慢雾科技
1543Followers28Articles
Fake Zoom conference phishing leads to millions of dollars in losses: A deep dive into the attack methods
Users should verify carefully before clicking on the meeting link to avoid executing software and commands from unknown sources.
慢雾科技2025-09-08 11:00
Technical guidance: Smart contract implementation guide for Hong Kong stablecoin issuers
This section aims to lay the high-level architectural foundation for the stablecoin system. These architectural decisions are driven entirely by the most fundamental requirements of the Hong Kong Monetary Authority (HKMA) framework.
慢雾科技2025-07-23 05:00
Malicious robots reappear in Solana ecosystem: Private key leak trap hidden in configuration files
The Rust project performs covert network requests during the configuration initialization phase and dynamically decodes the attack server address.
慢雾科技2025-07-22 04:00
The whole story of the collapse of the Xinkangjia DGCX scam: Where did the 13 billion yuan of funds go?
On-chain behavior shows that the project may have built a complex multi-level funding structure, with funds flowing in from a centralized entrance and then flowing out after multiple transfers, initially possessing the on-chain operation characteristics common to Ponzi schemes.
慢雾科技2025-07-13 06:53
Aeza Group, a Russian service provider behind hackers, dark web and drug markets, is sanctioned
This article will sort out the background and operation model of Aeza Group, and combine the analysis of on-chain anti-money laundering and tracking tool MistTrack to restore its role in the criminal ecosystem.
慢雾科技2025-07-10 05:00
Physical kidnapping: The spanner attack after Bitcoin's new high
As the value of crypto assets continues to rise, wrench attacks against crypto users are becoming more frequent. This article will analyze this type of attack method in depth, review typical cases, sort out the criminal chain behind it, and put forward practical prevention and response suggestions.
慢雾科技2025-07-08 05:00
Malicious NPM package steals private keys, Solana user assets are stolen
Malicious open source projects implanted backdoor NPM packages to steal user private keys, resulting in the theft of Solana wallet assets.
慢雾科技2025-07-04 04:00
The “Phantom” on the Chain: Huiwang Payment Behind the Circulation of Over 55 Billion USDT
As the global fight against online fraud, underground payment networks and illegal cross-border money laundering continues to intensify, a platform called HuionePay has attracted great attention from regulators.
慢雾科技2025-06-24 05:00
Nearly $100 million stolen: Iranian exchange Nobitex theft incident
The attacker not only transferred the funds, but also actively transferred a large amount of assets to a specially designed destruction address. The value of the assets that were "burned" was nearly 100 million US dollars.
慢雾科技2025-06-20 07:00
Web3 Security Guide: Common Pitfalls of Hardware Wallets
This article will focus on the three major aspects of hardware wallet purchase, use and storage, sort out common risks, analyze typical scams based on real cases, and provide practical protection suggestions to help users effectively protect the security of encrypted assets.
慢雾科技2025-06-19 07:00
Pandora's Box: How do unlimited large models threaten the security of the encryption industry?
This article will review typical unrestricted LLM tools, introduce how they are abused in the crypto industry, and explore related security challenges and solutions.
慢雾科技2025-06-05 08:00
Analysis of the Cork Protocol hack: Losses exceed 10 million US dollars
The root cause of this attack is that the data passed by the user was not strictly verified to be in line with expectations, which allowed the protocol liquidity to be manipulated and transferred to unexpected markets, and then illegally redeemed by the attacker for profit.
慢雾科技2025-05-30 06:00
SlowMist: Cetus was stolen for $230 million, analyzing the attack methods and fund transfer
This attack demonstrates the power of math overflow vulnerabilities.
慢雾科技2025-05-25 08:30
"Customer Service" in the Dark Forest: When Social Engineering Scams Target Coinbase Users
Since 2025, a large number of social engineering scams targeting Coinbase users have continued to surface, attracting widespread attention from the community.
慢雾科技2025-05-22 11:00
UNODC releases fraud report in Southeast Asia: Cryptocurrency becomes a tool for crime, and all parties need to strengthen international cooperation
This article will analyze the following four dimensions: Southeast Asia’s criminal ecosystem, global expansion beyond Southeast Asia, emerging illegal network markets and money laundering services, and transnational criminal networks and global law enforcement collaboration.
慢雾科技2025-05-08 11:00
Interpreting the FBI’s 2024 Cryptocurrency Fraud Report
This article will interpret the core content of the "2024 Cryptocurrency Fraud Report" to help readers quickly grasp trend changes and improve their understanding and prevention capabilities of complex network security threats.
慢雾科技2025-05-07 02:00
Starting from actual combat: hidden poisoning and manipulation in the MCP system
The MCP (Model Context Protocol) system is still in its early stages of development. The overall environment is relatively chaotic, and various potential attack methods emerge in an endless stream. It is difficult to defend against the current design of protocols and tools.
慢雾科技2025-04-29 10:00
First aid guide: Don’t panic if your BTC is stolen, leave a message on the chain first
On-chain messages, as a special way of communication in the blockchain world, have been frequently used in various security incidents in recent years.
慢雾科技2025-04-24 01:00
Web3 Security Beginner's Guide to Avoiding Pitfalls: How to Ensure Clipboard Security?
This issue will focus on clipboard security, and will help you understand its principles, attack methods, and the prevention suggestions we have summarized in practice, to help users build a more solid asset protection awareness.
慢雾科技2025-04-18 11:00
Deadly Remains: A $300,000 On-Chain Heist Triggered by Transient Storage
The root cause of this hack is that the value of transient storage in tstore is not cleared after the function call ends, which allows attackers to use this feature to construct specific malicious addresses to bypass permission checks and transfer tokens.
慢雾科技2025-04-01 01:00
Hacker teaches you how to get CZ for free with 0.01 BNB
We discovered a vulnerability in ReachMe.io that allows you to Say Hi to any user at a low cost, so we immediately contacted the project team and provided details of the vulnerability verification.
慢雾科技2025-03-31 08:00
Ethereum is about to usher in the Pectra upgrade: a deep discussion of EIP-7702 and best practices
This article will deeply analyze the implementation mechanism of EIP-7702, explore the opportunities and challenges it may bring, and provide practical operation guidelines for different participants.
慢雾科技2025-03-27 10:00
Another risk incident with Google plug-ins: SwitchyOmega was exposed to steal private keys. How to prevent plug-ins from being tampered with?
This article will analyze the situation of SwitchyOmega plug-in tampering and explore how to prevent plug-in tampering and deal with malicious plug-ins.
慢雾科技2025-03-13 08:00
The browser encryption wallet is suddenly damaged. How to avoid the risk of asset loss?
Crypto wallet extensions usually store private keys. If not handled properly, it may lead to loss of wallet data or even inability to recover assets.
慢雾科技2025-03-06 07:00
In-depth analysis of the Safe dilemma: Can Guard reconstruct the contractual Babel?
On-chain analysis shows that the attacker obtained multi-signature permissions through sophisticated social engineering attacks, implanted malicious logic using the delegatecall function of the Safe contract, and ultimately bypassed the multi-signature verification mechanism to transfer funds to an anonymous address.
慢雾科技2025-02-27 05:00
Industry News
Market Trends
Curated Readings
Subscribe