BlockSec 与 OKX Explorer 合作加强链上数据合规性

November 18, 2024

领先的区块链安全公司BlockSec与全球顶级区块链探索者之一OKX Explorer建立了战略合作伙伴关系。此次合作的重点是区块链数据互操作性、产品集成和 API 增强。BlockSec 和 OKX Explorer 将发挥各自的优势，为用户提供更好的区块链分析工具，打造一个更安全、更透明的生态系统。

关于 BlockSec

BlockSec是一家全栈Web3安全服务提供商。公司致力于提高新兴Web3世界的安全性和可用性，以促进其大规模应用。为此，BlockSec提供智能合约和EVM链安全审计服务、用于安全开发和主动阻止威胁的Phalcon平台、用于资金跟踪和调查的MetaSleuth平台，以及用于Web3构建者在加密世界中高效冲浪的MetaSuites扩展。

有关 BlockSec 的更多信息，请访问 https://blocksec.com/。

关于OKX Explorer

OKX Explorer是一个领先的区块链搜索引擎和Web3分析平台，广泛覆盖超过55个公有链，包括BTC和EVM L1和L2链，以及Tron和Solana等异构链。它提供全面的链上数据、开发者工具、强大的 OpenAPI 和 Explorer 即服务解决方案。

有关 OKX Explorer 的更多信息，请访问 https://www.okx.com/web3/explorer。

Tracing $1.6B in TRON USDT: Inside the VerilyHK Ponzi Infrastructure

Apr 8 2026Case Studies

Tracing $1.6B in TRON USDT: Inside the VerilyHK Ponzi Infrastructure

An on-chain investigation into VerilyHK, a fraudulent platform that moved $1.6B in TRON USDT through a multi-layered fund-routing infrastructure of rotating wallets, paired payout channels, and exchange exit funnels, with traced connections to the FinCEN-sanctioned Huione Group.

Weekly Web3 Security Incident Roundup | Mar 30 – Apr 5, 2026

Apr 8 2026Security Insights

Weekly Web3 Security Incident Roundup | Mar 30 – Apr 5, 2026

This BlockSec weekly security report covers nine DeFi attack incidents detected between March 30 and April 5, 2026, across Solana, BNB Chain, Arbitrum, and Polygon, with total estimated losses of approximately $287M. The week was dominated by the $285.3M Drift Protocol exploit on Solana, where attackers combined multisig signer social engineering with Solana's durable nonce mechanism to bypass a zero-timelock 2-of-5 Security Council, alongside notable incidents including a $950K flash loan TWAP manipulation against the LML staking protocol, a $359K Silo Finance vault inflation via an external `wstUSR` market donation exploiting a depegged-asset oracle and `totalAssets()` accounting flaw, and an EIP-7702 delegated-code access control failure. The report provides detailed vulnerability analysis and attack transaction breakdowns for each incident, covering flawed business logic, access control, price manipulation, phishing, and misconfiguration attack types.

Drift Protocol Incident: Multisig Governance Compromise via Durable Nonce Exploitation

Apr 3 2026Security Insights

Drift Protocol Incident: Multisig Governance Compromise via Durable Nonce Exploitation

On April 1, 2026 (UTC), Drift Protocol on Solana suffered a $285.3M loss after an attacker exploited Solana's durable nonce mechanism to delay the execution of phished multisig approvals, ultimately transferring administrative control of the protocol's 2-of-5 Squads governance with zero timelock. With full admin privileges, the attacker created a malicious collateral market (CVT), inflated its oracle price, relaxed withdrawal protections, and drained USDC, JLP, SOL, cbBTC, and other assets through 31 rapid withdrawals in approximately 12 minutes. This incident highlights how durable nonce-based delayed execution can decouple signer intent from on-chain execution, bypassing the temporal assumptions that multisig security implicitly relies on.