Back to Blog

前言:Phalcon 的黑客攻击拦截史

April 23, 2024

自 BlockSec 于 2021 年首次亮相以来,我们一直坚信代码审计本身无法解决所有 Web3 安全问题。因此,我们一直在投入资源探索 Web3 安全的新范式。为此,我们创建了 Phalcon,这是世界上第一个加密货币黑客拦截系统。

在 Phalcon 推出之前,该系统已在内部运行了 2 年,成功拦截了 20 多起黑客攻击,并挽救了价值超过 2000 万美元的资产,其中包括为 Saddle Finance 挽救了 380 万美元,为 Platypus 挽救了 240 万美元,为 ParaSpace 挽救了 500 万美元,以及更多。

在本系列文章中,我们将展示我们系统 Phalcon 的代表性案例。通过分享这些案例,我们的目标不仅仅是验证我们系统的有效性。我们还希望展示主动防御措施的变革性影响。

面对威胁,我们并非无能为力。携手共进,我们可以开创 Web3 安全的新时代。

详细拆解:全面概述

关于 Phalcon

Phalcon 是 BlockSec 开发的一个安全平台,用于监控和拦截黑客攻击。该系统检测可疑交易,即时通知用户,并采取自动化行动进行响应。

Phalcon 是一个 SaaS 平台,用户可以直接通过我们的官方网站登录查看不同的定价方案和功能,并立即订阅(支持信用卡和加密货币支付)。如有任何疑问,欢迎预约演示,我们的安全专家将为您解答疑虑。

支持工具:Phalcon Explorer

Phalcon Explorer 是 Phalcon 平台的一个支持工具。这个强大的交易浏览器专为 DeFi 社区设计。它提供关于调用流程、余额变化和交易资金流动的全面数据,并支持交易模拟。这有助于开发人员、安全研究人员和交易者更直观地理解交易。

Sign up for the latest updates
Tether Freezes $6.76M USDT Linked to Iran's IRGC & Houthi Forces: Why On-Chain Compliance is Now a Geopolitical Battlefield
Security Insights

Tether Freezes $6.76M USDT Linked to Iran's IRGC & Houthi Forces: Why On-Chain Compliance is Now a Geopolitical Battlefield

Looking ahead, targeted freezing events like this $6.76M USDT action will only become more common. On-chain data analysis is improving. Stablecoin issuers are also working closely with regulators. As a result, hidden illicit financial networks will be exposed.

Weekly Web3 Security Incident Roundup | Mar 2 – Mar 8, 2026
Security Insights

Weekly Web3 Security Incident Roundup | Mar 2 – Mar 8, 2026

During the week of March 2 to March 8, 2026, seven blockchain security incidents were reported with total losses of ~$3.25M. The incidents occurred across Base, BNB Chain, and Ethereum, exposing critical vulnerabilities in smart contract business logic, token deflationary mechanics, and asset price manipulation. The primary causes included a double-minting logic flaw during full token deposits that allowed an attacker to exponentially inflate their balances through repeated burn-and-mint cycles, a price manipulation vulnerability in an AMM-based lending market where artificially inflated vault shares created divergent price anchors to incorrectly force healthy positions into liquidation, and a flawed access control implementation relying on trivially spoofed contract interfaces that enabled attackers to bypass authorization to batch-mint and dump arbitrary tokens.

Weekly Web3 Security Incident Roundup | Feb 23 – Mar 1, 2026
Security Insights

Weekly Web3 Security Incident Roundup | Feb 23 – Mar 1, 2026

During the week of February 23 to March 1, 2026, seven blockchain security incidents were reported with total losses of ~$13M. The incidents affected multiple protocols, exposing critical weaknesses in oracle design/configuration, cryptographic verification, and core business logic. The primary drivers included oracle manipulation/misconfiguration that led to the largest loss at YieldBloxDAO (~$10M), a crypto-proof verification flaw that enabled the FOOMCASH (~$2.26M) exploit, and additional token design and logic errors impacting Ploutos, LAXO, STO, HedgePay, and an unknown contract, underscoring the need for rigorous audits and continuous monitoring across all protocol layers.