Chain News Today TheBitTimes.com

Unveiling DeFi Weaknesses: Why Security Audits Matter! As decentralized finance (DeFi) continues to revolutionize the financial landscape, it brings tremendous benefits to users worldwide, from decentralized lending and borrowing to innovative yield farming strategies. However, with great opportunity comes great risk. The highly technical nature of DeFi protocols means they are often susceptible to exploits, hacks, and bugs that can result in millions of dollars lost within seconds. In this volatile environment, security audits emerge as an essential safeguard, helping ensure the robustness and reliability of DeFi projects. What are Security Audits in DeFi? Security audits are comprehensive reviews of a project’s smart contracts, protocols, and overall architecture. These audits are conducted by independent experts or firms who meticulously examine the code for vulnerabilities, inefficiencies, and potential exploit points. With DeFi protocols being open-source, transparency can be both...

Cybersecurity firm CertiK reported that as of August, over $997 million was lost to flash loan attacks, exit scams and exploits in 2023. Malicious actors targeting the crypto space have taken more than $45 million in digital assets from their victims in the month of August alone and a total of $997 million year-to-date (YTD), according to a report shared by the blockchain security firm CertiK. In the report, CertiK highlighted that exit scams took around $26 million, flash loan attacks took $6.4 million and exploits took $13.5 million from their victims in August 2023. The cybersecurity firm confirmed that the total losses amounted to over $45 million. Major incidents that happened in August. Source: CertiK CertiK pointed out that some of the major incidents that contributed to the amount lost include the Zunami Protocol attack, which led to $2.2 million in losses; the Exactly Protocol exploit, which took $7.3 million; and the PEPE (PEPE) withdrawal incident, which led to $13.2 milli...

The bug would have allowed malicious validators to compromise the network and applications that rely on it, including Celer’s cBridge. Web3 investor and developer Jump Crypto has identified a vulner ability in Celer’s State Guardian Network (SGN) that would allow malicious validators to compromise the network and applications dependent on it, including Celer’s cBridge. According to Jump Crypto’s postmortem report, validators were allowed to vote more than once on the same update due to a bug in the SGN EndBlocker code. By allowing validators to vote multiple times, malicious actors could multiply their voting power to approve harmful updates. The report explained: “The [EndBlocker] code is missing a check that prevents a validator from voting on the same update twice. A malicious validator could exploit this by voting multiple times on the same update, effectively multiplying their voting power and potentially tipping the vote in favor of an invalid or malicious update." Celer...

The amount of social engineering attacks in the cryptocurrency industry has been rising, with major execs getting hacked recently. Binance CEO Changpeng “CZ” Zhao is the latest figure in the cryptocurrency industry to warn against the increasing number of phishing attacks. CZ took to Twitter on July 21 to warn his readers about phishing and other social engineering scams . He also recommended cryptocurrency exchange users rely on hardware devices for two-factor authentication (2FA), instead of using mobile carrier-based 2FA for example. “Best to enable 2FA with a hardware device (Yubikey) on all crypto exchanges,” Binance CEO wrote. Zhao’s warning came shortly after Uniswap founder Hayden Adams had his Twitter account compromised on July 20. After taking over Adams’ account, the attacker attempted to scam his followers through a malicious link posted on his page. Members of Crypto Twitter have quickly identified and warned others against the scam. Adams subsequently restored access...

As DeFi bleeds billions of dollars annually due to token bridge attacks, a new layer-2 solution seeks a solution from within the Bitcoin blockchain. Decentralized finance (DeFi) saw a record inflow from centralized exchanges as crypto users flocked to self-custody solutions following the FTX collapse. Over 100,000 Bitcoin (BTC) left crypto exchanges so investors could avoid third-party custody. True to the “not your keys, not your coins” mantra of Bitcoin, DeFi solves a wide array of problems associated with centralized entities. However, several reports indicate DeFi is not a fail-safe environment, as high-profile protocol exploits like Wormhole, Nomad and Ronin made headlines in 2022 for the wrong reasons. Source: Token Terminal DeFi exploiters particularly target cross-chain bridges. In fact, cross-chain bridge exploits account for more than half of all DeFi exploits since September 2020, with approximately $2.5 billion lost to these attacks. A Chainalysis report shows that token b...