冰棒金融攻击的模仿者

冰棒金融攻击的模仿者

我们的系统观察到一些调用了 SorbettoFragola 合约的“collectFees(0,0)”的交易。其中一些是想要发起类似 (0xcd7dae143a4c0223349c16237ce4cd7696b1638d116a72755231ede872ab70fc) 攻击的模仿者。幸运的是,池中的代币数量有限。

“2021–08–04T12:17:27Z” : [ “0xfdeb455027202aa1e82e0eef85075870db0fb4a2427e81bc3a01973024923c39” ],

“2021–08–07T07:33:36Z” : [ “0xdb5303b6e5aa0148bdd31fd5c51319243940755e956002b820033b1eba602ef6” ],

“2021–08–03T22:53:42Z” : [ “0xcd7dae143a4c0223349c16237ce4cd7696b1638d116a72755231ede872ab70fc” ],

“2021–07–21T22:06:24Z” : [ “0x631cdd776ceeb062a6c71ebddd7357a5d873182446382c03bd8abaf85deb69e4” ],

“2021–08–04T11:01:18Z” : [ “0xa4430da5cc039b84213b44e4ca6ade9750fab987fbab3da27a11bbd0c7d23ee6” ],

“2021–08–05T14:46:05Z” : [ “0xf7d36fff17b56d5396539c8573ffeb8abd4b67ee22f4a7c492f2bd0ddfba8272” ],

“2021–08–06T11:26:57Z” : [ “0xb25e3f872896a0fde22ce60b57553b5304aa4584c47bdb293589bdbd3317de65” ],

“2021–08–05T11:52:23Z” : [ “0x1af887449dac564272fa15a8d91012759e40c1356b6ffcd5c88d2ac50c8c8502” ],

“2021–08–04T10:22:49Z” : [ “0xe86742e4c6831c6a46278d9a0143adbc8885a6f56191c52045e775ee22f870b0” ],

“2021–08–02T05:36:13Z” : [ “0x2016024bcb3ab283f367dfb34fced088db170c3c6cd026aa9f5c968654fd0142” ],

“2021–07–31T01:56:50Z” : [ “0xf34d0039dc0b20174e77cec510d7a094a2e81b4161a2a537de95b1fd089ae6f9” ],

“2021–08–06T07:34:22Z” : [ “0x2810a6f9f158c4e463e165e0aee6fecb1e617295e2215e015ee03d7265bd1e5a” ],

“2021–08–04T08:39:46Z” : [ “0xcc5a321ac3897beae976bceeeb651fa62f9975df90dd6431e73a8416bdf723b9” ]

关于 BlockSec

BlockSec 是一家开创性的区块链安全公司,由一群全球知名的安全专家于 2021 年创立。公司致力于提升新兴 Web3 世界的安全性和可用性,以促进其大规模采用。为此,BlockSec 提供智能合约和 EVM 链安全审计服务,用于安全开发和主动拦截威胁的 Phalcon 平台,用于资金追踪和调查的 MetaSleuth 平台,以及供 Web3 构建者在加密世界高效冲浪的 MetaSuites 扩展。

迄今为止,公司已为 MetaMask、Uniswap Foundation、Compound、Forta 和 PancakeSwap 等 300 多家知名客户提供服务,并在两轮融资中从 Matrix Partners、Vitalbridge Capital 和 Fenbushi Capital 等知名投资者那里获得了数千万美元的投资。

官方网站:https://blocksec.com/

官方 Twitter 账号:https://twitter.com/BlockSecTeam

Sign up for the latest updates
Weekly Web3 Security Incident Roundup | Feb 9 – Feb 15, 2026

Weekly Web3 Security Incident Roundup | Feb 9 – Feb 15, 2026

During the week of February 9 to February 15, 2026, three blockchain security incidents were reported with total losses of ~$657K. All incidents occurred on the BNB Smart Chain and involved flawed business logic in DeFi token contracts. The primary causes included an unchecked balance withdrawal from an intermediary contract that allowed donation-based inflation of a liquidity addition targeted by a sandwich attack, a post-swap deflationary clawback that returned sold tokens to the caller while draining pool reserves to create a repeatable price-manipulation primitive, and a token transfer override that burned tokens directly from a Uniswap V2 pair's balance and force-synced reserves within the same transaction to artificially inflate the token price.

Top 10 "Awesome" Security Incidents in 2025

Top 10 "Awesome" Security Incidents in 2025

To help the community learn from what happened, BlockSec selected ten incidents that stood out most this year. These cases were chosen not only for the scale of loss, but also for the distinct techniques involved, the unexpected twists in execution, and the new or underexplored attack surfaces they revealed.

#10 Panoptic Incident: XOR Linearity Breaks the Position Fingerprint Scheme

#10 Panoptic Incident: XOR Linearity Breaks the Position Fingerprint Scheme

On August 29, 2025, Panoptic disclosed a Cantina bounty finding and confirmed that, with support from Cantina and Seal911, it executed a rescue operation on August 25 to secure roughly $400K in funds. The issue stemmed from a flaw in Panoptic’s position fingerprint calculation algorithm, which could have enabled incorrect position identification and downstream fund risk.