Slow Mist Security Team

The Slow Fog security team received invitations from multiple teams to conduct forensic investigations into several hacking incidents.

Hacker organizations, especially state-sponsored hackers like the Lazarus Group, are continuously upgrading their attack methods.

In January 2025, there were a total of 40 hacking incidents in Web3 security, resulting in losses of approximately $87.94 million, with $1.47 million recovered. The causes of the incidents included contract vulnerabilities, account hacks, and private key leaks. Additionally, there were 9,220 victims of phishing incidents this month, with losses amounting to $10.25 million.

We hope this report can contribute to the safe development of the blockchain ecosystem.

In July 2024, a total of 37 security incidents occurred, resulting in an estimated loss of approximately 279 million dollars, of which 8.76 million dollars was recovered.

Analysis of UwU Lend Being Hacked

Be cautious of those who send you private messages. Nowadays, hackers and scammers like to impersonate legitimate, well-known projects, targeting content creators for scams under the guise of funding, promotion, and other reasons.

This article is a joint analysis of disclosed addresses conducted by Bitrace & MistTrack, including: patterns of fund inflow and outflow for addresses, risks of fund sources for addresses, activities of associated addresses, etc., aimed at disclosing relevant analytical content.

This attack is a typical example of using flash loans for price manipulation, allowing the attacker to borrow more tokens from the Cream lending pool.