Back to Blog

Phalcon 的黑客攻击阻断历程

April 23, 2024
3 min read

自 BlockSec 于 2021 年首次亮相以来,我们一直认为代码审计本身无法解决所有 Web3 安全问题。因此,我们一直在投资探索 Web3 安全的新范式。为此,我们创建了 Phalcon,这是世界上第一个加密货币黑客阻止系统。

在 Phalcon 推出之前,该系统已在内部运行 2 年,成功阻止了 20 多起黑客攻击,并挽救了价值超过 2000 万美元的资产,其中包括为 Saddle Finance 挽救了 380 万美元,为 Platypus 挽救了 240 万美元,为 ParaSpace 挽救了 500 万美元,等等。

在本系列文章中,我们将展示我们系统 Phalcon 的代表性故事。通过分享这些案例,我们的目标不仅仅是验证我们系统的有效性。我们还希望展示主动防御措施的变革性影响。

面对威胁,我们并非无能为力。携手共进,我们可以迎来 Web3 安全的新时代。

深入解析:全面概述

关于 Phalcon

Phalcon 是 BlockSec 开发的一个安全平台,用于监控和阻止黑客攻击。该系统检测可疑交易,即时提醒用户,并采取自动响应措施。

Phalcon 的用例
Phalcon 的用例

Phalcon 是一个 SaaS 平台,用户可以直接通过我们的官方网站 登录,查看不同的定价方案和功能,并立即订阅(支持信用卡和加密货币支付)。如有任何问题,请随时与我们的安全专家 预约演示,他们将为您解答疑虑。

支持工具:Phalcon Explorer

Phalcon Explorer 是 Phalcon 平台的一个支持工具。这个强大的交易浏览器专为 DeFi 社区设计。它提供有关调用流程、余额变化和交易资金流向的全面数据,并支持交易模拟。这有助于开发人员、安全研究人员和交易者更直观地理解交易。

Sign up for the latest updates
The Decentralization Dilemma: Cascading Risk and Emergency Power in the KelpDAO Crisis
Security Insights

The Decentralization Dilemma: Cascading Risk and Emergency Power in the KelpDAO Crisis

This BlockSec deep-dive analyzes the KelpDAO $290M rsETH cross-chain bridge exploit (April 18, 2026), attributed to the Lazarus Group, tracing a causal chain across three layers: how a single-point DVN dependency enabled the attack, how DeFi composability cascaded the damage through Aave V3 lending markets to freeze WETH liquidity exceeding $6.7B across Ethereum, Arbitrum, Base, Mantle, and Linea, and how the crisis forced decentralized governance to exercise centralized emergency powers. The article examines three parameters that shaped the cascade's severity (LTV, pool depth, and cross-chain deployment count) and provides an exclusive technical breakdown of Arbitrum Security Council's forced state transition, an atomic contract upgrade that moved 30,766 ETH without the holder's signature.

Weekly Web3 Security Incident Roundup | Apr 13 – Apr 19, 2026
Security Insights

Weekly Web3 Security Incident Roundup | Apr 13 – Apr 19, 2026

This BlockSec weekly security report covers four attack incidents detected between April 13 and April 19, 2026, across multiple chains such as Ethereum, Unichain, Arbitrum, and NEAR, with total estimated losses of approximately $310M. The highlighted incident is the $290M KelpDAO rsETH bridge exploit, where an attacker poisoned the RPC infrastructure of the sole LayerZero DVN to fabricate a cross-chain message, triggering a cascading WETH freeze across five chains and an Arbitrum Security Council forced state transition that raises questions about the actual trust boundaries of decentralized systems. Other incidents include a $242K MMR proof forgery on Hyperbridge, a $1.5M signed integer abuse on Dango, and an $18.4M circular swap path exploit on Rhea Finance's Burrowland protocol.

Weekly Web3 Security Incident Roundup | Apr 6 – Apr 12, 2026
Security Insights

Weekly Web3 Security Incident Roundup | Apr 6 – Apr 12, 2026

This BlockSec weekly security report covers four DeFi attack incidents detected between April 6 and April 12, 2026, across Linea, BNB Chain, Arbitrum, Optimism, Avalanche, and Base, with total estimated losses of approximately $928.6K. Notable incidents include a $517K approval-related exploit where a user mistakenly approved a permissionless SquidMulticall contract enabling arbitrary external calls, a $193K business logic flaw in the HB token's reward-settlement logic that allowed direct AMM reserve manipulation, a $165.6K exploit in Denaria's perpetual DEX caused by a rounding asymmetry compounded with an unsafe cast, and a $53K access control issue in XBITVault caused by an initialization-dependent check that failed open. The report provides detailed vulnerability analysis and attack transaction breakdowns for each incident.