Back to Blog

前言:Phalcon 的黑客攻击拦截史

April 23, 2024

自 BlockSec 于 2021 年首次亮相以来,我们一直坚信代码审计本身无法解决所有 Web3 安全问题。因此,我们一直在投入资源探索 Web3 安全的新范式。为此,我们创建了 Phalcon,这是世界上第一个加密货币黑客拦截系统。

在 Phalcon 推出之前,该系统已在内部运行了 2 年,成功拦截了 20 多起黑客攻击,并挽救了价值超过 2000 万美元的资产,其中包括为 Saddle Finance 挽救了 380 万美元,为 Platypus 挽救了 240 万美元,为 ParaSpace 挽救了 500 万美元,以及更多。

在本系列文章中,我们将展示我们系统 Phalcon 的代表性案例。通过分享这些案例,我们的目标不仅仅是验证我们系统的有效性。我们还希望展示主动防御措施的变革性影响。

面对威胁,我们并非无能为力。携手共进,我们可以开创 Web3 安全的新时代。

详细拆解:全面概述

关于 Phalcon

Phalcon 是 BlockSec 开发的一个安全平台,用于监控和拦截黑客攻击。该系统检测可疑交易,即时通知用户,并采取自动化行动进行响应。

Phalcon 是一个 SaaS 平台,用户可以直接通过我们的官方网站登录查看不同的定价方案和功能,并立即订阅(支持信用卡和加密货币支付)。如有任何疑问,欢迎预约演示,我们的安全专家将为您解答疑虑。

支持工具:Phalcon Explorer

Phalcon Explorer 是 Phalcon 平台的一个支持工具。这个强大的交易浏览器专为 DeFi 社区设计。它提供关于调用流程、余额变化和交易资金流动的全面数据,并支持交易模拟。这有助于开发人员、安全研究人员和交易者更直观地理解交易。

Sign up for the latest updates
Drift Protocol Incident: Multisig Governance Compromise via Durable Nonce Exploitation
Security Insights

Drift Protocol Incident: Multisig Governance Compromise via Durable Nonce Exploitation

On April 1, 2026 (UTC), Drift Protocol on Solana suffered a $285.3M loss after an attacker exploited Solana's durable nonce mechanism to delay the execution of phished multisig approvals, ultimately transferring administrative control of the protocol's 2-of-5 Squads governance with zero timelock. With full admin privileges, the attacker created a malicious collateral market (CVT), inflated its oracle price, relaxed withdrawal protections, and drained USDC, JLP, SOL, cbBTC, and other assets through 31 rapid withdrawals in approximately 12 minutes. This incident highlights how durable nonce-based delayed execution can decouple signer intent from on-chain execution, bypassing the temporal assumptions that multisig security implicitly relies on.

Weekly Web3 Security Incident Roundup | Mar 23 – Mar 29, 2026
Security Insights

Weekly Web3 Security Incident Roundup | Mar 23 – Mar 29, 2026

This BlockSec weekly security report covers eight DeFi attack incidents detected between March 23 and March 29, 2026, across Ethereum and BNB Chain, with total estimated losses of approximately $1.53M. Incidents include a $679K flawed burn mechanism exploit on the BCE token, a $512K spot-price manipulation attack on Cyrus Finance's PancakeSwap V3 liquidity withdrawal, a $133.5K flash-loan-driven referral reward manipulation on a TUR staking contract, and multiple integer overflow, reentrancy, and accounting error vulnerabilities in DeFi protocols. The report provides detailed vulnerability analysis and attack transaction breakdowns for each incident.

Newsletter -  March 2026
Security Insights

Newsletter - March 2026

In March 2026, the DeFi ecosystem experienced three major security incidents. Resolv Protocol lost ~$80M due to compromised privileged infrastructure keys, BitcoinReserveOffering suffered ~$2.7M from a double-minting logic flaw, and Venus Protocol incurred ~$2.15M following a donation attack combined with market manipulation.