 (Sep 4 2026)

[损失1600万美元：DxSale、SquidRouterModule及更多 | BlockSec周报](https://blocksec.com/zh/blog/web3-security-dxsale-squidrouter-more): DxSale代币锁定合约遭利用损失730万美元，Gravity Bridge跨链桥遭利用损失540万美元，SquidRouterModule滥用Axelar协议损失320万美元。内含完整链上分析。 (Jun 3 2026)

[Harmony跨分片ONE铸币漏洞 + 约4700万美元私钥丢失 | BlockSec](https://blocksec.com/zh/blog/web3-security-harmony-kite-exploits): Harmony跨分片收据重放伪造约3.01万亿ONE（名义价值无法兑现，已排除）；本周约4700万美元的损失主要来自三起私钥泄露事件 (Aug 19 2026)

[~$800K损失：Hinkal双花攻击 | BlockSec周报](https://blocksec.com/zh/blog/web3-security-hinkal-double-spend): Hinkal隱私池在以太坊上遭遇双花攻击，损失约80万美元。一个遗留的票据格式漏洞可能导致同一笔存款被重复提取。 (Jul 9 2026)

[~$1800万损失：jaredFromSubway、Aztec等项目受损 | BlockSec周报](https://blocksec.com/zh/blog/web3-security-jaredfromsubway-aztec-more): jaredFromSubway遭遇1500万美元反向授权漏洞攻击，Aztec因ZK逃生舱电路漏洞损失220万美元，另附一起安全事件。完整链上分析详见内文。 (Jun 25 2026)

[~$160万损失：Moke代币与LpdFi遭黑客攻击 | BlockSec周报](https://blocksec.com/zh/blog/web3-security-moke-token-lpdfi-exploits): 约160万美元因两起BNB链价格操纵攻击损失：Moke Token约90.6万美元，利用现货价格漏洞及重复领取LP分红；LpdFi约69.7万美元，利用重复计算的AMM储备金实施攻击。 (Aug 12 2026)

[~3600万美元损失：Summer.fi、Bonzo Lend等平台 | BlockSec每周安全回顾](https://blocksec.com/zh/blog/web3-security-summerfi-bonzo-lend-exploits): 损失约3600万美元:Summer.fi因下线不彻底导致价格虚高损失604万美元,Bonzo Lend因预言机漏洞损失905万美元,BonkDAO因治理攻击损失2120万美元。 (Jul 15 2026)

[约400万美元损失：Taiko与SecondFi遭受攻击 | BlockSec周报](https://blocksec.com/zh/blog/web3-security-taiko-secondfi-exploits): 损失约410万美元。Taiko跨链桥因SGX密钥泄露及未检查的调试属性遭利用，损失约170万美元；SecondFi的Ed25519漏洞导致私钥可被恢复，损失约240万美元。 (Jul 1 2026)

[~1026万美元：Term Finance 与 MAYAChain 攻击事件 | BlockSec](https://blocksec.com/zh/blog/web3-security-term-finance-mayachain-exploits): Term Finance因治理攻击导致以太坊上六个金库被接管，损失约850万美元；MAYAChain因链式会计漏洞导致低流动性资金池被抽干，损失约176万美元。 (Aug 26 2026)

[损失约1.046亿美元：EchoProtocol、Verus等项目遭攻击 | BlockSec周报](https://blocksec.com/zh/blog/web3-security-verus-bridge-retoswap-more): Verus跨链桥被盗1170万美元，RetoSwap仲裁人权限遭劫持损失270万美元，另有三起私钥泄露事件合计损失9020万美元。完整链上分析详情请见内文。 (May 27 2026)

[Zcash Orchard 健全性漏洞分析 | BlockSec 周报](https://blocksec.com/zh/blog/web3-security-zcash-orchard-soundness-bug-analysis): Zcash Orchard电路存在一个健全性漏洞，可能导致屏蔽池中ZEC被无法检测地伪造铸造。文内含完整的AI辅助审计报告。 (Jun 10 2026)

[Web3智能合约与EVM链审计 | BlockSec](https://blocksec.com/zh/blog/web3-smart-contract-evm-chain-audits-blocksec): BlockSec以攻击者为中心的审计、链上审查和零日漏洞检测，守护Web3安全，实战检验，阻止20+起黑客攻击，挽回损失2000万美元以上。 (Dec 4 2025)

[每周Web3安全事件汇总 | 2026年4月13日 – 4月19日](https://blocksec.com/zh/blog/weekly-web3-security-incident-roundup-apr-13-apr-19-2026): BlockSec本周安全报告涵盖2026年4月13日至19日间发生的四起攻击事件，涉及以太坊、Unichain、Arbitrum、NEAR等多条链，总损失约3.1亿美元。最突出的是KelpDAO rsETH跨链桥遭利用损失2.9亿美元，攻击者通过污染唯一LayerZero DVN的RPC基础设施伪造跨链消息，导致五条链上WETH冻结并触发Arbitrum安全委员会强制状态转换。其他事件包括Hyperbridge MMR证明伪造损失24.2万美元、Dango有符号整数滥用损失150万美元，以及Rhea Finance Burrowland协议循环兑换路径漏洞损失1840万美元。 (Apr 22 2026)

[Web3 安全事件周报 | 2026年4月6日至4月12日](https://blocksec.com/zh/blog/weekly-web3-security-incident-roundup-apr-6-apr-12-2026): BlockSec 每周安全报告（2026年4月6-12日）涵盖Linea等链上4起DeFi攻击，损失约92.86万美元。主要事件包括：用户误授权SquidMulticall导致51.7万美元损失；HB代币奖励结算逻辑缺陷致19.3万美元损失；Den... (Apr 16 2026)

[每周Web3安全事件汇总 | 2026年2月16日 – 2月22日](https://blocksec.com/zh/blog/weekly-web3-security-incident-roundup-feb-16-feb-22-2026): 2026年2月16日至22日，区块链安全事件共3起，总损失约622万美元，涉及Base、BSC和以太坊。主要原因：一是治理升级中预言机配置错误，导致抵押品估值偏低；二是绑定曲线合约算术溢出，代币近零成本铸造；三是跨链桥验证者私钥泄露，攻击者转移合约所有权并盗取储备资产。 (Feb 27 2026)

[Web3安全事件周报 | 2026年2月2日 - 2月8日](https://blocksec.com/zh/blog/weekly-web3-security-incident-roundup-feb-2-feb-8-2026): 2026年2月2日至2月8日，发生6起区块链安全事件，损失约380万美元。涉及以太坊和BNB链DeFi协议的访问控制、输入验证、代币设计及用户误用漏洞。主要原因包括：绕过网关验证的无许可跨链执��... (Feb 12 2026)

[Web3每周安全事件汇总 | 2026年2月23日 – 3月1日](https://blocksec.com/zh/blog/weekly-web3-security-incident-roundup-feb-23-mar-1-2026): 2026年2月23日至3月1日，区块链发生7起安全事件，损失约1300万美元。漏洞涉及预言机配置、加密验证及业务逻辑，其中YieldBloxDAO（约1000万美元）和FOOMCASH（约226万美元）受损最重。Ploutos、LAXO��... (Mar 4 2026)

[Web3安全事件周报 | 2026年2月9日 - 2月15日](https://blocksec.com/zh/blog/weekly-web3-security-incident-roundup-feb-9-feb-15-2026): 2026年2月9日至15日，BNB智能链发生三起区块链安全事件，损失约65.7万美元。皆因DeFi代币合约业务逻辑缺陷，包括：中间合约余额未检查提款，允许捐赠式通胀；交易后通缩回扣，创建可重复��... (Feb 18 2026)

[Web3 安全事件周报 | 2026年1月25日 - 2月1日](https://blocksec.com/zh/blog/weekly-web3-security-incident-roundup-jan-25-feb-1-2026): 2026年1月25日至2月1日，发生6起区块链安全事件，损失约1805万美元。涉及多链DeFi协议中不当输入验证、代币设计缺陷、密钥泄露和业务逻辑错误。主要原因包括：未经验证的用户输入导致任意... (Feb 4 2026)

[Web3安全周报 | 2026年3月16日 – 3月22日](https://blocksec.com/zh/blog/weekly-web3-security-incident-roundup-mar-16-mar-22-2026): BlockSec本周安全报告：3月16日至22日，以太坊、BNB Chain及Polygon等链上发生7起DeFi攻击，总损失约8270万美元。其中Resolv协议因私钥泄露致8000万美元被盗，此外Venus、dTRINITY、Fun.xyz等亦遭攻击。 (Mar 25 2026)

[Web3安全事件周报 | 2026年3月2日 - 3月8日](https://blocksec.com/zh/blog/weekly-web3-security-incident-roundup-mar-2-mar-8-2026): 2026年3月2日至3月8日，报告了7起区块链安全事件，总损失约325万美元。事件涉及Base、BNB Chain和以太坊，暴露出智能合约逻辑、代币通缩机制和资产价格操纵中的关键漏洞。主要原因包括：代��... (Mar 25 2026)

[Web3安全事件周报 | 2026年3月23日 – 3月29日](https://blocksec.com/zh/blog/weekly-web3-security-incident-roundup-mar-23-mar-29-2026): BlockSec本周DeFi安全报告，涵盖2026年3月23-29日以太坊和BNB链上的8起攻击事件，总损失约153万美元。主要事件包括BCE代币67.9万美元机制漏洞，Cyrus Finance 51.2万美元操价提款，TUR质押13.35万美元闪�... (Apr 2 2026)

[Web3安全事件周报 | 2026年3月30日 - 4月5日](https://blocksec.com/zh/blog/weekly-web3-security-incident-roundup-mar-30-apr-5-2026): BlockSec周报，3月30日至4月5日，Solana、BNB Chain、Arbitrum、Polygon发生9起DeFi攻击，损失约2.87亿美元。Solana Drift Protocol被盗2.853亿美元，利用多签社交工程和durable nonce机制。另有LML质押、Silo Finance��... (Apr 9 2026)

[Web3安全周报 | 2026年3月9日 – 3月15日](https://blocksec.com/zh/blog/weekly-web3-security-incident-roundup-mar-9-mar-15-2026): BlockSec周报汇总了3月9日至15日以太坊与BNB链上的8起DeFi攻击，总损失约166万美元。重点包括：AAVE因预言机配置错误损失101万美元；MT代币交易限制缺陷导致24.2万美元损失；DBXen因函数混用损失1... (Mar 18 2026)

[~$704万损失：GiddyDefi、Volo Vault等 | BlockSec周报](https://blocksec.com/zh/blog/weekly-web3-security-roundup-2026-04-26): 损失约704万美元:GiddyDefi因EIP-712签名重放攻击损失130万美元,Volo Vault因运营商密钥泄露损失350万美元,Purrlend损失150万美元,SingularityFinance因预言机配置错误损失41.3万美元。 (Apr 29 2026)

[损失1590万美元：Trusted Volumes、Wasabi等项目遭攻击 | BlockSec周报](https://blocksec.com/zh/blog/weekly-web3-security-roundup-2026-05-10): Trusted Volumes 587万美元RFQ授权绕过漏洞、Wasabi 570万美元基础设施入侵、Aftermath 114万美元手续费漏洞攻击。完整链上分析详解。 (May 17 2026)

[损失472万美元：TAC、Transit Finance等受袭 | BlockSec周报](https://blocksec.com/zh/blog/weekly-web3-security-roundup-2026-05-17): 约损失472万美元:Transit Finance在TRON上因遗留calldata漏洞损失188万美元,TAC在TON上因跨链桥验证绕过损失280万美元,Boost Hook因V4现货价格操纵损失4.675万美元 (May 19 2026)

[DeFi协议面临哪些安全风险？如何确保协议安全？](https://blocksec.com/zh/blog/what-are-the-security-risks-faced-by-de-fi-protocols-and-how-to-ensure-protocol-security): 本文旨在探讨如何有效降低风险，确保DeFi协议的稳健安全，涵盖代码漏洞、运营威胁及外部依赖等关键领域。 (Jun 12 2024)

[加密货币反洗钱地址检查需要哪些数据？](https://blocksec.com/zh/blog/what-data-needed-crypto-aml-address-check): 加密货币AML地址检查只需一个输入：钱包地址。了解哪些可选上下文信息能提高准确性，以及筛查引擎会返回哪些结果。 (Jul 23 2026)

[职场中的PEP是什么意思？合规团队新成员的简明解答](https://blocksec.com/zh/blog/what-does-pep-mean): PEP是什么意思？这是一种风险类别，而非指控：担任公职会带来洗钱风险。为合规团队新成员提供的通俗易懂的解答。 (Sep 9 2026)

[什么是加密货币中基于地址的反洗钱监控？简明指南](https://blocksec.com/zh/blog/what-is-address-based-aml-monitoring): Phalcon Compliance实时监控区块链地址，比对超6亿个已标记钱包数据。了解地址监控如何捕捉身份核验遗漏的非法资金风险敞口。 (Jul 21 2026)

[什么是反洗钱（AML）？五大支柱框架详解](https://blocksec.com/zh/blog/what-is-anti-money-laundering): 反洗钱（AML）是金融机构用于检测、阻止和报告非法资金的框架体系。了解反洗钱及美国金融犯罪执法网络（FinCEN）银行保密法（BSA）五大支柱计划。 (Jul 29 2026)

[区块安全Phalcon是什么？Phalcon如何精准识别并快速阻挡黑客攻击？](https://blocksec.com/zh/blog/what-is-block-sec-phalcon-how-does-phalcon-accurately-identify-and-rapidly-block-hacker-attacks): BlockSec Phalcon是什么？协议为何需要Phalcon？Phalcon技术原理？如何订阅？本文将解答。 (Apr 22 2024)

[什么是区块链渗透测试？定义与边界](https://blocksec.com/zh/blog/what-is-blockchain-penetration-testing): 区块链渗透测试:通过对抗性验证发现运行系统中可被利用的攻击路径,区别于代码审计和漏洞赏金计划。 (Sep 3 2026)

[加密货币中的客户地址尽职调查：链上CDD详解](https://blocksec.com/zh/blog/what-is-customer-address-due-diligence-crypto): 加密货币中的客户地址尽职调查：地址级CDD与身份验证有何不同，涵盖哪些风险信号，以及为何需要持续监控。 (Jul 23 2026)

[什么是非法加密货币及其如何被标记：合规入门指南](https://blocksec.com/zh/blog/what-is-illicit-crypto): 非法加密货币是指与犯罪或受制裁实体相关的加密货币。了解其两大类别、三层标记机制，以及为何检测必须持续进行。 (Jul 27 2026)

[什么是最好的DeFi黑客检测与防御系统？](https://blocksec.com/zh/blog/what-is-the-best-de-fi-hack-detection-and-prevention-system): 探索DeFi协议中的漏洞、攻击类型及防御策略。 (May 31 2024)

[VARA 加密支付公司合规指南](https://blocksec.com/zh/blog/what-is-vara-and-why-does-it-matter-for-payment-companies): 迪拜加密支付企业VARA合规指南:牌照申请、反洗钱/KYC、制裁合规、网络安全、公司治理,助您构建可审计的合规体系。 (Mar 23 2026)

[MetaDock遇上GPT：洞悉交易，老司机也懂！](https://blocksec.com/zh/blog/when-meta-dock-met-gpt-see-through-every-transaction-like-an-og): MetaDock 是一款强大的浏览器插件，通过地址标签、资金流和交易分析等实用工具和解释，增强区块链探索能力。 (Apr 18 2024)

[当“SafeMint”不再安全：HypeBears安全事件的教训](https://blocksec.com/zh/blog/when-safe-mint-becomes-unsafe-lessons-from-the-hype-bears-security-incident): 理解ERC721合约中“SafeMint”函数的安全漏洞。 (Jan 12 2024)

[当“安全转账”不再安全：QBridge 安全事件的启示](https://blocksec.com/zh/blog/when-safe-transfer-becomes-unsafe-lessons-from-the-q-bridge-security-incident): QBridge黑客攻击分析：了解safeTransfer漏洞如何导致1月28日发生的8000万美元被盗事件，以及降低智能合约风险的关键修复措施。 (Jan 25 2024)

[从事件到监管：加密机构为何需要区块链渗透测试](https://blocksec.com/zh/blog/why-crypto-institutions-need-blockchain-penetration-testing): 加密机构区块链渗透测试:十大黑客事件中有7起发生在合约之外,NYDFS、DORA、VARA、SFC和MAS均要求或期望进行此类测试。 (Sep 4 2026)

[为什么我的USDT被冻结？4个原因及解决方法（2026）](https://blocksec.com/zh/blog/why-is-my-usdt-frozen): 您的USDT被冻结通常有4个原因:Tether黑名单、交易所暂扣、收款方黑名单或合规审查。2026年针对每种情况的直接解答及解决方法。 (Aug 4 2026)

[#5 Yearn Finance 事件：不变量求解器中的不安全算术运算“名副其实”](https://blocksec.com/zh/blog/yearn-finance-incident-unsafe-arithmetic-in-the-invariant-solver-earns-its-name): 深度解析Yearn yETH 900万美元漏洞事件：不安全的算术运算与启动缺陷。逐步模拟攻击过程、损失明细、根因重新分类及修复方案。 (Feb 11 2026)

[又一次精度损失的悲剧：KyberSwap事件深度分析](https://blocksec.com/zh/blog/yet-another-tragedy-of-precision-loss-an-in-depth-analysis-of-the-kyber-swap-incident-1): 本文深入剖析KyberSwap攻击事件，详细解析了导致问题的根本原因：精度损失。 (Dec 5 2023)

[Stellar上的YieldBlox DAO事件：预言机配置错误导致超1000万美元被盗](https://blocksec.com/zh/blog/yieldblox-dao-incident-on-stellar-oracle-misconfiguration-enabled-a-10m-drain): 深入分析YieldBlox DAO在Blend V2（Stellar）上的池被攻击事件，揭示UST/USDC价格操纵和预言机配置错误如何导致超1000万美元被盗。 (Feb 27 2026)

[zkLend 漏洞分析：揭秘 1000 万美元闪电贷攻击的细节与误解](https://blocksec.com/zh/blog/zklend-exploit-post-mortem-unraveling-the-details-and-clarifying-misunderstandings-of-the-10m-flash-loan-attack): 此博客对zkLend事件进行详细分析，以澄清误解。 (Feb 20 2025)

## 繁體中文博客 (Traditional Chinese blog posts)

[2025年USDT黑名單機制：以太坊與波場（Tron）共凍結12.6億美元](https://blocksec.com/zh-hant/blog/1-26-billion-frozen-usdt-blacklisting-on-ethereum-and-tron-in-2025): Tether 於2025年將4,163個USDT地址列入黑名單,凍結以太坊與波場上共12.6億美元資產。查看鏈上趨勢、潛在風險,以及如何保護您的錢包安全。 (Feb 2 2026)

[#10：ThirdWeb 事件：受信任模塊間的不兼容性導致漏洞暴露](https://blocksec.com/zh-hant/blog/10-third-web-incident-incompatibility-between-trusted-modules-exposes-vulnerability): 了解 ThirdWeb 信任模組的不相容性如何導致嚴重的安全漏洞。掌握關鍵洞見，即刻保護您的 Web3 專案安全。 (Feb 22 2024)

[1700 萬美元閉源智能合約漏洞：SwapNet 與 Aperture Finance 的任意調用漏洞](https://blocksec.com/zh-hant/blog/17m-closed-source-smart-contract-exploit-arbitrary-call-swapnet-aperture): 深入分析 SwapNet 與 Aperture Finance 因任意呼叫漏洞導致的 1,700 萬美元合約攻擊事件。我們透過反編譯位元組碼與鏈上軌跡，完整重建攻擊路徑。 (Jan 28 2026)

[#9 1inch 事件：從 Calldata 損壞到偽造結算：二進位漏洞利用在鏈上上演](https://blocksec.com/zh-hant/blog/1inch-incident-from-calldata-corruption-to-forged-settlement-binary-exploitation-goes-on-chain): 深入解析2025年3月1inch Fusion V1解析器漏洞事件：因calldata下溢與信任邊界缺陷，導致500萬美元損失，揭示DeFi底層ABI攻擊手法。 (Feb 11 2026)

[#5：Platypus Finance：三次攻擊中憑一絲運氣倖存](https://blocksec.com/zh-hant/blog/5-platypus-finance-surviving-three-attacks-with-a-stroke-of-luck): 我們展示了針對 Platypus Finance 的三次攻擊,以及 BlockSec 如何為該協議搶救 240 萬 USDC。 (Feb 22 2024)

[最佳加密貨幣合規軟體：6大精選比較（2026）](https://blocksec.com/zh-hant/blog/6-best-blockchain-and-crypto-compliance-software-solutions): 比較6大加密貨幣合規平台:Phalcon Compliance、Chainalysis、Elliptic、TRM Labs、AMLBot、Merkle Science。涵蓋定價、支援鏈及最適用場景。 (May 8 2026)

[#6：Hundred Finance 事件：催化易受攻擊分叉協議中精密漏洞利用的浪潮](https://blocksec.com/zh-hant/blog/6-hundred-finance-incident-catalyzing-the-wave-of-precision-related-exploits-in-vulnerable-forked-protocols): 2023年4月16日，Compound V2 的分叉項目 Hundred Finance 遭攻擊，損失約 740 萬美元。 (Feb 16 2024)

[#7：ParaSpace 事件：與時間賽跑，阻止業界最關鍵的一次攻擊](https://blocksec.com/zh-hant/blog/7-para-space-incident-a-race-against-time-to-thwart-the-industry-s-most-critical-attack-yet): 了解ParaSpace攻擊事件如何揭露區塊鏈的重大安全漏洞，並學習關鍵防範策略，即刻保護您的DeFi資產安全。 (May 25 2026)

[#8：SushiSwap 事件：拙劣的救援嘗試引發一系列模仿攻擊](https://blocksec.com/zh-hant/blog/8-sushi-swap-incident-a-clumsy-rescue-attempt-leads-to-a-series-of-copycat-attacks): 2023年4月9日，SushiSwap因未經驗證的外部參數遭攻擊，總損失約330萬美元。 (Feb 18 2024)

[#9：MEV Bot 0xd61492：從掠食者到獵物的一場巧妙攻擊](https://blocksec.com/zh-hant/blog/9-mev-bot-0xd61492-from-predator-to-prey-in-an-ingenious-exploit): 2023年8月3日，Arbitrum上一台MEV機器人遭攻擊，損失80萬美元。此次攻擊的根本原因是「使用者輸入驗證不足」。 (Feb 21 2024)

[與時間和策略的賽跑：關於 AnySwap 的救援行動與我們的經驗教訓](https://blocksec.com/zh-hant/blog/AnySwap-Rescue-Analysis-Lessons-from-a-DeFi-Security-Triumph): 探索 AnySwap 針對智能合約攻擊所進行的緊急救援行動，深入了解其關鍵洞察，並汲取 DeFi 安全的重要教訓。 (Mar 4 2024)

[超越市場風險：SushiSwap KashiPairMediumRiskV1 合約中發現的邏輯漏洞](https://blocksec.com/zh-hant/blog/a-logic-bug-identified-in-sushiswaps-kashi-pair-medium-risk-v1-contract-1): 深入剖析 SushiSwap 合約漏洞的影響：由於 KashiPairMediumRiskV1 合約存在邏輯漏洞，以太坊與 BSC 鏈上數十個流動性池面臨資產風險。 (Feb 4 2024)

[Wyvern協議中發現一種新的記憶體覆寫漏洞](https://blocksec.com/zh-hant/blog/a-new-memory-overwrite-vulnerability-discovered-in-wyvern-protocol): Wyvern Protocol 漏洞警報：潛在漏洞引發安全疑慮。 (Jan 29 2024)

[CVE-2021–39137 野外漏洞利用簡析](https://blocksec.com/zh-hant/blog/a-short-analysis-of-the-wild-exploitation-of-cve-2021-39137): 深入探討 CVE-2021-39137 漏洞的技術細節，以及其對以太坊區塊鏈造成的影響。 (Jan 29 2024)

[區塊鏈監管：從法律架構到執法實務](https://blocksec.com/zh-hant/blog/a-strategic-guide-to-blockchain-regulations-from-legal-frameworks-to-on-chain-enforcement): 加密貨幣的「蠻荒西部」時代已結束。深入了解 MiCA、美國法規與 FATF 如何形塑區塊鏈監管趨勢，以及 Phalcon Compliance 如何自動化篩查與報告流程，助您輕鬆應對合規挑戰。 (Mar 5 2026)

[AI 代理的加密合規性：使用 X402 構建 KYA/KYT](https://blocksec.com/zh-hant/blog/agent-native-crypto-compliance-build-kya-kyt-with-x402): 了解X402如何讓AI代理透過按次加密貨幣支付執行KYA/KYT合規檢查——無需API金鑰,無需訂閱。立即打造代理原生合規方案。 (May 25 2026)

[AI 交易安全：Web3 中的風險演變](https://blocksec.com/zh-hant/blog/ai-trading-security-the-evolution-of-risk-in-the-age-of-intelligent-trading): AI代理如何重塑Web3交易及其風險？BlockSec與Bitget探討自動化加密貨幣交易的全新安全範式。 (Jan 27 2026)

[什麼是加密貨幣交易所的反洗錢合規？五大虛擬資產服務提供商義務](https://blocksec.com/zh-hant/blog/aml-compliance-crypto-exchanges): 加密貨幣交易所的反洗錢合規涉及五項虛擬資產服務提供商義務：註冊與許可、客戶盡職調查、交易監控、可疑交易報告及記錄保存。了解此框架及鏈上監控的角色。 (Jul 29 2026)

[分析每秒10,000筆交易：Phalcon Explorer現已支援Monad](https://blocksec.com/zh-hant/blog/analyze-10-000-tps-phalcon-explorer-now-supports-monad): 使用 Phalcon Explorer 分析 Monad 每秒 10,000 筆交易的 EVM：偵錯平行執行、追蹤複雜 DeFi 互動，並監控智能合約資金流向。 (Dec 24 2025)

[作為有限合夥人（LP），如何在協議暫停前及時撤資](https://blocksec.com/zh-hant/blog/as-an-lp-how-to-withdraw-funds-timely-before-protocol-pauses): BlockSec 與 Cobo 合作開發了解決方案，協助流動性提供者（LP）在協議暫停與資金池凍結前，及時提取資產。 (Nov 14 2023)

[澳洲虛擬資產服務提供商監管框架：機構必須做好的準備](https://blocksec.com/zh-hant/blog/australia-vasp-compliance-framework): 隨著VASP框架正式生效,澳洲DCE時代宣告終結。了解最新反洗錢/反恐融資(AML/CTF)規定、關鍵截止日期,以及如何為VASP合規做好準備。 (Jun 29 2026)

[為什麼自動化事件響應對 Web3 安全至關重要？](https://blocksec.com/zh-hant/blog/automated-incident-response-crucial-web3-security): 了解為什麼自動化事件回應對於 Web3 安全至關重要。探索區塊鏈專案如何迅速緩解攻擊，並有效保護 DeFi 資產安全。 (Apr 21 2026)

[#3 Balancer V2 事件：捨入不一致導致不變量失效並在多鏈間傳播](https://blocksec.com/zh-hant/blog/balancer-v2-incident-a-rounding-inconsistency-breaks-the-invariant-and-propagates-across-chains): 2025年11月3日，Balancer V2遭遇漏洞攻擊：捨入計算不一致破壞了系統不變量，導致BPT代幣價格被低估，並影響多條區塊鏈；損失達1.25億美元，已追回4500萬美元。 (Feb 11 2026)

[2026年區塊鏈法律問題基礎](https://blocksec.com/zh-hant/blog/basics-of-blockchain-legal-issues-in-2026): 區塊鏈法律問題可能阻礙業務成長。了解如何即時識別洗錢防制(AML)、制裁及資金流動風險,並透過一鍵生成合規報告,快速掌握相關資訊。 (May 25 2026)

[智能合約安全最佳實踐：確保信任與信心](https://blocksec.com/zh-hant/blog/best-practices-for-smart-contract-security-ensuring-trust-and-confidence): 探索區塊鏈安全領導者 BlockSec 的最佳實踐與創新解決方案，協助您防範智能合約潛在駭客攻擊，並確保區塊鏈生態系統的信任安全。 (Apr 20 2024)

[Phalcon Explorer 1.0 交易模擬的 7 大關鍵功能是什麼](https://blocksec.com/zh-hant/blog/beyond-7-days-exploring-the-endless-possibilities-of-phalcon-beyond-7-days-exploring-the-endless-possibilities-of-phalcon): 我們在 Twitter 上啟動「Phalcon 7 天之旅」後，收到資深用戶與新追隨者熱烈的正面反饋與互動，對此我們深感振奮。 (May 31 2023)

[追蹤人口販運中的非法加密貨幣資金](https://blocksec.com/zh-hant/blog/block-sec-and-fbi-tracking-illicit-funds-from-human-trafficking): 了解加密貨幣「擔保平台」如何利用USDT託管助長人口販賣，以及BlockSec的Phalcon Compliance如何協助即時追蹤非法資金流向。 (Sep 23 2025)

[BlockSec 與 Tokenlon 達成戰略合作](https://blocksec.com/zh-hant/blog/block-sec-and-tokenlon-reached-strategy-partnership): BlockSec 與 Tokenlon 強強聯手，共同提升加密資產的安全性與風險管理能力。 (Mar 5 2024)

[BlockSec 完成 800 萬美元種子+輪融資](https://blocksec.com/zh-hant/blog/block-sec-closes-seed-plus-funding-round-with-8-m-raised): 區塊鏈安全公司 BlockSec 完成 800 萬美元融資，由維港投資（Vitalbridge）與經緯創投（Matrix Partners）領投，旨在強化去中心化應用程式的安全性。 (Apr 18 2024)

[BlockSec：利用模糊測試技術提升區塊鏈安全審計](https://blocksec.com/zh-hant/blog/block-sec-enhancing-blockchain-security-audits-with-fuzzing-techniques): 探索模糊測試（Fuzzing）在區塊鏈安全審計中的應用，了解 BlockSec 如何運用此技術主動識別並緩解智能合約及 EVM 鏈的漏洞，為區塊鏈系統提供全面且深度的安全評估。 (Apr 8 2024)

[BlockSec 完成種子輪融資](https://blocksec.com/zh-hant/blog/block-sec-has-closed-the-seed-funding-raising): BlockSec 完成種子輪融資，由分布式資本領投，A&T Capital、趣鏈科技、Impossible Finance、Incuba Alpha 及 NEAR MetaWeb Ventures 參投。 (Jun 5 2026)

[BlockSec 推出全球首個 Web3 安全加密駭客攔截系統：Phalcon](https://blocksec.com/zh-hant/blog/block-sec-launches-phalcon-block-the-world-s-first-crypto-hack-blocking-system-for-web3-security): BlockSec Phalcon 將徹底變革 Web3 領域的駭客防禦機制。 (Nov 15 2023)

[BlockSec 與 IOC 及 AЯMRD 達成合作，共同提升 Web 3.0 安全性](https://blocksec.com/zh-hant/blog/block-sec-partners-with-ioc-and-a-ya-mrd-to-enhance-web-3-0-security): BlockSec 與 Intelligence On Chain (IOC) 達成合作，共同推出「AЯMRD」套件，為瞬息萬變的區塊鏈生態系統中的 Web 3.0 專案提供強大的安全解決方案。 (Jan 17 2024)

[BlockSec 看 Jump「反向利用」：漏洞是否真的存在？](https://blocksec.com/zh-hant/blog/block-sec-s-perspective-on-the-jump-counter-exploit-does-the-vulnerability-really-exist): 本文詳細分析了 Jump counter 漏洞，解釋其運作步驟，並明確指出該漏洞與 Platypus 案例之間的根本差異。 (Apr 18 2024)

[BlockSec 九月商務差旅計畫](https://blocksec.com/zh-hant/blog/block-sec-september-business-travel-plans): BlockSec 公佈九月行程，將前往新加坡、柏林及上海參與多場活動與會議，分享 Web3 安全與易用性領域的專業知識。 (Apr 18 2024)

[BlockSec USDT 凍結追蹤器現已上線](https://blocksec.com/zh-hant/blog/block-sec-usdt-freeze-tracker-is-live): USDT凍結追蹤器:即時查詢Ethereum與Tron鏈上的凍結、解凍及銷毀狀態。可搜尋地址、追蹤事件記錄,並查閱治理提案。 (Feb 4 2026)

[開發者指南：整合區塊鏈合規API與基礎設施](https://blocksec.com/zh-hant/blog/blockchain-compliance-api-integration-developer-guide): 區塊鏈合規 API 整合開發者指南，涵蓋 KYT 設定、地址監控與風險應對邏輯。 (Jun 8 2026)

[Rules of Engagement and Production Safety for Institutional Blockchain Penetration Testing](https://blocksec.com/zh-hant/blog/blockchain-penetration-testing-rules-of-engagement): Rules of engagement for blockchain penetration testing: scope, authorization, operating limits, production safeguards, stop criteria, and remediation retest.

[區塊鏈監管合規：實用指南](https://blocksec.com/zh-hant/blog/blockchain-regulatory-compliance-making-it-practical-for-your-business): 難以應對區塊鏈監管合規？Phalcon Compliance 提供即時 KYT/KYA、全球法規涵蓋範圍，以及低於 100 毫秒的風險評分，助您的加密平台輕鬆維持合規。 (Feb 5 2026)

[誤報率最低的區塊鏈交易安全監控工具](https://blocksec.com/zh-hant/blog/blockchain-transaction-security-monitoring-tool-with-the-lowest-false-positive-rate): 本文探討駭客監控系統中低誤報率的重要性，並介紹以威脅監測準確性及防禦攻擊能力著稱的 Phalcon 平台。 (May 25 2026)

[攔截 HomeCoin 攻擊：業界首個成功防禦案例](https://blocksec.com/zh-hant/blog/blocked-home-coin-attack-the-industry-s-first-successful-blocking-story): 一起來了解 Web3 的顛覆性故事：業界首個成功抵禦駭客攻擊的案例。 (Dec 18 2023)

[阻斷 Paraspace 攻擊：業界最重要的攔截，成功挽救 500 萬美元](https://blocksec.com/zh-hant/blog/blocked-paraspace-attack-industry-s-most-important-block-that-rescued-5-000-000): 讓我們一起來看看業界最重要的一個區塊，它成功拯救了價值 500 萬美元的資產。 (Dec 22 2023)

[阻斷鴨嘴獸攻擊：業界首創針對駭客合約的反利用技術](https://blocksec.com/zh-hant/blog/blocked-platypus-attack-industry-s-first-counter-exploitation-of-a-hacker-s-contract): 讓我們一起來看看業界首個針對駭客合約的反向利用案例。 (Dec 21 2023)

[阻截Saddle Finance攻擊：業界首度透過強力攔截成功挽救380萬美元](https://blocksec.com/zh-hant/blog/blocked-saddle-finance-attack-industry-s-first-influential-blocking-to-rescue-3-800-000): 讓我們看看業界首個成功攔截並挽回 380 萬美元損失的影響力案例。 (Dec 19 2023)

[阻斷 TransitSwap 攻擊：業界首創「反向駭客」成功挽回 30 萬美元](https://blocksec.com/zh-hant/blog/blocked-transit-swap-attack-industry-s-first-hacking-back-to-rescue-300-000): 帶您解析業界首宗「反駭」行動，成功追回 30 萬美元資金的始末。 (Dec 20 2023)

[BlockSec 與 Blockscout 攜手合作，提升交易分析能力](https://blocksec.com/zh-hant/blog/blocksec-blockscout-metasuites-phalcon-partnership): 我們非常高興地宣布，我們已與 Blockscout 達成合作夥伴關係！🎉 (Mar 26 2024)

[BlockSec 完成 Neo X 安全審計](https://blocksec.com/zh-hant/blog/blocksec-neo-x-audit-collaboration): BlockSec 已完成 Neo X 的安全審計。Neo X 是 Neo 旗下兼容 EVM 並具備抗 MEV 能力的側鏈。 (Aug 1 2024)

[BlockSec 對於 Layer 2 區塊鏈安全性的觀點與解決方案](https://blocksec.com/zh-hant/blog/blocksec-perspectives-and-solutions-on-the-security-of-l2-blockchains): 我們首先將系統性地回顧 L2 區塊鏈所面臨的安全挑戰，隨後提出我們的解決方案。 (Feb 1 2024)

[Phalcon Security 2.0 全新升級:駭客防禦新時代](https://blocksec.com/zh-hant/blog/blocksec-phalcon-2-0-unleashed-new-era-hack): 探索 Phalcon Security 2.0,BlockSec 打造的即時加密貨幣駭客防範平台,提供內存池監控與攻擊阻擋功能。立即保護您的協議安全! (May 25 2026)

[BlockSec Phalcon Explorer：賦能 EVM 鏈的 TVL 增長](https://blocksec.com/zh-hant/blog/blocksec-phalcon-explorer-empowering-tvl-growth-evm-chain): 了解 Phalcon Explorer 如何推動 EVM 鏈上的 TVL 增長。立即透過 BlockSec 探索 DeFi 分析數據，提升您的區塊鏈洞察力。 (Aug 24 2023)

[Phalcon Security 即時保障 Yei Finance 超過1.4億美元資產安全](https://blocksec.com/zh-hant/blog/blocksec-phalcon-safeguards-yei-finance-140m-assets-in-real-time): Yei Finance是Sei上最大的貨幣市場，透過Phalcon Security以24/7即時監控及毫秒級攻擊阻擋，守護超過1.4億美元的TVL。 (Feb 12 2025)

[Phalcon Security 強化即時防護，確保 Solana 生態系統安全](https://blocksec.com/zh-hant/blog/blocksec-phalcon-supports-solana): 使用 Phalcon Security 的即時威脅偵測與主動防護措施，強化 Solana 安全性。立即透過 BlockSec 保護您的區塊鏈協議。 (Nov 13 2025)

[2025年加密貨幣犯罪報告：關鍵趨勢與鏈上數據](https://blocksec.com/zh-hant/blog/blocksec-releases-the-2025-crypto-crime-report): 探索BlockSec《2025年加密貨幣犯罪報告》：以太坊與波場趨勢、1000億美元制裁激增、Lazarus集團15億美元攻擊事件、穩定幣執法動態。立即下載。 (Feb 27 2026)

[BlockSec 回顧：2023 年 DeFi 協議安全性分析](https://blocksec.com/zh-hant/blog/blocksec-retrospective-on-defi-protocol-security-in-2023): 2023年DeFi協議安全性新趨勢，以及BlockSec對於如何強化DeFi協議安全的觀點。 (May 27 2026)

[BlockSec 支持 BTC 生態系統！](https://blocksec.com/zh-hant/blog/blocksec-supports-btc-ecosystem): 了解 BlockSec 如何透過先進的區塊鏈解決方案提升比特幣生態系統安全性。立即使用我們的專業 Web3 工具,保護您的 BTC 專案。 (Aug 7 2024)

[BonqDAO 於 Polygon 遭駭：邏輯漏洞導致 1.2 億美元被盜](https://blocksec.com/zh-hant/blog/bonq-dao-exploited-on-polygon-120-m-stolen-due-to-flawed-logic): Polygon 上的 BonqDAO 因邏輯漏洞遭駭，損失高達 1.2 億美元，此事件凸顯了 DeFi 安全性的重要性。 (May 25 2026)

[BTC跨鏈監控與Chainlink儲備證明(PoR)API:為BTCFi安全樹立新標準](https://blocksec.com/zh-hant/blog/btc-cross-chain-monitoring-por): 透過 BlockSec 的解決方案強化 BTCFi 安全性。了解 BTC 包裝資產的風險，如脫錨與跨鏈漏洞，以及 Chainlink PoR 如何 (Jan 10 2025)

[構建安全的穩定幣支付網絡：BlockSec 與 Morph 達成合作](https://blocksec.com/zh-hant/blog/building-a-secure-stablecoin-payment-network-blocksec-partners-with-morph): BlockSec加入Morph，透過1.5億美元的Morph支付加速器計畫，為全球穩定幣支付提供機構級的審計、滲透測試與安全防護。 (Mar 18 2026)

[#8 Bunni 事件：多次小額提款導致捨入誤差累計，致使 840 萬美元資金流失](https://blocksec.com/zh-hant/blog/bunni-incident-repeated-small-withdrawals-compound-a-rounding-error-into-an-8.4m-drain): 2025年9月2日,Bunni V2因閒置餘額捨入漏洞遭利用,USDC/USDT與weETH/ETH資金池損失約840萬美元;該協議已於10月23日宣布破產。 (Feb 11 2026)

[Bybit 15億美元駭客事件：惡意 Safe 錢包升級攻擊深度解析](https://blocksec.com/zh-hant/blog/bybit-1-5-b-hack-in-depth-analysis-of-the-malicious-safe-wallet-upgrade-attack): 本部落格詳盡剖析攻擊流程，提供數位資產保護的關鍵安全指南。深入學習強化區塊鏈安全的有效策略，預防同類攻擊再次發生。 (May 25 2026)

[#2 Bybit 事件：Web2 漏洞引發史上最大規模加密貨幣駭客攻擊](https://blocksec.com/zh-hant/blog/bybit-incident-a-web2-breach-enables-the-largest-crypto-hack-in-history): 2025年2月21日，Bybit因Safe{Wallet}的S3程式碼被植入惡意代碼，攻擊者藉此替換Safe多重簽名代理合約的masterCopy，進而盜走約15億美元資產。 (Feb 9 2026)

[Cetus 事件：一次未經檢查的移位導致 2.23 億美元流失，成為 2025 年最大 DeFi 駭客攻擊](https://blocksec.com/zh-hant/blog/cetus-incident-one-unchecked-shift-drains-223m-largest): 2025年5月22日，Sui鏈上的Cetus Protocol遭到攻擊，因u256位移檢查存在缺陷，攻擊者藉此偽造虛假流動性，導致多個資金池被掏空，損失約2.23億美元。 (Feb 9 2026)

[區塊鏈合規平台：2026年中心化交易所（CEX）基礎設施要求](https://blocksec.com/zh-hant/blog/cex-blockchain-compliance-platform-2026): 2026年中心化交易所（CEX）區塊鏈合規指南，涵蓋即時交易監控（KYT）、多鏈資金溯源、案件管理、政策自動化，以及用於識別制裁名單與駭客關聯資金的API整合方案。 (Jun 8 2026)

[COLDCARD事件：當錢包的「隨機」助記詞並不隨機](https://blocksec.com/zh-hant/blog/coldcard-entropy-failure-seed-recovery): 一個編譯旗標的錯誤，讓 COLDCARD 的種子熵值多年來存在缺陷。本文解析其運作原理、超過9,100萬美元的已證實損失，以及為何修補程式本身也需要再次修正。 (Aug 7 2026)

[Popsicle Finance 攻擊事件的模仿者](https://blocksec.com/zh-hant/blog/copycats-of-the-popsicle-finance-attack): 本文列出了呼叫 SorbettoFragola 合約「collectFees(0,0)」函式的交易清單，並包含對應的時間戳記與交易雜湊值。 (Apr 18 2024)

[#6 軟木塞協議事件：兩個獨立漏洞組合成毀滅性的攻擊鏈](https://blocksec.com/zh-hant/blog/cork-protocol-incident-two-independent-flaws-combine-into-one-devastating-exploit-chain): Cork Protocol在以太坊上遭駭，因HIYA代幣遭操控及Uniswap v4 hook缺乏存取控制，損失高達1,200萬美元；儲備中的CT/DS代幣被抽乾。 (Feb 11 2026)

[什麼是加密貨幣地址風險篩查：四步驟機制解析](https://blocksec.com/zh-hant/blog/crypto-address-risk-screening): 加密地址風險篩查透過單次分析，評估錢包地址的洗錢防制（AML）與反資恐（CFT）風險。了解構成篩查結果的四步機制、六個風險等級，以及十七項風險指標。 (Jul 29 2026)

[加密支付的鏈上合規：反洗錢／打擊資恐、凍結風險與七點檢查清單](https://blocksec.com/zh-hant/blog/crypto-aml-cft-kyt-kya): 加密支付鏈上反洗錢/反資恐：KYA、KYT與SAR/STR如何補足Travel Rule的缺口，並解析穩定幣凍結風險與7項檢查清單。 (Aug 5 2026)

[如何評估加密貨幣合規平台:反洗錢(AML)檢查清單](https://blocksec.com/zh-hant/blog/crypto-aml-checklist): 加密貨幣合規平台專用AML檢查清單，涵蓋錢包篩查、交易監控及交易所與託管機構的供應商評選標準。 (Jun 8 2026)

[加密貨幣ATM面臨監管壓力：FinCEN與AUSTRAC強化反洗錢規則](https://blocksec.com/zh-hant/blog/crypto-atms-under-global-scrutiny-fincen-austrac-tighten): 全球加密貨幣ATM面臨監管打擊。了解FinCEN與AUSTRAC如何針對詐騙與洗錢風險採取行動，以及這對Web3合規性意味著什麼。 (Oct 17 2025)

[加密貨幣合規基礎設施：自建與採購的投資回報率分析](https://blocksec.com/zh-hant/blog/crypto-compliance-infrastructure-buy-vs-build-roi): 加密貨幣反洗錢基礎設施「購買」與「自建」投資回報率分析，涵蓋隱藏成本、誤報率及擴充性等考量因素。 (Jun 8 2026)

[加密貨幣合規軟體：AML 分析師的日常工作流程](https://blocksec.com/zh-hant/blog/crypto-compliance-software-aml-analyst-workflows): 加密貨幣合規每日反洗錢(AML)工作流程指南。涵蓋警示分級處理、KYT交易追蹤、混幣器偵測及可疑活動報告(SAR)申報等內容。 (Jun 8 2026)

[最佳加密貨幣合規軟體：虛擬資產服務提供商的KYT與AML工具](https://blocksec.com/zh-hant/blog/crypto-compliance-software-guide): 面臨FATF或MiCA罰則風險?比較適用於VASP的加密貨幣合規軟體:KYA篩查、KYT監控、跨鏈追蹤,以及一鍵生成STR/SAR報告。 (May 28 2026)

[加密合規工具：Web3 與傳統金融整合實務指南](https://blocksec.com/zh-hant/blog/crypto-compliance-tools-web3-tradfi-guide): 人工審核跟不上鏈上交易量。了解Web3與傳統金融團隊如何部署KYA、KYT、AML評分及STR工具,以規模化方式維持合規。 (May 28 2026)

[區塊鏈合規平台：托管機構技術長的整合檢查清單](https://blocksec.com/zh-hant/blog/crypto-custodian-compliance-platform-integration): 針對託管機構技術長評估區塊鏈合規平台之檢查清單，涵蓋API延遲、錢包篩查、反洗錢引擎及分階段部署等重點內容。 (Jun 8 2026)

[加密貨幣交易所合規：即時 AML/CFT 監控](https://blocksec.com/zh-hant/blog/crypto-exchange-compliance-with-emphasis-on-real-time-aml-cft-control-in-2026): 您的加密貨幣交易所真正合規嗎？了解即時篩查、實時監控與一鍵式STR/SAR報告如何幫助填補反洗錢/反恐融資（AML/CFT）合規缺口。 (Feb 13 2026)

[加密貨幣支付系統架構：六大層級與資金流動方式](https://blocksec.com/zh-hant/blog/crypto-payment-architecture): 加密貨幣支付架構分為六層，從區塊鏈結算到託管與法幣兌換通道——說明各層功能，並解析收款與付款的完整流程。 (Aug 5 2026)

[最大的加密貨幣支付駭客攻擊事件及其背後的攻擊面](https://blocksec.com/zh-hant/blog/crypto-payment-hacks-attack-surface): Bybit損失15億美元、UPCX損失7000萬美元、MoonPay損失25萬美元:供應鏈攻擊、管理員金鑰外洩與釣魚攻擊如何衝擊加密貨幣支付——以及合約必須強制執行的防護措施。 (Aug 5 2026)

[加密支付的金鑰管理與操作安全](https://blocksec.com/zh-hant/blog/crypto-payment-key-management): 加密貨幣支付金鑰管理：MPC 對比多重簽名、HSM 對比 TEE、熱錢包對比冷錢包，另涵蓋盲簽、簽署隔離、DNS、身分驗證及 AI 代理風險。 (Aug 5 2026)

[全球加密支付牌照地圖：MSB、MiCA、MPI](https://blocksec.com/zh-hant/blog/crypto-payment-license-map): 依司法管轄區了解您需要的加密貨幣支付牌照：美國MSB/MTL、歐盟MiCA CASP、新加坡MPI、香港MSO、英國及阿聯酋——並附8項共同要求。 (Aug 5 2026)

[加密支付安全與合規:上線前應確認的控管措施](https://blocksec.com/zh-hant/blog/crypto-payment-security-compliance-checklist): 上線前必看!加密貨幣支付營運商應確認的資安與合規控管重點,涵蓋錢包、多因素驗證(MFA)、洗錢防制(AML/CFT)及監控檢查清單。 (Jul 3 2026)

[#4：曲線事件：編譯器錯誤導致無害原始碼生成錯誤字節碼](https://blocksec.com/zh-hant/blog/curve-incident-compiler-error-produces-faulty-bytecode-from-innocent-source-code): 曲線事件：編譯器錯誤導致無害原始碼產生錯誤字節碼 (Feb 14 2024)

[DeFi 與穩定幣安全：BlockSec 執行長周亞金教授](https://blocksec.com/zh-hant/blog/de-fi-and-stablecoin-security-a-discussion-with-dr-andy-zhou-ceo-of-bloc-sec): BlockSec創辦人兼執行長周昕（Andy Zhou）博士探討DeFi安全、穩定幣合規，以及即時監控如何保護協議免受鏈上威脅。來自Chaintech的重要見解。 (Nov 19 2025)

[DeFi 的 KYC 與 AML：平衡合規性與去中心化](https://blocksec.com/zh-hant/blog/de-fi-kyc-and-de-fi-aml-balancing-compliance-and-decentralization): DeFi的KYC與AML不必扼殺去中心化。了解以風險為基礎的鏈上KYT如何讓協議在不設門檻的情況下保持合規。 (Feb 2 2026)

[DeFi 風險緩釋指南 01：識別 DeFi 用戶面臨的風險類型](https://blocksec.com/zh-hant/blog/de-fi-risk-mitigation-guide-01-identifying-types-of-risks-de-fi-users-face-1): 此部分旨在透過真實案例提升 DeFi 用戶的安全意識，協助用戶保護其私鑰與錢包資產。 (Jul 5 2024)

[DeFi 風險緩釋指南 02：DeFi 用戶如何評估風險](https://blocksec.com/zh-hant/blog/de-fi-risk-mitigation-guide-02-how-de-fi-users-can-assess-risks): 本部分旨在強調閱讀審計報告、研究項目團隊、分析流動性及代幣經濟模型等的重要性，以有效評估 DeFi 項目的風險。 (Jul 5 2024)

[DeFi 風險緩解指南 03：DeFi 用戶安全須知](https://blocksec.com/zh-hant/blog/de-fi-risk-mitigation-guide-03-safety-tips-for-de-fi-users): 本節介紹加密貨幣去中心化金融（DeFi）用戶的安全指南，協助您提升資產保護意識，確保參與 DeFi 交易時的安全。 (Jul 5 2024)

[DeFi 風險緩釋指南 04：DeFi 專案團隊的安全實踐](https://blocksec.com/zh-hant/blog/de-fi-risk-mitigation-guide-04-security-practices-for-de-fi-project-team-1): 本章節旨在協助 DeFi 專案團隊進行全面審計、採用多重簽名錢包、建立漏洞賞金計畫，並與社群保持透明溝通，以確保平台安全。 (Jul 5 2024)

[DeFi Safety：鏈上金融的即時風險情報](https://blocksec.com/zh-hant/blog/de-fi-safety-build-real-time-risk-intelligence-for-on-chain-finance): DeFi發展迅速，風險也隨之增加。了解Phalcon Compliance如何提供即時反洗錢/反恐融資監控、深度風險分析及執行前保護，助您安全擴展業務。 (Feb 10 2026)

[深入剖析 HIP-3：以開發者為中心的視角](https://blocksec.com/zh-hant/blog/deep-dive-into-hip-3-a-builder-centric-perspective): Hyperliquid 改進提案 3 (HIP-3) 引入了市場創建機制的根本變革，將上架流程由平台主導轉向協議級別的規則化介面。本報告從開發者視角深入分析 HIP-3，探討市場定價與運作模式，並評估開發者面臨的風險，特別是如何緩解預言機相關的安全挑戰。 (Jan 18 2026)

[2026年DeFi合規性:協議韌性的技術框架](https://blocksec.com/zh-hant/blog/defi-compliance-in-2026-a-technical-framework-for-protocol-resilience): 2026年DeFi合規指南:打造「合規優先」框架,滿足AML/KYC要求,吸引機構資金進場,強化安全防護,並有效避免遭監管機構勒令關閉。 (Mar 11 2026)

[DeFi 合規平台需求：構建鏈上風險管理堆疊](https://blocksec.com/zh-hant/blog/defi-compliance-platform-on-chain-risk): DeFi鏈上合規指南，涵蓋KYT交易監控、跨鏈追蹤、風險評分、案件管理，以及智能合約風險敞口的可疑活動報告（SAR）流程。 (Jun 8 2026)

[DeFi 攻擊分析：Euler 損失 2 億美元的根本原因](https://blocksec.com/zh-hant/blog/defi-exploit-analysis-root-cause-euler-s-200m): 探索Euler Finance遭利用攻擊,導致DeFi損失達2億美元的事件。深入了解根本原因、攻擊手法,並學習如何保護您的區塊鏈資產。 (Jan 5 2024)

[通訊報 - 2026年7月](https://blocksec.com/zh-hant/blog/defi-security-incidents-afx-trade-ostium): 2026年7月三大DeFi事件：損失約6790萬美元。AFX Trade供應鏈攻擊（約2415萬美元）；Ostium價格預言機遭入侵（約2375萬美元）；BonkDAO治理機制資金被盜（約2000萬美元）。 (Jul 31 2026)

[Newsletter - 2026年8月](https://blocksec.com/zh-hant/blog/defi-security-incidents-cosmos-evm-moonwell): Cosmos EVM 餘額同步漏洞遭利用，波及六條鏈（約1,480萬美元）。Moonwell MAMO 預言機遭操縱（約910萬美元）。Term Finance 治理權遭奪取（約847萬美元）。 (Sep 2 2026)

[通訊 - 2026年5月](https://blocksec.com/zh-hant/blog/defi-security-incidents-echo-protocol-stablr-more): 2026年5月,DeFi領域約損失1.01億美元。Echo Protocol因金鑰洩露損失7,670萬美元,StablR因未經授權鑄幣損失1,280萬美元,Verus Bridge因型別驗證漏洞損失1,170萬美元。 (Jun 3 2026)

[DeFi 安全格局:你需要了解的50個關鍵參與者](https://blocksec.com/zh-hant/blog/defi-security-landscape): 探索50家塑造DeFi安全領域的關鍵企業——涵蓋智能合約審計、攻擊偵測、駭客攔截與資金追蹤。您的完整指南。 (Aug 30 2024)

[定義洗錢：美國法典第18編第1956條下的法律定義](https://blocksec.com/zh-hant/blog/define-money-laundering): 根據18 U.S.C. §1956，洗錢罪是指明知涉及特定非法活動所得財物，仍故意進行金融交易，意圖隱匿資金來源、促進犯罪活動或規避申報義務。了解洗錢罪的三種類型及四項構成要件。 (Jul 27 2026)

[Puffer Protocol：為何存取控制機制至關重要及其安全性提升之道](https://blocksec.com/zh-hant/blog/demystify-the-access-control-mechanism-in-puffer-protocol): 我們審查了 Puffer 協議中存取控制機制的整體架構及其當前配置。 (Feb 8 2024)

[小額存款，獲益更多：yCREDIT 攻擊詳情](https://blocksec.com/zh-hant/blog/deposit-less-get-more-y-credit-attack-details): 解析 yCREDIT 漏洞：攻擊者如何濫發代幣牟利——深入探討導致 yCREDIT 代幣餘額失衡的漏洞成因。 (Jan 29 2024)

[凍結黑名單資金銷毀與重新發行機制解析（2026）](https://blocksec.com/zh-hant/blog/destroyblackfunds-tether-mechanic-explained): Tether透過destroyBlackFunds銷毀被凍結地址中的USDT，但該價值通常以新鑄造的替代代幣形式回到受害者手中。程式碼、案例與追回政策解析。 (Jul 27 2026)

[打擊加密貨幣犯罪:美國司法部查扣價值150億美元比特幣](https://blocksec.com/zh-hant/blog/doj-seizes-15b-bitcoin-in-global-crypto-crime-crackdown): 美國司法部查扣價值150億美元的比特幣，與「殺豬盤」詐騙相關。了解Prince Group與Huione網絡如何被揭露，以及如何檢測您的錢包安全性。 (Oct 15 2025)

[Drift Protocol 事件：利用持久隨機數（Durable Nonce）漏洞進行的多重簽名治理攻擊](https://blocksec.com/zh-hant/blog/drift-protocol-incident-multisig-governance-compromise-via-durable-nonce-exploitation): 2026年4月1日，Drift Protocol遭駭損失2.853億美元。攻擊者利用Solana持久隨機數(durable nonce)機制延遲多簽核准，奪取管理權限並繞過時間鎖。隨後透過惡意抵押市場惡意拉抬資產，在12分鐘內迅速提走USDC、JLP、SOL等資產。此案凸顯依賴延遲執行的多簽機制存在嚴重安全隱憂。 (Apr 3 2026)

[電子報 - 2026年6月](https://blocksec.com/zh-hant/blog/efi-security-incidents-jaredfromsubway-aztec): 6月三大安全事件共損失約2200萬美元。JaredFromSubway MEV蜜罐攻擊(約1500萬美元)、Aztec rollup漏洞攻擊(約435萬美元)、SecondFi Ed25519金鑰洩露事件(約240萬美元)。 (Jul 3 2026)

[Symbiotic 能否在再質押領域挑戰 EigenLayer？](https://blocksec.com/zh-hant/blog/eigenlayer-competitor-symbiotic): 探索 Symbiotic 如何在再質押領域與 EigenLayer 競爭。了解兩者的關鍵差異與特色，看看誰在 2024 年的區塊鏈再質押平台中領先。立即閱讀！ (Jul 11 2024)

[什麼是加密貨幣地址的增強盡職調查（EDD）：觸發因素、流程與所需文件](https://blocksec.com/zh-hant/blog/enhanced-due-diligence-crypto-addresses): 強化盡職調查（EDD）是虛擬資產服務提供者（VASP）針對高風險加密貨幣地址所執行的加強版反洗錢（AML）審查。了解EDD的定義、觸發原因、所需文件清單，以及鏈上風險證據在其中的作用。 (Jul 27 2026)

[強化區塊鏈安全：智能合約審計師的角色](https://blocksec.com/zh-hant/blog/enhancing-blockchain-security-the-role-of-smart-contract-auditors): 探索智能合約審計員在區塊鏈安全中的關鍵角色，為 DeFi 和 NFT 平台築起防線，防範漏洞與財務損失。 (Feb 5 2024)

[增強 EVM 兼容鏈的安全與信任：BlockSec 2024 年度審計報告洞察](https://blocksec.com/zh-hant/blog/enhancing-security-and-trust-in-evm-compatible-chains-insights-from-block-sec-s-2024-audits): 深入了解 BlockSec 2024 年審計報告，掌握提升 EVM 兼容鏈安全與信任的關鍵洞察。內容涵蓋主動式防禦措施、專業技術見解及各類先進的資安對策，協助您全面強化區塊鏈生態系統的安全性。 (Apr 15 2024)

[強化 Web3 安全性：2024 年五大安全監控平台深度解析](https://blocksec.com/zh-hant/blog/enhancing-web3-security-exploring-the-top-5-security-monitoring-platforms-in-2024): 探索區塊鏈 5 大安全監控平台，體驗 BlockSec Phalcon 的優勢。透過早期攻擊檢測與自定義規則功能，Phalcon 能高效守護您的 Web3 應用程式。 (May 14 2024)

[稳定币解析：Ethena是升级版的Luna吗？](https://blocksec.com/zh-hant/blog/ethena-upgraded-luna-walk-stablecoins): 探索穩定幣及其安全風險，了解Ethena的USDe如何提供全新解決方案，深入認識穩定幣運作機制與防護策略。 (Jul 26 2024)

[#2：Euler Finance事件：2023年最大規模的駭客攻擊](https://blocksec.com/zh-hant/blog/euler-finance-incident-the-largest-hack-of-2023): 歐拉金融事件：2023年最大規模駭客攻擊 (Feb 8 2024)

[EigenLayer 再質押:安全風險及應對方法](https://blocksec.com/zh-hant/blog/examining-eigenlayer-restaking-security-perspective): EigenLayer 的再質押模型已達 153 億美元 TVL，但也帶來惡意操作者、AVS 漏洞等新型安全風險。了解相關威脅與防範之道。 (Apr 24 2026)

[探索 ERC20 無限授權代幣中便利性與安全性的權衡](https://blocksec.com/zh-hant/blog/exploring-the-tradeoff-between-convenience-and-security-in-unlimited-approval-erc-20-tokens): 探索 ERC20 代幣無限授權的機制，了解其在區塊鏈生態中，於易用性與安全性之間取得的微妙平衡及其帶來的深遠影響。 (Feb 5 2024)

[Web3 更易遭受駭客攻擊的因素及我們的緩解策略](https://blocksec.com/zh-hant/blog/factors-making-web3-more-vulnerable-to-hacks-and-our-mitigation-strategies): 在區塊鏈駭客攻擊與資本剝削頻繁發生的當今世界，我們不禁要問：我們能有效防止這些安全漏洞嗎？ (Aug 30 2023)

[Ryan Wedding加密犯罪網絡：BlockSec鏈上分析](https://blocksec.com/zh-hant/blog/fall-olympian-blocksec-tracks-ryan-wedding-crypto-crime): BlockSec追蹤前奧運選手Ryan Wedding涉毒品集團洗錢超2億美元USDT的資金流向。查看我們針對此受制裁加密貨幣犯罪網絡的鏈上分析。 (Feb 3 2026)

[FATF 穩定幣報告：轉向二級市場合規](https://blocksec.com/zh-hant/blog/fatf-s-new-stablecoin-report-signals-a-shift-to-secondary-market-compliance): FATF於2026年3月發布的報告針對非託管錢包所涉及的P2P穩定幣風險提出因應對策。了解關鍵的AML/CFT建議事項，以及鏈上監控工具如何協助您維持合規。 (Mar 27 2026)

[Plouto Vault 閃電貸攻擊](https://blocksec.com/zh-hant/blog/flash-loan-attack-on-plouto-vault): BlockSec 團隊分析了針對 Plouto Vault 的惡意攻擊，攻擊者利用閃電貸操縱流動性，獲利約 698,775.32 美元。 (Apr 18 2024)

[凍結之後：USDT 黑名單機制及其與恐怖主義融資關聯的鏈上分析](https://blocksec.com/zh-hant/blog/following-the-frozen-an-on-chain-analysis-of-usdt-blacklisting-and-its-links-to-terrorist-financing): 本報告分析了 USDT 黑名單模式及其與恐怖主義融資的關聯，揭示了洗錢循環、跨鏈資金流動以及執法延遲等問題。 (Jul 11 2025)

[穩定幣監管碎片化：金融穩定委員會（FSB）2025年評估](https://blocksec.com/zh-hant/blog/fsb-2025-assessment-stablecoin-regulatory-fragmentation-intensifies-arbitrage-risks): 金融穩定委員會（FSB）2025年審查報告揭露全球穩定幣監管存在的重大缺口。了解監管碎片化如何助長監管套利，以及這對加密貨幣合規性的影響。 (Oct 30 2025)

[有趣的咖啡騙局：追蹤TRON上一場278%的龐氏騙局](https://blocksec.com/zh-hant/blog/fun-coffee-scam-tron-usdt-tracing): Fun Coffee曾承諾年化278%回報，隨後突然消失。我們追蹤了99個TRON地址中的7,280萬USDT資金，區分出投資者返款與被轉移的資金。 (Aug 28 2026)

[如何使用Phalcon Explorer 2.0掌握DeFi交易分析](https://blocksec.com/zh-hant/blog/getting-started-with-phalcon-2-0-2): Phalcon 2.0 協助您分析 DeFi 交易，提供資金流向、呼叫流程、程式碼檢視及模擬功能，支援跨 5 條鏈的交易分析。 (Jan 5 2023)

[GMX 安全事件 #4：跨合約重入攻擊繞過四年前的防禦機制](https://blocksec.com/zh-hant/blog/gmx-incident-cross-contract-reentrancy-bypasses-a-four-year-old-guard): GMX V1 Arbitrum漏洞事件（2025年7月9日）：跨合約重入攻擊扭曲全球空頭倉位，抬高GLP價格，導致4200萬美元資金被盜，後續攻擊者退還10%作為賞金。 (Feb 11 2026)

[透過利用 Flashbots Relay 漏洞捕獲 MEV 機器人](https://blocksec.com/zh-hant/blog/harvesting-mev-bots-by-exploiting-vulnerabilities-in-flashbots-relay): MEV機器人因Flashbots中繼漏洞遭到攻擊，此事件被列為2023年十大「Awesome」安全事件之首。 (Dec 15 2025)

[HKDAP穩定幣安全審查:已上線、已持牌,但尚未準備就緒](https://blocksec.com/zh-hant/blog/hkdap-stablecoin-security-review): 深度評測香港首個受監管穩定幣HKDAP：KYC無法撤銷、單一私鑰即可鑄造/銷毀/凍結資產，且與金管局規定存在矛盾。內含鏈上數據分析。 (Aug 14 2026)

[L2 區塊鏈如何更好地保護用戶](https://blocksec.com/zh-hant/blog/how-L2-blockchains-can-do-better-to-protect-their-users): Layer 2 (L2) 鏈可透過多項措施，強化頂級協議的安全性，並保護鏈上用戶資產。 (Mar 27 2024)

[Solana 網路重大漏洞的發現與即時修復過程](https://blocksec.com/zh-hant/blog/how-a-critical-bug-in-solana-network-was-detected-and-timely-patched): Solana 漏洞：受 rBPF 錯誤影響的合約執行路徑 (Jan 15 2024)

[Coin98 如何悄悄修復漏洞](https://blocksec.com/zh-hant/blog/how-a-vulnerability-is-silently-fixed-by-coin98): 本文報導了幣安智能鏈（BSC）上 Coin98 智能合約近期遭受的攻擊事件，以及項目方為修復該漏洞所採取的應對措施。 (Apr 20 2024)

[Akutar NFT 如何損失 3,400 萬美元](https://blocksec.com/zh-hant/blog/how-akutar-nft-loses-34-m-usd): 揭露 @AkuDreams 合約中的嚴重邏輯漏洞，該漏洞可能導致阻斷服務（DoS）攻擊，並造成專案資金永久鎖定。 (Jan 20 2024)

[BlockSec 如何追回被盜的 DeFi 資金：3 個案例研究](https://blocksec.com/zh-hant/blog/how-blocksec-rescued-stolen-funds-from-technical-perspectives-of-three-representative-cases): 了解 BlockSec 如何運用純技術手段追回數百萬美元被盜的 DeFi 資金，包括 Platypus Finance、TransitSwap 及 Saddle Finance 等救援案例。 (Mar 4 2024)

[Phalcon Security 如何運用搶跑交易技術防範 DeFi 攻擊](https://blocksec.com/zh-hant/blog/how-can-block-sec-phalcon-prevent-hacker-attacks-on-de-fi-protocols-by-using-front-running-techniques): Phalcon Security 如何將搶跑交易從攻擊手段轉變為防禦機制：在惡意交易於記憶體池（mempool）中出現時即予以偵測，並在其執行前將其攔截阻擋。 (Apr 29 2024)

[KYA（了解您的地址）如何在DeFi協議中運作？](https://blocksec.com/zh-hant/blog/how-does-kya-work-for-defi-protocols): Phalcon Compliance 的 KYA 功能可即時篩查 DeFi 協議的錢包地址，有效阻擋受制裁及駭客關聯資金，同時不影響 DeFi 使用體驗。 (Jul 21 2026)

[加密貨幣中的AML地址篩查需要多長時間？](https://blocksec.com/zh-hant/blog/how-long-does-aml-address-screening-take): 加密貨幣AML地址篩查所需時間:人工審查(數分鐘至數小時)與自動化API篩查(數毫秒)比較,單次篩查的內部運作流程,以及邊緣案例如何拖慢篩查速度。 (Jul 24 2026)

[阻斷戰利品攻擊：Phalcon 如何拯救 120 萬美元免受惡意提案侵害](https://blocksec.com/zh-hant/blog/how-phlacon-block-helped-loot-block-1-m-usd-hack): Phalcon 如何為 Loot 節省超過 100 萬美元的完整過程詳解。 (Jan 11 2024)

[Mirror Protocol 如何被攻擊](https://blocksec.com/zh-hant/blog/how-the-mirror-protocol-got-exploited): 揭秘攻擊者如何透過操縱 mETH 與 USTC 價格漏洞，對 Mirror Protocol 實施攻擊。 (Jan 25 2024)

[美國如何追蹤1.1億美元加密貨幣洗錢案件](https://blocksec.com/zh-hant/blog/how-the-us-traced-110-m-crypto-money-laundering-cases-blocksec): 了解美國當局如何追蹤與殺豬盤詐騙相關的1.1億美元加密貨幣洗錢案，以及BlockSec的鏈上分析揭示了哪些合規漏洞。 (May 25 2026)

[如何利用模糊測試技術避免智能合約駭客攻擊？](https://blocksec.com/zh-hant/blog/how-to-avoid-smart-contract-hacks-with-fuzzing-technology): 探索模糊測試技術以及 BlockSec 在區塊鏈安全領域的專業知識，如何協助防範智能合約攻擊，並在瞬息萬變的區塊鏈生態系統中保護您的資產安全。 (Apr 19 2024)

[如何成為智慧合約審計師：掌握區塊鏈安全指南](https://blocksec.com/zh-hant/blog/how-to-become-a-smart-contract-auditor-your-guide-to-mastering-blockchain-security): 透過我們的完整指南，掌握智慧合約審計的核心步驟。學習區塊鏈安全所需的技能、工具與最佳實踐，成為 DeFi 與 NFT 領域的關鍵專家。 (Jan 27 2024)

[如何檢查USDT地址是否被凍結（免費30秒）](https://blocksec.com/zh-hant/blog/how-to-check-if-usdt-address-is-frozen): 30秒內查詢任何USDT地址——免費，無需註冊。了解Tether凍結的含義、替代的直接查詢方法，以及各種情況下的應對措施。 (Jul 27 2026)

[如何檢查 Cosmos 跨鏈橋的安全性：綜合指南](https://blocksec.com/zh-hant/blog/how-to-check-the-security-of-cosmos-bridge-a-comprehensive-guide): 探索保障 Cosmos Bridge 安全的重要性，學習如何評估其安全性，並深入了解 BlockSec 如何為跨鏈交易提供量身定制的專業安全審計服務。 (Apr 15 2024)

[如何選擇適合您業務的區塊鏈合規平台](https://blocksec.com/zh-hant/blog/how-to-choose-blockchain-compliance-platform): 穩定幣年交易量已達36兆美元，非法資金亦隨之流動。了解如何選擇專為大規模跨鏈反洗錢設計的區塊鏈合規平台。 (May 28 2026)

[如何為您的協議選擇理想的安全審計公司：綜合指南](https://blocksec.com/zh-hant/blog/how-to-choose-the-ideal-security-audit-company-for-your-protocol-a-comprehensive-guide): 探索區塊鏈項目選擇安全審計公司的關鍵考量因素，並了解 BlockSec 如何透過獨特的審計解決方案及 Phalcon 安全產品，全方位保障項目的生命週期安全。 (Apr 22 2024)

[如何為您的協議選擇合適的安全監控平台？](https://blocksec.com/zh-hant/blog/how-to-choose-the-right-security-monitoring-platform-for-your-protocols): 探索區塊鏈項目安全監控的重要性，並了解為您的協議選擇安全監控平台時，應考量的關鍵因素。 (May 22 2024)

[如何透過安全審計報告評估專案安全性？](https://blocksec.com/zh-hant/blog/how-to-evaluate-project-security-through-security-audit-report): 探索安全審計報告如何保障區塊鏈項目安全。BlockSec 透過自動化掃描、人工核查與業務邏輯分析的全面方法，為您提供精準的安全性評估。 (Apr 20 2024)

[如何以兩種不同方式利用 MetaPool 的相同漏洞（Nerve Bridge / Saddle Finance）：眼見不一定為實](https://blocksec.com/zh-hant/blog/how-to-exploit-the-same-vulnerability-of-meta-pool-in-two-different-ways-nerve-bridge-saddle-finance-what-you-see-is-not-what-you-get): 探索 Nerve Bridge 與 Saddle Finance 事件中 MetaPool 漏洞的重複利用：深度揭露加密貨幣漏洞的持續性問題。 (Jan 25 2024)

[如何獲取加拿大加密貨幣支付 MSB 牌照](https://blocksec.com/zh-hant/blog/how-to-get-a-canada-msb-license-for-crypto-payments-in-2026): 2026年在加拿大推出加密貨幣支付服務?僅完成MSB註冊還不夠。您需建立符合FINTRAC要求的即時KYT/轉帳規則合規系統,以確保銀行合作並順利擴展業務。 (Feb 12 2026)

[如何為加密貨幣交易所存款實施反洗錢篩查：逐步指南](https://blocksec.com/zh-hant/blog/how-to-implement-aml-screening-crypto-exchange-deposits): 如何為加密貨幣交易所存款實施反洗錢（AML）篩查：規劃存款流程、整合KYA API、設定風險門檻，並建立合規審計記錄。 (Jul 23 2026)

[如何降低智能合約風險：區塊鏈安全運作綜合指南](https://blocksec.com/zh-hant/blog/how-to-mitigate-smart-contract-risks-a-comprehensive-guide-to-secure-blockchain-operations): 學習透過 BlockSec 的全面解決方案與專業知識，有效降低智能合約風險並保障您的區塊鏈運作安全。 (Apr 15 2024)

[如何遊玩 Four.meme 且不被「夾殺」](https://blocksec.com/zh-hant/blog/how-to-play-four-meme-without-getting-sandwiched): 如何使用 BlockSec Anti-MEV RPC，避免在玩 Four.meme 時遭到「三明治攻擊」。 (Feb 21 2025)

[如何追蹤 Solana 錢包位址](https://blocksec.com/zh-hant/blog/how-to-track-a-solana-wallet): 如何使用 MetaSleuth 追蹤 Solana 錢包或帳戶 (May 2 2024)

[如何解凍USDT地址：3條途徑，3.6%的成功機率](https://blocksec.com/zh-hant/blog/how-to-unfreeze-usdt-address): USDT遭凍結並非無解：透過Tether的removeBlackList機制解封，成功率僅3.6%。本文說明三種合法申訴途徑、Poly Network經典案例，並提供各方案的真實成功機率評估。 (Jul 27 2026)

[如何以錯誤的方式驗證簽名：AssociationNFT 案例分析](https://blocksec.com/zh-hant/blog/how-to-verify-a-signature-in-a-wrong-way-the-association-nft-case-1): 本文探討 NBA Association NFT 銷售合約中的嚴重漏洞，強調在熱門區塊鏈項目中實施適當安全措施的重要性。 (Apr 18 2024)

[攻擊分析 | 未經檢查的映射如何導致 Nomad 跨鏈橋損失 2 億美元](https://blocksec.com/zh-hant/blog/how-unchecked-mapping-makes-200-M-losses-of-nomad-bridge): Nomad Bridge 安全漏洞分析：深入剖析導致漏洞的程式碼缺陷，以及後續導致近 2 億美元遭駭客竊取的攻擊事件細節。 (Feb 4 2024)

[我們如何為 TransitSwap（及 BabySwap）追回被盜資金](https://blocksec.com/zh-hant/blog/how-we-recover-the-stolen-funds-for-transit-swap-and-baby-swap): BSC鏈上的BabySwap與TransitSwap於10月1日遭駭。駭客搶先攻擊並獲取易受攻擊機器人的私鑰，導致資金被轉移至安全帳戶，成功攔截並保護了資產。 (Apr 18 2024)

[我們如何為 TransitSwap 與 BabySwap 追回被盜資金](https://blocksec.com/zh-hant/blog/how-we-recover-the-stolen-funds-for-transitswap-and-babyswap): 快速追回被盜資金：我們利用攻擊者機器人的漏洞，成功追回幣安智能鏈（BSC）上 TransitSwap 與 BabySwap 被盜的資金，詳細解析高效恢復過程。 (Feb 8 2024)

[Resupply協議攻擊事件的深度分析與思考](https://blocksec.com/zh-hant/blog/in-depth-analysis-and-reflections-on-the-resupply-protocol-attack-incident): Resupply Protocol 因捐贈攻擊損失1000萬美元。我們追溯根本原因，逐步解析攻擊交易，並為Curve上的借貸市場總結經驗教訓。 (Sep 16 2025)

[深入剖析：Balancer V2 漏洞利用事件](https://blocksec.com/zh-hant/blog/in-depth-analysis-the-balancer-v2-exploit): 2025年11月3日，Balancer V2及其多個分叉項目遭到攻擊，造成逾1.25億美元損失。本部落格將針對此事件進行深入的技術分析。 (Nov 5 2025)

[深入分析：Truebit 事件](https://blocksec.com/zh-hant/blog/in-depth-analysis-the-truebit-incident): 2026年1月8日，以太坊上的Truebit協議遭攻擊，損失超過2,600萬美元。本篇部落格對該事件進行了深入的技術分析。 (Jan 14 2026)

[Drainer-as-a-Service：揭秘以太坊 1.35 億美元的釣魚經濟](https://blocksec.com/zh-hant/blog/inside-ethereum-s-shadow-economy-new-research-unmasks-the-135-m-drainer-as-a-service-industry): 最新研究揭露「盜幣即服務」(Drainer-as-a-Service) 如何將以太坊上的加密貨幣釣魚攻擊產業化,從超過7.6萬名受害者手中竊取1.35億美元。探索完整鏈上分析。 (Oct 21 2025)

[Phalcon Compliance 3.1：更快速的加密貨幣反洗錢與彈性定價方案](https://blocksec.com/zh-hant/blog/instant-crypto-compliance-software-blocksec-phalcon-3-1): 使用 Phalcon Compliance 3.1 加速加密貨幣 AML/KYT 合規：即時錢包/交易篩查、輕量分享、多鏈洞察，並提供靈活的按需付費方案。 (Dec 15 2025)

[什麼是即時加密貨幣兌換平台？為何它們成為洗錢活動的熱點？](https://blocksec.com/zh-hant/blog/instant-crypto-exchanges-money-laundering): 雖然ICE帶來效率與便利，但也悄悄為洗錢等非法活動打開了方便之門。 (Jun 24 2025)

[Interlace與BlockSec合作提升加密貨幣支付合規性](https://blocksec.com/zh-hant/blog/interlace-boosts-crypto-payment-compliance-with-block-sec): 全球加密支付服務商 Interlace 如何借助 BlockSec 的 Phalcon Compliance 強化加密支付合規：對每一筆存款與提款進行即時 KYA 與 KYT 風險篩查，同時不影響用戶體驗。 (Sep 16 2025)

[2024年EVM鏈審計關鍵亮點 —— BlockSec洞察報告](https://blocksec.com/zh-hant/blog/key-highlights-of-evm-chain-audits-in-2024-insights-from-block-sec): 探索 2024 年 EVM 鏈審計趨勢。BlockSec 提供全面的解決方案，針對安全隱患提出切實可行的建議，確保區塊鏈專案的穩健性與可靠性。 (Apr 8 2024)

[認識加密貨幣中的了解您的交易（KYT）：其定義及與KYA和KYC的區別](https://blocksec.com/zh-hant/blog/know-your-transaction-crypto): Phalcon Compliance的KYT即時篩查鏈上轉帳，偵測洗錢風險。了解交易層級監控與KYA、KYC的差異。 (Jul 21 2026)

[#3：KyberSwap 事件：利用細微計算誤差進行巧妙攻擊](https://blocksec.com/zh-hant/blog/kyberswap-incident-masterful-exploitation-of-rounding-errors-with-exceedingly-subtle-calculations): KyberSwap 事件：精準利用捨入誤差，透過極其細膩的計算達成的高明漏洞利用。 (Feb 12 2024)

[KYT 定義：了解「了解你的交易」之含義](https://blocksec.com/zh-hant/blog/kyt-definition-what-know-your-transaction-means-and-why-it-matters-in-crypto-and-finance): Know Your Transaction(KYT)即時監控交易風險,防範詐欺與制裁行為,協助加密貨幣與金融科技企業以清晰、可稽核的決策維持合規。 (Mar 9 2026)

[引言：DeFi 風險緩解指南](https://blocksec.com/zh-hant/blog/lead-in-de-fi-risk-mitigation-guide-2): 本系列深入探討 DeFi 主要風險類型、如何評估項目風險、用戶安全建議，以及 DeFi 項目團隊如何確保安全性。 (Jul 5 2024)

[導語：Phalcon 的駭客阻截傳奇](https://blocksec.com/zh-hant/blog/lead-in-phalcon-s-hack-blocking-saga): 在本系列中，探索全球首個加密貨幣駭客監控與攔截系統 BlockSec Phalcon，如何透過創新技術成功挽救價值數百萬美元的資產。 (Apr 26 2024)

[導言：安全智能合約開發](https://blocksec.com/zh-hant/blog/lead-in-secure-smart-contract-development): 本系列深入探討開發安全且高效智能合約（特別是 NFT）的關鍵安全實踐。 (Apr 26 2024)

[引言：Uniswap V4 Hook 風險](https://blocksec.com/zh-hant/blog/lead-uniswap-v4-hook-risks): 深入探討 Uniswap v4 hook 風險：存取控制與輸入驗證缺陷、實際攻擊案例，以及強化以太坊與 L1/L2 上 DeFi 安全性的防範措施。 (Apr 26 2024)

[致命整合：鉤子中因危險交互引發的漏洞](https://blocksec.com/zh-hant/blog/lethal-integration-vulnerabilities-in-hooks-due-to-risky-interactions): Uniswap v4 鉤子（Hook）安全性：了解存取控制與輸入驗證缺陷如何使超過30%的鉤子面臨風險，並附有概念驗證（PoC）與修復方法。 (Nov 20 2023)

[LI.FI 攻擊：跨鏈橋漏洞？不，這是未檢查外部調用所致！](https://blocksec.com/zh-hant/blog/li-fi-attack-a-cross-chain-bridge-vulnerability-no-it-s-due-to-unchecked-external-call): LI.FI 跨鏈橋漏洞：DeFi 外部調用安全的一課 —— 探討 DeFi 編碼中強化安全實踐的必要性。 (Feb 4 2024)

[路印協議 (LRC) 事件](https://blocksec.com/zh-hant/blog/loopring-lrc-protocol-incident): 了解 Loopring LRC 協議事件如何導致 4.8 萬美元的損失。掌握關鍵細節、影響範圍與安全洞察，即刻掌握資訊，保護您的資產安全。 (Feb 29 2024)

[BlockSec Phalcon 儲存分析與監控功能重大升級](https://blocksec.com/zh-hant/blog/major-upgrades-to-block-sec-phalcon-s-storage-analysis-and-monitoring-functions): BlockSec 很高興地宣布，針對加密貨幣駭客監控與攔截系統 Phalcon 的儲存分析及監控功能進行了重大升級。 (Apr 30 2024)

[如何讓區塊鏈攻擊可被阻擋：5 種實證策略](https://blocksec.com/zh-hant/blog/make-blockchain-attack-blockable): 了解如何運用經過驗證的DeFi安全策略，有效防範區塊鏈攻擊。立即採用專業區塊鏈解決方案，保護您的智能合約安全。 (Mar 7 2022)

[DeFi 風險管理：如何確保安全與合規](https://blocksec.com/zh-hant/blog/managing-de-fi-risk-a-complete-guide-to-staying-safe-and-compliant): DeFi風險不僅限於智能合約漏洞。了解如何偵測受污染資金、追蹤跨鏈風險敞口，並利用即時鏈上工具確保合規。 (Jan 26 2026)

[新加坡MAS加密貨幣合規指南：支付機構適用版](https://blocksec.com/zh-hant/blog/mas-shapes-crypto-compliance-in-singapore): 了解新加坡金融管理局（MAS）如何規範加密貨幣支付合規：《支付服務法》（PSA）與科技風險管理要求有哪些，以及 KYT 與交易監控如何建立信任。 (Mar 26 2026)

[安全智慧合約開發 (2) — 如何在 NFT (市場) 中正確使用數位簽章](https://blocksec.com/zh-hant/blog/mastering-digital-signatures-in-nft-smart-contracts-for-enhanced-security-and-efficiency): 利用數位簽章確保 NFT 真偽：深入了解數位簽章如何為 NFT 智慧合約開發提供真實性與完整性保障。 (Mar 4 2024)

[MetaDock 用戶突破 6,000 大關！](https://blocksec.com/zh-hant/blog/meta-dock-breaks-through-6-k-users): MetaDock 作為一款 Web3 瀏覽器擴充功能，使用者已突破 6,000 人。它能實現區塊鏈瀏覽器的無縫整合，並始終將用戶隱私與安全置於首位。 (Apr 18 2024)

[MetaSuites 5.0 全面支援 Solana 掃描，效能躍升](https://blocksec.com/zh-hant/blog/metasuites-5-0-extends-full-support-solana-scans): 探索 MetaSuites 5.0 如何透過跨平台本地標籤與 Phalcon Explorer 整合，強化 Solana 掃描功能。立即升級您的區塊鏈安全防護！ (May 29 2024)

[加密貨幣洗錢案例：3個真實案件及其揭示的問題](https://blocksec.com/zh-hant/blog/money-laundering-examples-crypto): 7,400枚ETH經混幣器洗錢,2小時內完成20次跳轉的橋接攻擊,151個地址因資助恐怖主義被列入黑名單。真實加密貨幣案例,完全鏈上可查。 (Jul 17 2026)

[洗錢的含義：加密貨幣如何被用於洗錢及如何被查獲](https://blocksec.com/zh-hant/blog/money-laundering-meaning): 透過15億美元Bybit駭客事件及1,247萬美元即時交易所案例,了解加密貨幣洗錢的運作方式,以及KYA與KYT工具如何在資金結算前偵測異常。 (Jul 17 2026)

[簡單解釋洗錢：什麼是洗錢，以及為何加密貨幣使其更加容易](https://blocksec.com/zh-hant/blog/money-laundering-simple-terms): 洗錢淺白解說:三大階段、2025年真實加密貨幣案例(如150億美元比特幣沒收案),並提供免費工具查詢錢包地址是否被列入警示名單。 (Jul 17 2026)

[每月安全報告：2024年4月](https://blocksec.com/zh-hant/blog/monthly-security-review-april-2024): 2024年4月DeFi漏洞攻擊損失約500萬美元，主因為未驗證用戶輸入與存取控制缺陷，深入解析Hedgey Finance、SaitaChain及Pike Finance事件。 (May 1 2024)

[每月安全審查：2024 年 2 月](https://blocksec.com/zh-hant/blog/monthly-security-review-february-2024): 掌握二月份的安全趨勢與我們的最新動態。🙌 (Mar 1 2024)

[月度安全回顧:2024年6月](https://blocksec.com/zh-hant/blog/monthly-security-review-june-2024-1): BlockSec 2024年6月安全回顧：UwU Lend攻擊事件及其他DeFi安全事件，Phalcon Explorer全面支援Solana，以及Solana Summit活動回顧。 (Jul 9 2024)

[每月安全審查：2024 年 5 月](https://blocksec.com/zh-hant/blog/monthly-security-review-may-2024): 隨時掌握五月份的安全趨勢與我們的最新發展。🙌 (Jun 10 2024)

[月度安全審查：2024年10月](https://blocksec.com/zh-hant/blog/monthly-security-review-october-2024): BlockSec 2024年10月安全報告深入剖析Radiant Capital在Arbitrum上5,800萬美元的資安事件,以及另外三起規模較小的事件,並逐一分析各事件的根本原因。 (Nov 1 2024)

[香港 MSO 與 VA OTC：加密貨幣牌照指南](https://blocksec.com/zh-hant/blog/mso-vs-va-otc-in-hong-kong-what-crypto-payment-companies-must-know-in-2026): 2026香港加密貨幣指南：掌握雙軌牌照制度，解析MSO與VA OTC分別、海關（C&ED）與證監會（SFC）監管職責、申請人資格、申請流程，助您符合銀行開戶合規要求。 (Mar 4 2026)

[駕馭 DeFi 監管：AML/CFT 合規指南](https://blocksec.com/zh-hant/blog/navigating-de-fi-regulation-in-2026): 了解如何透過 Phalcon Compliance 滿足 DeFi 監管要求——提供即時篩查、鏈上監控，以及跨司法管轄區的自動化 AML/CFT（反洗錢/反資恐）合規報告服務。 (Mar 3 2026)

[Solana rBPF 中發現新的整數溢位漏洞](https://blocksec.com/zh-hant/blog/new-integer-overflow-bug-discovered-in-solana-r-bpf): Solana 虛擬機發現整數溢出漏洞，網路安全面臨風險。 (Jan 8 2024)

[全新網站上線 | BlockSec 全方位守護協定生命週期安全](https://blocksec.com/zh-hant/blog/new-website-unveiled-block-sec-safeguards-protocol-s-lifecycle-security): BlockSec 新官網正式上線，開啟全方位、全生命週期的區塊鏈安全服務新時代！🙌 (Mar 18 2024)

[電子報 - 2026年4月](https://blocksec.com/zh-hant/blog/newsletter-april-2026): 2026年4月DeFi重大事件盤點：KelpDAO、Drift與Rhea Finance合計損失逾5.93億美元，深入解析這些漏洞攻擊事件對DeFi安全帶來的影響與啟示 (Apr 30 2026)

[電子報 - 2025年12月](https://blocksec.com/zh-hant/blog/newsletter-december-2025): 2025年12月，DeFi領域發生三起重大安全事件，損失約1,970萬美元。Yearn Finance因yETH池及舊合約漏洞損失近1,000萬美元；Trust Wallet插件遭後門攻擊損失約700萬美元；Ribbon Finance因存取控制不當損失270萬美元。 (Jan 6 2026)

[電子報 - 2026年2月](https://blocksec.com/zh-hant/blog/newsletter-february-2026): 2026年2月發生三起DeFi安全事件：YieldBlox DAO因預言機價格操縱損失約1,000萬美元；IoTeX的ioTube跨鏈橋因私鑰洩漏損失約440萬美元；CrossCurve因跨鏈驗證漏洞損失約280萬美元。 (Mar 2 2026)

[通訊 - 2026年1月](https://blocksec.com/zh-hant/blog/newsletter-january-2026): 2026年1月，DeFi生態發生三起安全事件。Truebit協議因整數溢位漏洞損失約2,600萬美元；SwapNet與Aperture因輸入驗證不當及授權濫用損失約1,700萬美元；Saga則因底層代碼共享漏洞損失約700萬美元。 (May 3 2026)

[簡訊 - 2026年3月](https://blocksec.com/zh-hant/blog/newsletter-march-2026): 2026年3月DeFi生態發生三起安全事件：Resolv Protocol因特權基礎設施金鑰洩漏損失約8,000萬美元；BitcoinReserveOffering因雙重鑄造邏輯漏洞損失約270萬美元；Venus Protocol因捐贈攻擊與市場操縱遭受約215萬美元損失。 (Apr 1 2026)

[[並非所有代幣都是好的] Paraluni 攻擊快速分析](https://blocksec.com/zh-hant/blog/not-all-tokens-are-good-the-quick-analysis-of-the-paraluni-attack): 本文詳細分析針對 Paraluni 專案的攻擊，剖析通證驗證與重入漏洞，並強調在 Web3 新興世界中資安防護的重要性。 (Apr 20 2024)

[美國財政部海外資產控制辦公室制裁與恐怖主義融資相關的ISIS波場網絡地址](https://blocksec.com/zh-hant/blog/ofac-sanctions-isis-tron-addresses-terror-financing): OFAC制裁了兩個與ISIS資助者有關的Tron地址。看看BlockSec如何追蹤這條鏈上資金線索，最終指向一個與哈馬斯有關聯的實體。 (Jun 26 2026)

[OFAC錫納羅亞卡特爾制裁：鏈上資金追蹤](https://blocksec.com/zh-hant/blog/ofac-sinaloa-cartel-sanctions-on-chain-tracing): OFAC制裁了六個與錫那羅亞販毒集團芬太尼洗錢相關的地址。我們對這些資金進行了鏈上追蹤，發現大部分資金直接流入中心化交易所的存款帳戶。 (Jun 12 2026)

[BlockSec 與 OKX Explorer 達成合作，共同提升鏈上數據安全與合規性](https://blocksec.com/zh-hant/blog/on-chain-data-security): BlockSec與OKX Explorer攜手合作，提升鏈上安全性、合規性與數據分析能力，整合威脅情報與API接口，共同打造更安全、更透明的Web3生態系統。 (Nov 18 2024)

[OTC USDT凍結操作手冊：合規服務水準協議與應對指南（2026）](https://blocksec.com/zh-hant/blog/otc-desks-usdt-freeze-playbook): OTC櫃台實戰手冊：交易前篩查SLA標準、針對活躍地址凍結的即時監控機制，以及事發最初15分鐘的應變處置流程。 (Jul 27 2026)

[針對Wintermute項目指控的簡要分析](https://blocksec.com/zh-hant/blog/our-short-analysis-of-the-accusation-of-the-wintermute-project): 分析 Wintermute 被駭事件：目前無確鑿證據顯示涉及內鬼。 (Feb 7 2024)

[關於Wintermute專案指控的簡要分析](https://blocksec.com/zh-hant/blog/our-short-analysis-of-the-accusation-of-the-wintermute-project-1): BlockSec 的調查對分析 Wintermute 被駭事件的報告內容提出質疑，並對該報告中針對 Wintermute 項目的各項指控之可靠性表示懷疑。 (Apr 18 2024)

[關於髒話過濾工具漏洞的簡要分析](https://blocksec.com/zh-hant/blog/our-short-analysis-of-the-profanity-tool-vulnerability): 探討 Profanity 工具在 Wintermute 1.6 億美元加密貨幣漏洞事件中的角色 (Mar 4 2024)

[我們對 Inverse Finance 安全事件的看法：價格操縱攻擊](https://blocksec.com/zh-hant/blog/our-take-on-the-inverse-finance-security-incident-price-manipulation-attack): Inverse Finance 發生閃電貸攻擊事件，攻擊者獲利近 10 萬美元 USDT 及 53.2 枚 WBTC。 (Jan 29 2024)

[第10號全景事件：XOR線性破壞位置指紋方案](https://blocksec.com/zh-hant/blog/panoptic-incident-xor-linearity-breaks-the-position-fingerprint-scheme): 2025年8月25日:白帽黑客發現Panoptic協議中基於XOR運算的s_positionsHash漏洞,該漏洞可被利用來偽造ID並提取抵押品,並藉此成功追回約40萬美元資金。 (Feb 11 2026)

[政治敏感人物（PEP）定義：三種類型詳解](https://blocksec.com/zh-hant/blog/pep-definition-three-types): PEP定義：擔任重要公職的人士。FATF劃分三種類型——外國、國內及國際組織PEP，各自對應不同的強化盡職調查（EDD）要求。 (Sep 9 2026)

[政治公眾人物（PEP）定義比較：FATF、FinCEN 與歐盟 AMLD](https://blocksec.com/zh-hant/blog/pep-definitions-compared): 政治敏感人物（PEP）定義比較：FATF、FinCEN 與歐盟 AMLD 對外國 PEP 認定一致，但在國內 PEP 加強審查（EDD）標準上分歧。哪一項適用於您的平台？ (Sep 9 2026)

[政治敏感人物（PEP）的意義：角色，而非名冊](https://blocksec.com/zh-hant/blog/pep-meaning-role-not-registry): 政治公開人物(PEP)的定義:此身分源自公職本身,並延伸至家庭成員與密切關係人,離職後該身分將逐漸失效。 (Sep 9 2026)

[PBS全面實施後，BSC的表現如何？](https://blocksec.com/zh-hant/blog/performance-bsc-after-full-implementation-pbs): 探索 BSC 在 BEP-322 之後的 PBS 升級：Builder 市場如何整合、驗證者集中化為何加劇，以及三明治攻擊上升的原因。 (Jan 17 2025)

[BlockSec推出全球首個「合規+安全」管理平台](https://blocksec.com/zh-hant/blog/phalcon-compliance-app): Phalcon Compliance協助VASP快速符合AML/CFT法規，提供即時監控、超過6億筆標籤數據、一鍵生成可疑交易報告(STR)，以及客製化風險評估引擎。 (Apr 24 2025)

[Phalcon Compliance:全方位自助式鏈上洗錢防制服務](https://blocksec.com/zh-hant/blog/phalcon-compliance-launches-self-service-platform-making-on-chain-aml-accessible-for-all): Phalcon Compliance 現已提供自助式鏈上反洗錢篩查服務。立即執行 KYT/KYA 檢測、追蹤資金流向並生成 STR 報告，無需任何設定。 (Oct 14 2025)

[Phalcon Security 支持 Mantle Network：開創堅不可破的生態系統安全](https://blocksec.com/zh-hant/blog/phalcon-enhances-mantle-security): Phalcon Security 現已支援 Mantle Network,協助自動阻擋駭客攻擊——了解其如何成功阻止20多次攻擊,並保護超過2000萬美元的資產。 (Jul 31 2024)

[Phalcon Explorer：新一代 Web3 交易分析工具](https://blocksec.com/zh-hant/blog/phalcon-explorer-next-gen-web3-transaction-analysis-tool-1): BlockSec Phalcon Explorer 升級 Web3 區塊鏈交易分析，提供調用追蹤、調試器、模擬器、模糊/事件搜索。支援 26+ 條鏈，累積超過 10 萬用戶，助您高效洞察鏈上數據。 (Sep 19 2025)

[Solana 最佳區塊鏈交易瀏覽器](https://blocksec.com/zh-hant/blog/phalcon-explorer-now-fully-supports-solana): 為使用者簡化 Solana 交易，並為開發者帶來便利。 (Jun 20 2024)

[Phalcon Security 現已推出 Oracle 監控功能！](https://blocksec.com/zh-hant/blog/phalcon-oracle-monitor): Oracle攻擊防範：了解Phalcon Security如何偵測價格異常與更新延遲，在損失發生前阻止DeFi Oracle漏洞攻擊。 (May 28 2025)

[Phalcon | 2023 年 Web3 安全概覽](https://blocksec.com/zh-hant/blog/phalcon-overview-of-the-web3-security-landscape-in-2023): 2023年共發生69起因漏洞利用導致的駭客攻擊事件，損失金額介於10萬美元至2億美元之間。 (Jan 16 2024)

[獵鷹2023年終回顧](https://blocksec.com/zh-hant/blog/phalcon-s-2023-year-end-recap): 透過Phalcon的故事，讓我們一起回顧BlockSec在2023年為推動Web3安全所付出的不懈努力。 (Dec 29 2023)

[Phalcon Security：終結 Web3 零日攻擊的主動防禦方案](https://blocksec.com/zh-hant/blog/phalcon-security-the-proactive-defense-ending-zero-day-web3-attacks): 探索 Phalcon Security 如何自動偵測並攔截記憶體池（mempool）中的攻擊，將 Web3 防禦從被動反應轉為主動防護。 (Nov 4 2025)

[加入我們的免費駭客防禦遊戲，利用 Phalcon 阻擋真實攻擊](https://blocksec.com/zh-hant/blog/phalcon-virtual-experience-join-our-free-hack-defense-game-and-block-real-attacks-with-phalcon): 準備好與駭客展開一場生死決戰了嗎？ (May 17 2024)

[釣魚合約：3.7萬起詐騙如何運作及如何防範](https://blocksec.com/zh-hant/blog/phishing-contracts): BlockSec研究人員發現超過3.7萬個釣魚合約,竊取了以太坊上1.9億美元資產。了解這些詐騙手法,學習如何保護您的加密資產。 (May 19 2025)

[豬仔騙局詐騙追討：法律途徑與時間表（2026）](https://blocksec.com/zh-hant/blog/pig-butchering-scam-recovery): 遭遇「殺豬盤」加密貨幣詐騙？2026冷靜應對指南：黃金一小時處理步驟、跨鏈追蹤資金流向、判斷追回資產的現實可能性，以及常見詐騙警示訊號。 (Jul 23 2026)

[Podcast：BlockSec 如何即時攔截 1500 萬美元的 Web3 攻擊](https://blocksec.com/zh-hant/blog/podcast-how-block-sec-intercepted-15-m-of-web3-exploits-in-real-time-1): Andy Zhou 受邀參與 Scraping Bits 播客節目，探討如何防禦 Web3 領域的攻擊。 (Feb 2 2024)

[現實中的價格操縱攻擊（再臨）：RariCapital 事件](https://blocksec.com/zh-hant/blog/price-manipulation-attack-in-reality-again-rari-capital-incident): 探索間接價格操縱：解析針對 Rari Capital 的攻擊事件 (Jan 19 2024)

[BlockSec 如何在 ParaSpace 攻擊事件中成功攔截並拯救價值 500 萬美元的加密資產](https://blocksec.com/zh-hant/blog/proactive-threat-prevention-a-new-web3-security-paradigm-1): 2023年3月17日05:48:59（UTC），BlockSec成功攔截了針對頂級NFT借貸協議ParaSpace的攻擊企圖，保護了價值500萬美元的加密資產。 (Mar 17 2023)

[Tether Gold 智慧合約的公開轉移漏洞](https://blocksec.com/zh-hant/blog/public-transfer-vulnerability-of-the-tether-gold-smart-contract): Tether Gold 智慧合約存在公開轉帳漏洞。該漏洞允許未經授權的地址透過特定函式轉移他人資產。攻擊者可利用此缺陷繞過存取控制，直接操作合約中的代幣權限，導致用戶資金面臨被盜風險。 (Jan 21 2024)

[近期 DeFi 被駭事件：BlockSec Phalcon 如何保護數百萬用戶資產](https://blocksec.com/zh-hant/blog/recent-de-fi-hacks-how-phalcon-block-could-protect-user-assets-worth-millions): 近期駭客攻擊頻傳，凸顯透過自動化技術實現全天候區塊鏈安全防護的迫切需求。 (Jan 9 2024)

[反思反射令牌：安全視角](https://blocksec.com/zh-hant/blog/reflecting-on-reflection-tokens-a-security-perspective): 在本部落格中，我們主要分享針對反射代幣機制研究所獲得的資安相關見解。 (Jun 6 2024)

[揭露以太坊工作量證明（EthereumPoW）上的「訊息」重放攻擊](https://blocksec.com/zh-hant/blog/reveal-the-message-replay-attacks-on-ethereum-po-w): 深入了解近期針對 EthereumPoW 的訊息重放攻擊，探討 Omni 橋接協議的漏洞，以及進行 chainId 驗證的必要性。 (Jan 19 2024)

[Revest Finance 漏洞：不只是重入攻擊](https://blocksec.com/zh-hant/blog/revest-finance-vulnerabilities-more-than-re-entrancy): 守護去中心化金融未來：從 Revest Finance 漏洞中汲取的教訓 (Feb 4 2024)

[重回 CashioApp 安全事件](https://blocksec.com/zh-hant/blog/revisiting-the-cashio-app-security-incident): CashioApp 因缺乏足夠的輸入帳戶驗證遭到攻擊，攻擊者利用虛假抵押品與 Saber 帳戶非法鑄造了 $CASH 代幣。 (Apr 18 2024)

[重探蟲洞攻擊](https://blocksec.com/zh-hant/blog/revisiting-the-wormhole-attacks): 針對蟲洞（Wormhole）攻擊的深入分析顯示，其簽名驗證流程存在漏洞，使攻擊者無需在以太坊鎖定任何資產，即能在 Solana 上鑄造 12 萬枚 ETH。 (Apr 23 2024)

[重塑Layer 2鏈生態:從排序器出發打造內生安全機制](https://blocksec.com/zh-hant/blog/revolutionizing-l2-chains-building-intrinsic-security-from-sequencers): BlockSec的Sequencer Threat Overwatch計畫,將Phalcon Security攻擊偵測機制內建於L2 Sequencer中,Manta Pacific成為首個採用此技術的L2。 (Jul 5 2024)

[Rustle：NEAR 社群首個自動化審計工具](https://blocksec.com/zh-hant/blog/rustle-the-first-automatic-auditor-for-near-community): 由 BlockSec 開發的 Rustle 是一款針對 NEAR 智能合約的自動化審計工具，能提供全面的漏洞檢測與分析功能。 (Apr 18 2024)

[BlockSec 推出 Safe{Wallet} 安全監控解決方案](https://blocksec.com/zh-hant/blog/safe-wallet-security-monitor): 全面顯示交易資訊，分析交易風險並模擬交易結果，致力於預防資產損失。 (Mar 6 2025)

[安全的智能合約開發 — NFT 合約中的代碼重入問題](https://blocksec.com/zh-hant/blog/secure-smart-contract-development-code-reentrancy-in-nft-contracts-1): 探索 NFT 智能合約中的關鍵安全問題，重點剖析重入攻擊漏洞（Reentrancy）及其對以太坊生態系統的影響。 (Feb 7 2024)

[引言：保護Solana生態系統](https://blocksec.com/zh-hant/blog/secure-the-solana-ecosystem): 在本系列中，深入探索透過部署、升級及複雜功能來保護Solana安全的詳細見解。 (Apr 26 2024)

[保護 Solana 生態系統 (1) — Hello Solana](https://blocksec.com/zh-hant/blog/secure-the-solana-ecosystem-1-hello-solana): BlockSec 致力於構建安全的 DApp 生態系統：探索我們如何通過專注於 Solana 智能合約安全，以提升整個 DApp 生態的防禦能力。 (Feb 7 2024)

[保護 Solana 生態系統 (2) — 程序間調用](https://blocksec.com/zh-hant/blog/secure-the-solana-ecosystem-2-calling-between-programs): 透過我們詳盡的指南與實作範例，精通 Solana 跨程式調用（CPI）技術，將您的智能合約開發提升至更高水平。 (Jan 25 2024)

[保護 Solana 生態系統 (3) — 程式升級](https://blocksec.com/zh-hant/blog/secure-the-solana-ecosystem-3-program-upgrade): 本文提供 Solana 程式升級指南，涵蓋可升級程式部署、範例合約審核、發送交易、執行升級步驟及驗證升級後程式之完整流程。 (Apr 18 2024)

[保護Solana生態系統（4）— 帳戶驗證](https://blocksec.com/zh-hant/blog/secure-the-solana-ecosystem-4-account-validation): 本文討論了Solana程式設計環境中與存取控制相關的問題，重點關注帳戶驗證的重要性及潛在的安全風險。 (Apr 24 2024)

[確保 Solana 生態系統安全（五）— 多重簽名](https://blocksec.com/zh-hant/blog/secure-the-solana-ecosystem-5-multi-sig): 本文探討 Solana 多重簽名功能的實現，並強調其在去中心化應用中提升安全性、防止私鑰外洩的重要性。 (Apr 20 2024)

[保護 Solana 生態系統 (6) — 多重簽名 2](https://blocksec.com/zh-hant/blog/secure-the-solana-ecosystem-6-multi-sig2): 本文探討 Solana 上多重簽名（Multisig）的通用實現方案，實現鏈上交易簽署功能，並提供程式碼審查與部署詳細指南。 (Apr 18 2024)

[保障 Solana 生態系統（七）—— 類型混淆](https://blocksec.com/zh-hant/blog/secure-the-solana-ecosystem-7-type-confusion): 本文探討 Solana 的類型混淆（Type Confusion）安全漏洞，說明其對帳戶序列化與反序列化的影響，以及攻擊者如何利用此漏洞進行惡意操作。 (Apr 23 2024)

[通過主動威脅防禦確保 Web3 安全](https://blocksec.com/zh-hant/blog/securing-web3-through-proactive-threat-prevention-1): 過去三年，DeFi 生態系統發生多起安全事故。為抵禦威脅，社群已廣泛採用代碼導向的方法，例如靜態代碼審計、智能合約掃描工具及動態模糊測試。 (Jan 28 2023)

[Cakepie 合約安全審計報告](https://blocksec.com/zh-hant/blog/security-audit-report-for-cakepie-contracts): 這是我們於 2023 年 11 月為 Cakepie 合約所進行的安全性審計報告。 (Jan 16 2024)

[LiNEAR 安全審計報告](https://blocksec.com/zh-hant/blog/security-audit-report-for-li-near): 這是我們於2022年4月為LiNEAR進行的安全審計報告。 (Feb 18 2024)

[NearOinDao 安全審計報告](https://blocksec.com/zh-hant/blog/security-audit-report-for-near-oin-dao): 這是我們於 2021 年 12 月為 NearOinDao 進行的安全審計報告。 (Feb 18 2024)

[安全性檢查：EVM相容鏈是否經得起考驗？](https://blocksec.com/zh-hant/blog/security-check-do-evm-compatible-chains-hold-up): 揭秘 EVM 的潛在安全風險：BlockSec 自動化工具如何協助進行深度檢測 (Jan 5 2024)

[Seal Finance 安全事件](https://blocksec.com/zh-hant/blog/security-incident-on-seal-finance): Seal Finance 協議遭駭，攻擊者竊取 80.97 ETH，價值約 48,849 美元。 (Mar 4 2024)

[Move 開發安全實踐 (1)：Hello World](https://blocksec.com/zh-hant/blog/security-practices-in-move-development-1-hello-world): 透過本指南學習 Move 安全開發實踐，並動手建立您的 Aptos 應用程式。 (Apr 23 2024)

[Move 開發安全實踐（二）：Aptos Coin](https://blocksec.com/zh-hant/blog/security-practices-in-move-development-2-aptos-coin): 建立並管理您自己的代幣：探索如何使用 Aptos 官方標準模組 coin.move，輕鬆創建與管理您的專屬代幣。 (Apr 24 2024)

[每月安全審查：2024 年 3 月](https://blocksec.com/zh-hant/blog/security-report-PrismaFi-Munchables-ParaSwap): 掌握三月的安全趨勢與我們的最新動態。🙌 (Apr 1 2024)

[Radiant V2 安全測試報告](https://blocksec.com/zh-hant/blog/security-testing-report-for-radiant-v2): Radiant V2安全測試發現17個問題，其中包含2個高風險漏洞。了解BlockSec如何發現並協助修復關鍵智能合約錯誤。 (Jan 9 2024)

[Lead in：Solana 簡化版](https://blocksec.com/zh-hant/blog/solana-guide): BlockSec 三部曲「Solana Simplified」指南:Solana 核心概念與帳戶模型、用 Rust 撰寫第一個程式,以及如何解讀交易紀錄。 (Jul 12 2024)

[Solana 簡明教程 02：從零開始編寫你的第一個 Solana 智能合約](https://blocksec.com/zh-hant/blog/solana-simplified-02-writing-your-first-solana-smart-contract-from-scratch): 只需這一篇文章，精通 Solana 程式開發！內容涵蓋環境設置、合約邏輯到程式測試，帶你從零基礎全面掌握開發核心。 (Jun 21 2024)

[Solana 簡易指南 03：5分鐘看懂 Solana 交易](https://blocksec.com/zh-hant/blog/solana-simplified-03-understand-solana-transactions-5-minutes): 5分鐘掌握Solana交易！深入了解Solana代幣的實現原理，並使用BlockSec的Phalcon Explorer逐步分析真實交易案例。 (Jun 27 2024)

[Solana 簡明指南 01：一文掌握 Solana 核心概念](https://blocksec.com/zh-hant/blog/solana-simplified-master-solana-core-concepts-in-one-read): 僅需10分鐘，了解Solana的運作機制、帳戶模型與交易方式，揭開其爆炸性成長背後的原因。 (Jun 7 2024)

[什麼是穩定幣支付？企業完整指南](https://blocksec.com/zh-hant/blog/stablecoin-payments-explained): 什麼是穩定幣支付？鏈上結算如何取代SWIFT與代理銀行系統、實際市場規模有多大，以及與傳統銀行支付管道的比較。 (Aug 5 2026)

[無法被凍結的穩定幣：2026年路線圖](https://blocksec.com/zh-hant/blog/stablecoins-that-cannot-be-frozen): 2026年七大穩定幣(USDT、USDC、DAI、LUSD、Frax、RAI、USDe)凍結能力光譜全解析,附誠實的流動性權衡分析。 (Aug 4 2026)

[系統化方法以維護EVM相容性與安全性](https://blocksec.com/zh-hant/blog/systematic-approach-to-maintaining-evm-compatibility-and-security-1): 快速發現EVM相容性漏洞：BlockSec的差異模糊測試在Aurora與Moonbeam中發現8個問題。了解此技術如何強化區塊鏈安全性。 (Mar 27 2023)

[加密貨幣污點分析：毒藥法、削髮法與先進先出法詳解](https://blocksec.com/zh-hant/blog/taint-analysis-crypto): 汙點分析（Taint Analysis）是調查人員追蹤區塊鏈上被盜加密貨幣的方法。透過清楚的以太坊實例，了解 Poison、Haircut 及 FIFO 三種追蹤方法的運作原理。 (Jul 22 2026)

[Telcoin 安全事件事後回顧與深度分析](https://blocksec.com/zh-hant/blog/telcoin-security-incident-in-depth-analysis): 針對 2023 年聖誕節 Telcoin 安全漏洞的全面事後分析與報告。 (Jan 11 2024)

[關於 BlockSec Phalcon 的十大常見問題](https://blocksec.com/zh-hant/blog/ten-most-frequently-asked-questions-about-phalcon-block): 我們發現使用者對於 BlockSec Phalcon 的以下問題特別感興趣： (Dec 15 2023)

[Tether凍結676萬美元USDT：鏈上合規機制解析](https://blocksec.com/zh-hant/blog/tether-freezes-6-76-m-usdt-linked-to-iran-s-irgc-and-houthi-forces-why-on-chain-compliance-is-now-a-geopolitical-battlefield): Tether凍結與伊朗革命衛隊相關網絡有關的676萬美元USDT，凸顯2026年穩定幣制裁趨嚴。了解即時KYT技術如何阻擋受制裁資金流動。 (May 8 2026)

[FEGtoken 安全事件分析：魔鬼藏在細節裡](https://blocksec.com/zh-hant/blog/the-analysis-of-fegtoken-security-incident-devils-in-the-details): 一處細微的合約漏洞，如何導致 FEGtoken 在多條區塊鏈上遭竊百萬美元的始末。 (Feb 7 2024)

[Indexed Finance 安全事件分析](https://blocksec.com/zh-hant/blog/the-analysis-of-indexed-finance-security-incident): 透過本指南學習 Move 安全開發實踐，並動手建立您的 Aptos 應用程式。內容全面，助您掌握核心開發技能。 (Apr 20 2024)

[神經橋安全事件分析](https://blocksec.com/zh-hant/blog/the-analysis-of-nerve-bridge-security-incident): 探討「神經橋」（Nerve Bridge）與「突觸」（Synapse）事件之間的關聯，揭示攻擊者的作案手法。 (Jan 15 2024)

[Array Finance 安全事件分析](https://blocksec.com/zh-hant/blog/the-analysis-of-the-array-finance-security-incident): 探索 Array Finance 漏洞：攻擊步驟詳解 — 本文詳細剖析導致 Array Finance 受駭的惡意交易，深入探討 DeFi 系統的安全漏洞。 (Feb 4 2024)

[DAOMaker 攻擊事件分析](https://blocksec.com/zh-hant/blog/the-analysis-of-the-dao-maker-attack): 深入解析DAOMaker攻擊事件，探討導致管理員權限遭非法取得及資金被盜用的智能合約漏洞。 (Jan 29 2024)

[Popsicle Finance 安全事件分析](https://blocksec.com/zh-hant/blog/the-analysis-of-the-popsicle-finance-security-incident): 揭秘攻擊流程：攻擊者入侵 Popsicle Finance 的具體步驟。 (Jan 19 2024)

[三書犬（Sanshu Inu）安全事件分析](https://blocksec.com/zh-hant/blog/the-analysis-of-the-sanshu-inu-security-incident): 以太坊區塊鏈漏洞：DeFiRanger 披露 Sanshu Inu 智能合約受攻擊事件。 (Feb 4 2024)

[零式機攻擊分析](https://blocksec.com/zh-hant/blog/the-analysis-of-the-zerogoki-attack): 調查Zerogoki攻擊事件：精心設計的代幣數量如何導致重大盜竊 (Mar 4 2024)

[【蝴蝶效應】由錯誤修正（Bugfix）引發的複合型資安事件](https://blocksec.com/zh-hant/blog/the-butterfly-effect-the-compound-security-incident-caused-by-a-bugfix): 本文講述 Compound 協議中的兩個錯誤，以及它們對 COMP 代幣發放給用戶所造成的影響。 (Apr 18 2024)

[去中心化困境：KelpDAO 危機中的連鎖風險與緊急權力](https://blocksec.com/zh-hant/blog/the-decentralization-dilemma-cascading-risk-and-emergency-power-in-the-kelp-dao-crisis): 這篇 BlockSec 深度分析探討了 2026 年 4 月 Lazarus Group 對 KelpDAO 的 2.9 億美元跨鏈橋攻擊。報告剖析 DVN 單點故障如何引發 DeFi 聯動效應，凍結多鏈逾 67 億美元 WETH 流動性，並迫使治理啟用緊急中心化權限。文中詳解影響規模的關鍵參數，及 Arbitrum 安全理事會如何強制執行合約升級，在無簽名下轉移 30,766 ETH 的技術細節。 (Apr 22 2026)

[Poly Network 攻擊事件的進一步分析](https://blocksec.com/zh-hant/blog/the-further-analysis-of-the-poly-network-attack): 深入探討以太坊攻擊流程，揭露橫跨 Ontology、Poly 與以太坊鏈的跨鏈漏洞利用技術。 (Jan 25 2024)

[2026年區塊鏈法律合規的隱秘真相](https://blocksec.com/zh-hant/blog/the-hidden-truths-of-blockchain-legal-compliance-in-2026): 2026年區塊鏈法律合規指南:從DAO責任到制裁審查,搶先掌握10大隱藏風險,避免疏漏演變成罰款。 (Feb 13 2026)

[針對 Poly Network 駭客漏洞修補程式的非正式安全性審查](https://blocksec.com/zh-hant/blog/the-informal-security-review-of-the-patch-to-fix-the-vulnerability-of-the-poly-network-hack): 本部落格針對 Poly Network 近期漏洞的修復補丁進行非正式的安全性審查，重點分析允許清單（Allow list）的使用及其帶來的安全性特性。 (Apr 20 2024)

[bZx 安全事件初步分析](https://blocksec.com/zh-hant/blog/the-initial-analysis-of-the-b-zx-security-incident): 本文探討 bZX 協議遭駭事件，指出主因為開發者私鑰外洩，並強調妥善保護私鑰對 DApp 安全的重要性。 (Apr 18 2024)

[PolyNetwork 駭客攻擊初步分析](https://blocksec.com/zh-hant/blog/the-initial-analysis-of-the-poly-network-hack): PolyNetwork 駭客事件：針對跨鏈協議遭竊 3 億美元事件的根本原因分析 (Jan 12 2024)

[Vee Finance 安全事件的真正根源](https://blocksec.com/zh-hant/blog/the-real-root-cause-of-the-vee-finance-security-incident): Vee Finance 報告錯誤識別安全漏洞的根本原因 (Mar 4 2024)

[從安全研究員視角回顧 Poly Network 駭客事件](https://blocksec.com/zh-hant/blog/the-retrospection-of-the-poly-network-hack-from-a-security-researcher-perspective): 針對 Poly Network 被駭事件的分析，探討去中心化金融（DeFi）項目在安全漏洞方面應吸取的教訓。 (Apr 18 2024)

[APE空投閃電貸攻擊簡析](https://blocksec.com/zh-hant/blog/the-short-analysis-of-the-flashloan-attack-to-the-ape-air-drop): 分析針對一種透過操縱資產現貨價格，以從 APE 代幣空投中獲利的攻擊事件。 (Jan 12 2024)

[五大智能合約審計公司：BlockSec 領跑業界](https://blocksec.com/zh-hant/blog/the-top-5-smart-contract-auditors-block-sec-leading-the-way): 探索 2024 年智慧合約審計的發展趨勢，並認識五大頂尖審計公司。其中包括以全面評估、專業報告、EVM 鏈專業知識及卓越客戶滿意度聞名的 BlockSec。 (Apr 8 2024)

[2024 年五大 Solidity 審計供應商：綜合評測](https://blocksec.com/zh-hant/blog/the-top-5-solidity-audit-vendors-in-2024-a-comprehensive-review): 探索 2024 年五大 Solidity 審計供應商，瞭解 BlockSec 如何憑藉卓越的專業技術、客製化解決方案及全面的智能合約安全評估，在行業中脫穎而出。 (Apr 15 2024)

[幣安智能鏈上隱私交易服務的安全與隱私疑慮](https://blocksec.com/zh-hant/blog/the-two-sides-of-the-private-tx-service-on-binance-smart-chain): 本文探討私有交易技術在保護用戶隱私與安全方面所面臨的挑戰。 (Jan 19 2024)

[玫瑰中的荊棘：探索 Uniswap v4 新型 Hook 機制中的安全風險](https://blocksec.com/zh-hant/blog/thorns-in-the-rose-exploring-security-risks-in-uniswap-v4-s-novel-hook-mechanism): 這是我們探討 Uniswap v4 Hook 機制安全風險系列文章的第一篇！本文將為讀者提供全面的概述與基礎知識。 (Nov 6 2023)

[微小捨位釀巨額損失：Balancer 近期安全事件深度解析](https://blocksec.com/zh-hant/blog/tiny-rounding-down-big-fund-losses-an-in-depth-analysis-of-the-recent-balancer-incident): 對2023年8月27日發生的Balancer攻擊事件之全面分析。 (Jan 19 2024)

[2025年十大「精彩」安全事件](https://blocksec.com/zh-hant/blog/top-10-awesome-security-incidents-in-2025): BlockSec盤點2025年十大加密貨幣安全事件：損失金額、根本原因、新型攻擊手法，並提供詳細後續分析，助力強化Web3防禦能力。 (Feb 11 2026)

[2023年十大「精彩」安全事件](https://blocksec.com/zh-hant/blog/top-ten-awesome-security-incidents-in-2023): 在本系列文章中，我們將為您詳細說明 2023 年最值得關注的十大資安事件及其發生原因。 (Feb 5 2024)

[Trace AI：使用AI代理追蹤被盜加密貨幣 | BlockSec](https://blocksec.com/zh-hant/blog/trace-ai-track-stolen-crypto): BlockSec 推出的 Trace AI 可在單次對話中追蹤跨 8 條鏈的被盜加密貨幣，生成完整的資金流向報告，協助您報案或追回資金。 (Jul 10 2026)

[追蹤 16 億美元波場 USDT 去向：解構 VerilyHK 龐氏騙局基礎設施](https://blocksec.com/zh-hant/blog/tracing-16-b-in-tron-usdt-inside-the-verily-hk-ponzi-infrastructure): 這是一項針對詐騙平台 VerilyHK 的鏈上調查。該平台透過多層錢包輪轉、配對支付通道及交易所出金管道，轉移了 16 億美元的波場 USDT，並追蹤到與遭美財政部金融犯罪執法局制裁的匯旺集團存有關聯。 (Apr 8 2026)

[追蹤 Ronin Bridge 被盜資金](https://blocksec.com/zh-hant/blog/tracing-the-stolen-fund-of-the-ronin-bridge): Ronin 橋安全事件：私鑰洩漏導致 173,600 枚 ETH 與 25,500,000 枚 USDC 被竊。駭客迅速將 USDC 兌換為 ETH，目前已有 6,250 枚 ETH 被轉移。 (Apr 18 2024)

[使用 Phalcon Explorer 追蹤 Plasma 上的穩定幣支付](https://blocksec.com/zh-hant/blog/track-stablecoin-payments-on-plasma-with-phalcon-explorer): Phalcon Explorer 支援 Plasma：在原生穩定幣 L1 上分析支付流程、除錯智能合約，並即時監控追蹤資金流向 (Dec 24 2025)

[便利與安全的權衡：ERC20 的無限授權機制](https://blocksec.com/zh-hant/blog/tradeoff-between-convenience-and-security-unlimited-approval-in-erc-20): 探討以太坊 ERC20 代幣標準中「無限授權」機制所帶來的安全風險。 (Jan 12 2024)

[Trust Wallet 事件：API 金鑰遭竊，官方更新頻道淪為後門](https://blocksec.com/zh-hant/blog/trust-wallet-incident-a-stolen-api-key-turns-the-official-update-channel-into-a-backdoor): 2025年12月25日：Trust Wallet Chrome v2.68 版本遭供應鏈攻擊植入後門，竊取用戶種子短語，導致多條區塊鏈上約850萬美元資產被盜。 (Feb 11 2026)

[如何在幣安解凍USDT：5步驟操作指南](https://blocksec.com/zh-hant/blog/unfreeze-usdt-on-binance): 幣安USDT凍結是幣安平台端的合規審查措施(涉及KYC身分驗證、反洗錢AML規範或所屬司法管轄區限制),並非泰達幣(Tether)鏈上黑名單機制。本文提供5步驟申訴實用指南及處理時程說明。 (Aug 4 2026)

[解鎖 Web3 安全：BlockSec 如何應對 DeFi 駭客攻擊](https://blocksec.com/zh-hant/blog/unlocking-web3-security-battling-the-dark-side-1): 在瞬息萬變的 Web3 世界中，安全性至關重要。儘管處於熊市，但 DeFi 駭客攻擊與詐騙事件的激增已引發各界對安全問題的嚴重擔憂。 (Sep 5 2023)

[TxPhishScope：檢測以太坊上基於交易的釣魚攻擊](https://blocksec.com/zh-hant/blog/unveiling-block-sec-s-large-scale-tx-phish-website-detection-system): BlockSec的TxPhishScope在以太坊上偵測到超過33,130個釣魚網站。了解基於交易的釣魚攻擊如何運作，以及如何防範此類威脅。 (Nov 24 2023)

[USDT 與非法金融：新型犯罪手法與合規解決方案](https://blocksec.com/zh-hant/blog/usdt-and-illicit-finance-new-criminal-tactics-and-compliance-solutions): 犯罪者利用USDT在多鏈間進行洗錢、詐騙與欺詐活動。了解六種新興手法，以及Phalcon Compliance如何偵測並攔截非法資金流動。 (Sep 26 2025)

[USDT黑名單2026：誰在名單上，Tether如何決定](https://blocksec.com/zh-hant/blog/usdt-blacklist-explained-2026): USDT黑名單2026:自2018年以來已凍結57億美元、9,597個地址。了解上榜者是誰、Tether為何實施黑名單，以及《GENIUS法案》如何改變相關規則。 (Jul 27 2026)

[USDT凍結2026：誰被凍結、如何查詢、即時數據](https://blocksec.com/zh-hant/blog/usdt-freeze-stablecoin-compliance-guide): USDT凍結機制、即時黑名單數據（57億美元）、解凍途徑，以及受害者資金重發流程。2026年指南，適用於合規團隊、OTC櫃檯與資金接收方。 (Jul 27 2026)

[Phalcon 事務調試：高效分析分步指南](https://blocksec.com/zh-hant/blog/use-phalcon-debug-dive-transaction): 了解如何使用 Phalcon 交易除錯功能，有效分析區塊鏈交易。立即探索除錯模式、控制台及分享工具。 (Mar 29 2023)

[區塊鏈合規平台架構：2026年虛擬資產服務提供者(VASP)監管指南](https://blocksec.com/zh-hant/blog/vasp-blockchain-compliance-platform-architecture-2026): 2026年VASP區塊鏈合規指南。涵蓋KYT交易監控、風險評分、SAR(可疑活動報告)自動化,以及跨司法管轄區API整合等內容。 (Jun 8 2026)

[VASP虛擬資產服務提供者的加密合規義務：實用檢查清單](https://blocksec.com/zh-hant/blog/vasp-compliance-checklist): VASP加密貨幣合規清單:虛擬資產服務提供商應履行的五項義務,對應相應工具,並依第一季建置順序排列,適合精簡團隊參考。 (Sep 9 2026)

[VASP指南：從零開始構建加密貨幣合規軟體堆疊](https://blocksec.com/zh-hant/blog/vasp-crypto-compliance-software-stack-engineering-guide): 針對加密貨幣合規系統的VASP工程指南，涵蓋KYT交易監控流程、SAR可疑活動報告自動化，以及多司法管轄區申報要求。 (Jun 8 2026)

[加密貨幣合規工具：虛擬資產服務提供商的務實採購指南](https://blocksec.com/zh-hant/blog/vasp-crypto-compliance-tools-guide): 針對虛擬資產服務提供商（VASP）的加密貨幣合規工具指南。涵蓋反洗錢監控、錢包篩查、交易監控（KYT）、案件管理，並提供適合中小型虛擬資產服務提供商的成本架構分析。 (Jun 8 2026)

[Venus Thena (THE) 事件：何處崩潰與被忽略的細節](https://blocksec.com/zh-hant/blog/venus-thena-donation-attack): 2026年3月15日，攻擊者利用捐贈攻擊繞過 Venus Protocol 的 THE 供應上限，非法膨脹抵押品至限額的3.67倍並借出約1490萬美元。此事件造成 Venus 約215萬美元壞帳，攻擊者亦損失慘重。本文深入解析其三道防線（風險敞口、抵押定價、清算）的失效原因，及監控體系錯失長期預警的漏洞。 (Mar 18 2026)

[Web3攻擊面:滲透測試概覽](https://blocksec.com/zh-hant/blog/web3-attack-surfaces-penetration-testing): 加密機構區塊鏈滲透測試必涵蓋：四大組件模型與五大攻擊面，從簽名意圖到資金邏輯，全面檢視安全防線。 (Sep 3 2026)

[Web3 伴侶：開源安全代理錢包](https://blocksec.com/zh-hant/blog/web3-companion-secure-agentic-wallet): 目前的 AI 代理錢包存在根本性缺陷。了解 BlockSec 開源的 Web3 Companion 如何隔離私鑰並強制執行嚴格政策，確保資金安全。 (Jun 23 2026)

[面向交易所與機構的 Web3 合規指南](https://blocksec.com/zh-hant/blog/web3-compliance-essentials-for-exchanges-payment-platforms-and-financial-institutions): 了解Web3合規如何應用於交易所、支付平台及金融機構——涵蓋即時反洗錢（AML）篩查與跨鏈資金追蹤等關鍵環節。 (Mar 3 2026)

[超越智能合約:Web3中的網域與DNS營運安全](https://blocksec.com/zh-hant/blog/web3-dns-security-defi-domains): 我們掃描了100個頂級DeFi網域的DNS設定：72%沒有CAA記錄，47%未通過DNSSEC驗證。了解攻擊者用來劫持您前端的安全漏洞。 (Sep 9 2026)

[~$3950萬損失：Allbridge、Wanchain等｜BlockSec週報](https://blocksec.com/zh-hant/blog/web3-security-allbridge-wanchain-exploits): 損失約3,950萬美元。Allbridge約165萬美元因Solana輸入驗證漏洞、AFX Trade約2,415萬美元因私鑰洩露、Wanchain約50萬美元因訊息編碼漏洞、Lien Finance約54.2萬美元因驗證漏洞所致。 (Jul 30 2026)

[~$598萬損失：Aztec、Raydium等｜BlockSec週報](https://blocksec.com/zh-hant/blog/web3-security-aztec-raydium-more): Aztec 215萬美元rollup輸入驗證漏洞、Raydium 134萬美元AMM v3被利用、Top Token 159萬美元治理攻擊事件。完整鏈上分析盡在其中。 (Jun 17 2026)

[~$135萬美元損失：BarnBridge、DeFiTuna | BlockSec 週報](https://blocksec.com/zh-hant/blog/web3-security-barnbridge-defituna-exploits): 損失約135萬美元——BarnBridge在以太坊上遭受約77.6萬美元治理漏洞攻擊，DeFiTuna在Solana上遭受約57萬美元借貸漏洞攻擊。完整鏈上分析。 (Jul 22 2026)

[~$88M損失：COLDCARD與LULA漏洞利用事件 | BlockSec週報](https://blocksec.com/zh-hant/blog/web3-security-coldcard-entropy-lula-exploits): COLDCARD硬體錢包因固件熵值產生失效，導致約1,370枚BTC（約8,800萬美元）在多輪盜轉中被清空；LULA則因BNB Chain儲備遭操縱，損失約57.8萬美元。 (Aug 5 2026)

[損失約2,300萬美元:Cosmos EVM、Moonwell 遭利用 | BlockSec Weekly](https://blocksec.com/zh-hant/blog/web3-security-cosmos-evm-moonwell-exploits): 五起攻擊事件損失約2,270萬美元：涉及六條鏈的Cosmos EVM漏洞（約570萬美元）、Moonwell抵押品與預言機操縱（約910萬美元），以及Ajna、Rain、Tectonic。 (Sep 4 2026)

[損失約 1600 萬美元：DxSale、SquidRouterModule 等項目 | BlockSec 週報](https://blocksec.com/zh-hant/blog/web3-security-dxsale-squidrouter-more): DxSale代幣鎖倉合約遭利用，損失730萬美元；Gravity Bridge跨鏈橋遭攻擊，損失540萬美元；SquidRouterModule濫用Axelar協議，損失320萬美元。完整鏈上分析詳見內文。 (Jun 3 2026)

[Harmony 跨鏈 ONE 鑄幣事件 + 約4700萬美元金鑰洩露損失 | BlockSec](https://blocksec.com/zh-hant/blog/web3-security-harmony-kite-exploits): Harmony跨分片收據重放偽造約3.01兆ONE（名目價值無法變現，已排除）；本週約4700萬美元主要來自三起私鑰洩露事件 (Aug 19 2026)

[~$800K損失：Hinkal雙重支付事件 | BlockSec週報](https://blocksec.com/zh-hant/blog/web3-security-hinkal-double-spend): Hinkal隱私資金池在以太坊上遭遇雙花攻擊，損失約80萬美元。舊版票據格式漏洞疑似讓攻擊者能從單筆存款中重複提款。 (Jul 9 2026)

[~$18M損失：jaredFromSubway、Aztec及更多 | BlockSec每週快報](https://blocksec.com/zh-hant/blog/web3-security-jaredfromsubway-aztec-more): jaredFromSubway 1500萬美元的反向授權漏洞攻擊、Aztec 220萬美元的ZK緊急逃生電路漏洞，還有另一起事件。完整鏈上分析詳見內文。 (Jun 25 2026)

[~$160萬美元損失：Moke代幣、LpdFi遭攻擊利用 | BlockSec週報](https://blocksec.com/zh-hant/blog/web3-security-moke-token-lpdfi-exploits): 約160萬美元因兩起BNB Chain價格操縱漏洞而損失：Moke Token約損失90.6萬美元，肇因於現貨價格操縱及LP股息重複發放；LpdFi約損失69.7萬美元，肇因於AMM儲備金被重複利用。 (Aug 12 2026)

[~$3600萬損失：Summer.fi、Bonzo Lend等平台 | BlockSec週報](https://blocksec.com/zh-hant/blog/web3-security-summerfi-bonzo-lend-exploits): 損失約3,600萬美元:Summer.fi因下架流程不完整,導致股價虛增604萬美元;Bonzo Lend遭遇905萬美元預言機漏洞攻擊;BonkDAO則發生2,120萬美元治理攻擊事件。 (Jul 15 2026)

[~$400萬損失：Taiko、SecondFi遭攻擊 | BlockSec週報](https://blocksec.com/zh-hant/blog/web3-security-taiko-secondfi-exploits): 損失約410萬美元。Taiko跨鏈橋因SGX金鑰洩露及未檢查的除錯屬性遭利用(約170萬美元)。SecondFi的Ed25519漏洞導致私鑰可被還原(約240萬美元) (Jul 1 2026)

[~1026萬美元:Term Finance 與 MAYAChain 攻擊事件 | BlockSec](https://blocksec.com/zh-hant/blog/web3-security-term-finance-mayachain-exploits): Term Finance因治理權遭奪取，導致以太坊上六個金庫損失約850萬美元；MAYAChain因連鎖會計漏洞導致低流動性資金池損失約176萬美元。 (Aug 26 2026)

[損失約 1.046 億美元：Verus、RetoSwap 及其他項目 | BlockSec 每週快報](https://blocksec.com/zh-hant/blog/web3-security-verus-bridge-retoswap-more): Verus跨鏈橋遭利用損失1,170萬美元、RetoSwap仲裁者遭劫持損失270萬美元，另有三起私鑰洩露事件合計損失9,020萬美元。完整鏈上分析詳見內文。 (May 27 2026)

[Zcash Orchard 健全性漏洞分析 | BlockSec 週報](https://blocksec.com/zh-hant/blog/web3-security-zcash-orchard-soundness-bug-analysis): Zcash Orchard電路中的一個健全性漏洞可能導致遮蔽池中出現無法偵測的ZEC偽造。內含完整AI輔助審計報告。 (Jun 10 2026)

[Web3 智能合約與 EVM 鏈安全審計 | BlockSec](https://blocksec.com/zh-hant/blog/web3-smart-contract-evm-chain-audits-blocksec): BlockSec 以攻擊者視角提供 Web3 安全審計、鏈上監測及零日漏洞防禦。憑藉實戰驗證，已成功攔截 20 多起惡意攻擊，避免了超過 2,000 萬美元的損失。 (Dec 4 2025)

[每週 Web3 安全事件彙整 | 2026年4月13日 – 4月19日](https://blocksec.com/zh-hant/blog/weekly-web3-security-incident-roundup-apr-13-apr-19-2026): BlockSec週報涵蓋2026年4月13日至19日間四起安全事件，涉及以太坊、Unichain、Arbitrum及NEAR等多條鏈，總損失約3.1億美元。重點事件為KelpDAO rsETH跨鏈橋遭駭損失2.9億美元，攻擊者污染LayerZero唯一DVN的RPC基礎設施，偽造跨鏈訊息，導致五條鏈上WETH凍結及Arbitrum安全委員會強制狀態轉換，引發對去中心化系統信任邊界的質疑。其他事件包括Hyperbridge MMR證明偽造損失24.2萬美元、Dango有符號整數濫用損失150萬美元，以及Rhea Finance Burrowland協議循環兌換路徑漏洞損失1,840萬美元。 (Apr 22 2026)

[Web3 每週安全事件摘要 | 2026 年 4 月 6 日 – 4 月 12 日](https://blocksec.com/zh-hant/blog/weekly-web3-security-incident-roundup-apr-6-apr-12-2026): 本期BlockSec安全週報涵蓋2026年4月6日至12日間，發生於Linea、BNB Chain等鏈上的四起DeFi攻擊，總損失約92.86萬美元。報告詳析SquidMulticall授權漏洞（51.7萬美元）、HB代幣邏輯漏洞（19.3萬美元）、Denaria舍入錯誤（16.56萬美元）及XBITVault存取控制問題（5.3萬美元），並提供漏洞分析與交易拆解。 (Apr 16 2026)

[每週Web3安全事件彙整｜2026年2月16日至2月22日](https://blocksec.com/zh-hant/blog/weekly-web3-security-incident-roundup-feb-16-feb-22-2026): 2026年2月16日至22日，區塊鏈安全事件三起，總損失約622萬美元，涉及Base、BSC及以太坊。主因包括：治理升級時預言機配置錯誤，誤用原始匯率導致抵押品低估；綁定曲線合約整數溢出，使遊戲代幣近零成本鑄造；以及跨鏈橋驗證者私鑰洩露，攻擊者藉此轉移合約所有權並提取鎖定資產。 (Feb 27 2026)

[Web3 每週安全事件速報 | 2026 年 2 月 2 日 - 2 月 8 日](https://blocksec.com/zh-hant/blog/weekly-web3-security-incident-roundup-feb-2-feb-8-2026): 2026年2月2日至8日，共發生6起區塊鏈安全事件，損失約380萬美元。涉及以太坊與BNB Chain，主因為權限控制漏洞、輸入驗證不當、代幣設計缺陷及用戶誤用，包括跨鏈驗證繞過、惡意路由調用及授權管理不當等。 (Feb 12 2026)

[Web3 安全週報：2026年 2月 23日 – 3月 1日](https://blocksec.com/zh-hant/blog/weekly-web3-security-incident-roundup-feb-23-mar-1-2026): 2026年2月23日至3月1日，共發生7起區塊鏈安全事件，損失約1300萬美元。主要原因包括預言機操作失誤（YieldBloxDAO損失約1000萬美元）、加密驗證缺陷（FOOMCASH損失約226萬美元）及合約邏輯漏洞。各協議需加強審計與監控。 (Mar 4 2026)

[Web3 每週安全事件匯總 | 2026 年 2 月 9 日 – 2 月 15 日](https://blocksec.com/zh-hant/blog/weekly-web3-security-incident-roundup-feb-9-feb-15-2026): 2026年2月9日至15日，BNB鏈發生3起共計約65.7萬美元的DeFi攻擊事件，皆因合約邏輯漏洞所致。駭客利用捐贈膨脹流動性夾擊、代幣回撥機制進行價格操縱，以及覆蓋代幣轉移直接銷毀池內餘額並強迫同步儲備等手段獲利。 (Feb 18 2026)

[Web3 每週安全事件匯總 | 2026 年 1 月 25 日至 2 月 1 日](https://blocksec.com/zh-hant/blog/weekly-web3-security-incident-roundup-jan-25-feb-1-2026): 1月25日至2月1日，區塊鏈發生6起安全事件，損失約1,805萬美元。原因包括輸入驗證不足、代幣設計缺陷、密鑰洩露及業務邏輯錯誤。涉及問題涵蓋未檢查輸入導致任意呼叫、燃燒機制缺陷引發價格操縱、開發工具失守及借貸功能缺乏償付能力檢查。 (Feb 4 2026)

[Web3 每週安全事件摘要 | 2026 年 3 月 16 日 – 3 月 22 日](https://blocksec.com/zh-hant/blog/weekly-web3-security-incident-roundup-mar-16-mar-22-2026): 本期BlockSec週報涵蓋3月16日至22日發生的7起DeFi攻擊，總損失約8270萬美元。核心事件為Resolv協議私鑰遭竊，導致8000萬美元USR遭惡意鑄造。此外，Venus、dTRINITY、Fun.xyz、ShiMama、BlindBox及Keom亦遭遇各類漏洞攻擊與操縱事件。 (Mar 25 2026)

[每週 Web3 安全事件彙整 | 2026年3月2日至3月8日](https://blocksec.com/zh-hant/blog/weekly-web3-security-incident-roundup-mar-2-mar-8-2026): 2026年3月2日至8日，共發生七起區塊鏈安全事件，總損失約325萬美元。事件涉及Base、BNB Chain及以太坊，暴露智能合約業務邏輯、代幣通縮機制及資產價格操縱等關鍵漏洞。主因包括：全額存款時雙重鑄造邏輯缺陷致餘額指數級膨脹；AMM借貸市場價格操縱漏洞致健康倉位被錯誤清算；以及訪問控制缺陷被偽造合約接口繞過，批量鑄造並拋售代幣。 (Mar 25 2026)

[Web3 安全週報 | 2026年3月23日 – 3月29日](https://blocksec.com/zh-hant/blog/weekly-web3-security-incident-roundup-mar-23-mar-29-2026): 本期 BlockSec 週報涵蓋 3/23 至 3/29 期間，以太坊與 BNB Chain 上發生的 8 起 DeFi 安全事件，累計損失約 153 萬美元。包含 BCE 代幣銷毀漏洞（67.9 萬美元）、Cyrus Finance 價差操縱（51.2 萬美元）及 TUR 質押合約閃電貸攻擊（13.35 萬美元）等，另涉及整數溢位、重入及計賬錯誤。報告詳述了漏洞分析與交易拆解。 (Apr 2 2026)

[Web3 安全週報 | 2026年3月30日 – 4月5日](https://blocksec.com/zh-hant/blog/weekly-web3-security-incident-roundup-mar-30-apr-5-2026): 本期 BlockSec 安全週報涵蓋 3/30 至 4/5 期間 9 起 DeFi 攻擊事件，涉及 Solana、BNB Chain、Arbitrum 及 Polygon，總損失約 2.87 億美元。其中 Drift Protocol 因多簽社交工程外洩遭竊 2.853 億美元。報告深入分析漏洞並拆解交易，涵蓋邏輯錯誤、價格操縱及存取控制等問題。 (Apr 9 2026)

[Web3 安全事件週報 | 2026 年 3 月 9 日 – 3 月 15 日](https://blocksec.com/zh-hant/blog/weekly-web3-security-incident-roundup-mar-9-mar-15-2026): 本期BlockSec週報統計2026年3月9日至15日間，以太坊與BNB鏈上8起DeFi攻擊，損失約166萬美元。包含AAVE預言機配置錯誤損失101萬美元、MT代幣交易限制漏洞損失24萬美元、DBXen合約漏洞損失14萬美元及AM Token銷毀機制漏洞損失13萬美元。報告提供詳細分析與交易拆解。 (Mar 18 2026)

[損失 704 萬美元：GiddyDefi、Volo Vault 及更多項目 | BlockSec 週報](https://blocksec.com/zh-hant/blog/weekly-web3-security-roundup-2026-04-26): 約704萬美元損失:GiddyDefi因EIP-712簽名重放攻擊損失130萬美元、Volo Vault因操作員密鑰洩露損失350萬美元、Purrlend損失150萬美元、SingularityFinance因預言機配置錯誤損失41.3萬美元。 (Apr 29 2026)

[損失 1590 萬美元：Trusted Volumes、Wasabi 及更多安全事件 | BlockSec 每週快訊](https://blocksec.com/zh-hant/blog/weekly-web3-security-roundup-2026-05-10): Trusted Volumes 570萬美元RFQ授權繞過漏洞、Wasabi 570萬美元基礎設施遭入侵、Aftermath 114萬美元手續費漏洞被利用。完整鏈上分析詳見內文。 (May 17 2026)

[損失 472 萬美元：TAC、Transit Finance 及更多項目 | BlockSec 每週快報](https://blocksec.com/zh-hant/blog/weekly-web3-security-roundup-2026-05-17): 損失約472萬美元：Transit Finance在TRON上因舊版calldata漏洞損失188萬美元，TAC在TON上因橋接驗證繞過損失280萬美元，Boost Hook因V4現貨價格操縱損失4.675萬美元。 (May 19 2026)

[DeFi 協議面臨哪些安全風險，以及如何確保協議安全？](https://blocksec.com/zh-hant/blog/what-are-the-security-risks-faced-by-de-fi-protocols-and-how-to-ensure-protocol-security): 本文旨在降低風險以確保 DeFi 協議穩健安全，涵蓋程式碼漏洞、營運威脅及外部依賴性等層面，提供全面的安全防護指引。 (Jun 12 2024)

[加密貨幣反洗錢地址審查需要哪些數據？](https://blocksec.com/zh-hant/blog/what-data-needed-crypto-aml-address-check): 加密貨幣反洗錢地址檢查只需輸入一項資訊：錢包地址。了解哪些選填的背景資訊能提升準確度，以及篩查系統會回傳哪些結果。 (Jul 23 2026)

[在職場中PEP是什麼意思？給新任合規團隊成員的簡明解答](https://blocksec.com/zh-hant/blog/what-does-pep-mean): PEP是什麼意思？這是一種風險分類，並非指控：擔任公職會提高洗錢風險。以簡明易懂的方式，為合規團隊新成員解答疑問。 (Sep 9 2026)

[什麼是加密貨幣中基於地址的反洗錢監控？簡明指南](https://blocksec.com/zh-hant/blog/what-is-address-based-aml-monitoring): Phalcon Compliance即時監控區塊鏈地址，比對超過6億個已標記錢包資料庫。了解地址監控如何揪出身分驗證未能發現的非法資金往來風險。 (Jul 21 2026)

[什麼是反洗錢（AML）？五大支柱框架詳解](https://blocksec.com/zh-hant/blog/what-is-anti-money-laundering): 反洗錢（AML）是機構用於偵測、阻止並通報非法資金的框架體系。深入了解反洗錢機制，以及美國金融犯罪執法網絡（FinCEN）銀行保密法（BSA）五大支柱計畫的核心內容。 (Jul 29 2026)

[什麼是 BlockSec Phalcon？Phalcon 如何精準識別並快速阻斷駭客攻擊？](https://blocksec.com/zh-hant/blog/what-is-block-sec-phalcon-how-does-phalcon-accurately-identify-and-rapidly-block-hacker-attacks): 什麼是 BlockSec Phalcon？為什麼協議需要 Phalcon？Phalcon 的技術運作原理為何？我該如何訂閱 Phalcon？本文將為您一一解答。 (Apr 22 2024)

[什麼是區塊鏈滲透測試？定義與界限](https://blocksec.com/zh-hant/blog/what-is-blockchain-penetration-testing): 區塊鏈滲透測試是什麼:針對正在運行系統中可被利用路徑進行的對抗性驗證,並說明其與程式碼審計、漏洞獎勵計畫之間的差異。 (Sep 3 2026)

[加密貨幣中的客戶地址盡職調查：鏈上CDD解析](https://blocksec.com/zh-hant/blog/what-is-customer-address-due-diligence-crypto): 加密貨幣客戶地址盡職調查：解析地址層級盡職調查（CDD）與身份驗證的差異、涵蓋的風險信號，以及為何需要持續監控。 (Jul 23 2026)

[什麼是非法加密貨幣及其如何被標記：合規入門指南](https://blocksec.com/zh-hant/blog/what-is-illicit-crypto): 非法加密貨幣是指與犯罪或受制裁實體有關的加密貨幣。了解兩大類別、三層標記機制,以及為何偵測必須持續進行。 (Jul 27 2026)

[什麼是最佳的 DeFi 駭客檢測與防禦系統？](https://blocksec.com/zh-hant/blog/what-is-the-best-de-fi-hack-detection-and-prevention-system): 探索 DeFi 協定的漏洞、攻擊類型及防禦策略。 (May 31 2024)

[VARA 加密支付公司合規指南](https://blocksec.com/zh-hant/blog/what-is-vara-and-why-does-it-matter-for-payment-companies): 杜拜加密支付公司VARA合規指南：涵蓋牌照申請、AML/KYC、制裁名單、網路安全、公司治理，助您建立隨時可供稽核的合規計畫。 (Mar 23 2026)

[當 MetaDock 遇上 GPT：像專家一樣洞察每一筆交易！](https://blocksec.com/zh-hant/blog/when-meta-dock-met-gpt-see-through-every-transaction-like-an-og): MetaDock 是一款強大的瀏覽器插件，透過地址標籤、資金流向及交易分析等實用工具與說明，全方位提升區塊鏈探索體驗。 (Apr 18 2024)

[當「SafeMint」不再安全：從 HypeBears 安全事件中汲取的教訓](https://blocksec.com/zh-hant/blog/when-safe-mint-becomes-unsafe-lessons-from-the-hype-bears-security-incident): 深入了解 ERC721 合約中「SafeMint」函數的安全漏洞。 (Jan 12 2024)

[當「SafeTransfer」不再安全：QBridge 安全事件的教訓](https://blocksec.com/zh-hant/blog/when-safe-transfer-becomes-unsafe-lessons-from-the-q-bridge-security-incident): QBridge駭客事件分析:了解safeTransfer漏洞如何導致1月28日發生的8000萬美元竊案,以及降低智能合約風險的關鍵修復措施。 (Jan 25 2024)

[從事件到監管:為何加密機構需要區塊鏈滲透測試](https://blocksec.com/zh-hant/blog/why-crypto-institutions-need-blockchain-penetration-testing): 針對加密機構的區塊鏈滲透測試：十大駭客攻擊事件中有7起發生在合約之外，而NYDFS、DORA、VARA、SFC及MAS均要求或期望進行此類測試。 (Sep 4 2026)

[為什麼我的USDT被凍結？4個原因及解決方法（2026）](https://blocksec.com/zh-hant/blog/why-is-my-usdt-frozen): 您的USDT被凍結通常有4個原因:Tether黑名單、交易所暫扣、收款方黑名單,或合規審查。以下針對2026年每種情況提供明確解答與解決方法。 (Aug 4 2026)

[#5 Yearn Finance 事件：不安全的算術運算在 Invariant Solver 中「名副其實」](https://blocksec.com/zh-hant/blog/yearn-finance-incident-unsafe-arithmetic-in-the-invariant-solver-earns-its-name): 深入解析 Yearn yETH 900萬美元漏洞事件：不安全的運算與初始化缺陷。逐步模擬攻擊過程、損失拆解、根因重新分類及修復方案。 (Feb 11 2026)

[又一宗精度損失悲劇：KyberSwap 事件深度分析](https://blocksec.com/zh-hant/blog/yet-another-tragedy-of-precision-loss-an-in-depth-analysis-of-the-kyber-swap-incident-1): 本文深入探討針對 KyberSwap 的攻擊事件，並詳細剖析其根本原因：精度損失。 (Dec 5 2023)

[Stellar 鏈上 YieldBlox DAO 事件：預言機配置錯誤導致逾 1,000 萬美元資金流失](https://blocksec.com/zh-hant/blog/yieldblox-dao-incident-on-stellar-oracle-misconfiguration-enabled-a-10m-drain): 深度解析 YieldBlox DAO 在 Blend V2（Stellar）遭遇的攻擊事件，說明攻擊者如何利用 USTRY/USDC 價格操縱與預言機配置錯誤，導致超過 1,000 萬美元資產遭竊。 (Feb 27 2026)

[zkLend 漏洞事後分析：解析 1,000 萬美元閃電貸攻擊的細節並釐清誤解](https://blocksec.com/zh-hant/blog/zklend-exploit-post-mortem-unraveling-the-details-and-clarifying-misunderstandings-of-the-10m-flash-loan-attack): 本部落格針對 zkLend 事件進行詳細分析，旨在釐清大眾的誤解。 (Feb 20 2025)

## Optional

- [robots.txt](https://blocksec.com/robots.txt)
- [sitemap.xml](https://blocksec.com/sitemap.xml)