certik

Web3 security company CertiK released the "2026 First Half Wrench Attack Report." The report shows that in the first half of 2026, a total of 52 publicly verified wrench attack incidents were recorded globally, an increase of 33.3% year-on-year; related losses amounted to approximately $124 million, an increase of about 11.8 times compared to the same period last year.The report points out that attackers are shifting from exploiting technical vulnerabilities to targeting asset holders and their real-world relationship networks, with home invasion incidents rising from 1 in the first half of 2025 to 20, accounting for 41% of the total incidents during the same period. Europe has become a high-frequency attack region, with 33 incidents occurring in France, accounting for 63.5% of global cases.CertiK states that as real-world risks become a significant challenge for digital asset security, businesses and high-value individuals need to establish a more comprehensive protection system. CertiK has launched operational security services to help identify risks related to the exposure of information such as identity, home, residence, and travel trajectory; at the same time, through CertiK Security Workspace, it correlates off-chain intelligence, on-chain transactions, and AML risk signals to support institutions in tracking and analyzing cybercrime activities.In addition, CertiK is strengthening cooperation with international law enforcement agencies such as Interpol and Europol to provide technical support for cross-border attack investigations and security policy research.

Web3 security company CertiK released the "Hack3D: First Half of 2026 Report." The report shows that in the first half of 2026, the Web3 ecosystem experienced a total of 344 security incidents, with cumulative losses of approximately $1.32 billion. Although this figure represents a 46.8% decrease compared to the same period last year, if we exclude the impact of the $1.45 billion security incident encountered by Bybit, the loss scale in the first half of this year has actually increased by about 28% year-on-year, indicating that the overall security environment in the industry has not seen substantial improvement.The report points out that wallet theft has become the largest type of attack causing financial losses, resulting in approximately $450 million in losses in the first half of the year; meanwhile, although the number of phishing attacks has decreased by over 50% year-on-year, the amount of losses has only decreased by about 10.8%, reflecting that attackers are increasingly targeting high-net-worth individuals and institutional targets, implementing more focused high-value attacks.In addition, code vulnerabilities remain the most frequently occurring type of attack, with related incidents reaching 204. CertiK believes that attackers are increasingly targeting long-running and outdated smart contracts that lack re-auditing.The report also shows that large-scale attack incidents continue to dominate industry losses, with the Kelp DAO and Drift Protocol incidents collectively causing approximately $577 million in losses, accounting for 44% of the total losses in the first half of the year. From the perspective of incident quantity, the impact of single attacks, and changes in attack patterns, the Web3 industry is facing increasingly complex and continuously escalating security challenges.

According to CertiK monitoring, the decentralized privacy protocol Hinkal Protocol has experienced suspicious transactions. The address (0xbB3...fc20) executed multiple "Transact" transactions after initiating a "Proofless Deposit," withdrawing approximately 800,000 USDC from the Hinkal contract.

According to monitoring by CertiK, the Edel Finance lending market was attacked. The attacker engaged in unauthorized borrowing by manipulating the collateral price of wGOOGLx (which depends on its GOOGLx balance), resulting in a loss of approximately $204,000 for the protocol. The relevant attack transactions have been flagged, and security agencies remind users to be aware of the risks.

According to the latest data from CertiK Skynet, Websea has maintained a security rating of over 80 in the A-grade high score range after completing its third round of professional penetration testing, with its overall ranking showing a steady upward trend, continuing to rank among the top in the global exchange security list.This assessment covers core dimensions such as smart contract security, system architecture stability, risk control mechanisms, and asset protection capabilities. The comprehensive assessment results further confirm that Websea has a highly mature and robust security system, with overall security performance at a high level within the industry. As a mainstream third-party security organization in the industry, CertiK's continuous audit and penetration testing results further strengthen Websea's long-term industry endorsement in terms of security transparency and credibility among global exchanges, and also enhance market recognition of Websea's security and credibility.

According to security agency CertiK's monitoring, a suspicious transaction was transferred from the Aztec Router contract on Ethereum, involving approximately 2.19 million dollars in assets.The transaction exhibited unusual outflow characteristics, and CertiK reminds the community to remain vigilant.

Blockchain security company CertiK's latest data shows that in May 2026, losses in the crypto industry due to hacking, exploitation of vulnerabilities, and fraud amounted to approximately $68.3 million, a decrease of nearly 90% compared to over $650 million in losses in April, making it the third month this year with losses below $100 million.CertiK stated that approximately $2.6 million in losses during May came from phishing attacks. In contrast, in April, significant attacks on Drift Protocol and KelpDAO's infrastructure resulted in losses of approximately $285 million and $292 million, respectively, with these two incidents accounting for about 95% of the total losses for that month, making April one of the worst months for losses since March 2022.Despite the reduction in large-scale attacks at the protocol level, CertiK warns that risks such as phishing attacks, social engineering scams, deepfakes, and credential leaks continue to grow. Researchers point out that an increasing number of attackers are targeting employees, operational systems

Web3 security company CertiK has released the "Skynet North Korea Cyber Threat Report." The data shows that since 2016, North Korean hacker groups have plundered approximately $6.75 billion in digital assets. In 2025 alone, the losses from thefts they orchestrated reached as high as $2.06 billion, accounting for nearly 60% of the total losses in the global cryptocurrency industry for the entire year (including the $1.5 billion Bybit theft case). As of early 2026, this threat trend continues, with losses accounting for about 55%.The report emphasizes that the attack patterns of North Korean hackers have undergone a fundamental shift, evolving from simple code vulnerability exploitation to a national-level attack system that combines social engineering, deep supply chain attacks, and "physical infiltration." In the recent Drift protocol incident, attackers even spent six months lurking at offline industry conferences, establishing trust through real funds and interpersonal interactions before executing their attack.CertiK security experts warn that in the face of such systemic attacks, simple technical defenses have become weak. Cryptocurrency institutions urgently need to fully implement a "zero trust" hiring model, strengthen third-party supply chains, establish fund circuit breaker mechanisms, and collaborate with professional security organizations to build a comprehensive lifecycle defense system covering code audits, round-the-clock risk monitoring, and on-chain anti-money laundering/KYT (Know Your Transaction) fund tracking.

According to a report by The Block, the crypto security firm CertiK released a report today indicating that in the first four months of 2026, there have been 34 confirmed cases of crypto "ransom attacks" globally (i.e., offline physical assaults and extortion targeting crypto asset holders), an increase of 41% compared to the same period in 2025, with total losses for victims amounting to approximately $101 million. If the trend continues, the total number of incidents for the year is expected to reach around 130, with losses potentially soaring to hundreds of millions of dollars.In terms of geographical distribution, out of the 34 incidents, 28 (82%) occurred in Europe, with France being particularly notable, having recorded 24 incidents in just the first four months of 2026, surpassing the total of 20 incidents for the entire year of 2025. CertiK attributes this to France's hosting of flagship crypto companies like Ledger and Binance, frequent data breaches, and a prevalent culture of "showing off wealth and doxxing" within the community. In contrast, the number of reported incidents in the United States dropped from 9 in 2025 to 3 in the first quarter, while Asia saw a decrease from 25 to 2.Regarding attack patterns, CertiK pointed out that criminal groups have shifted to a "data-driven targeting" model, reducing the need for on-site reconnaissance by purchasing victims' names, addresses, and asset information from data intermediaries. This year, over half of the incidents involved threats or direct harm to victims' family members (spouses, children, elderly parents) as a means of exerting pressure. In terms of execution, small groups of 3 to 5 individuals typically operate through

According to CertiK Alert monitoring, the total losses from cryptocurrency security incidents in the month of 2026 amounted to approximately $651 million, of which about $3.5 million originated from phishing attacks. This is the highest single-month loss recorded since 2022, second only to the Bybit theft incident in 2025.

CertiK and RootData announced a strategic partnership to jointly launch a dual benchmark brand program focused on security and transparency, aiming to make "security + transparency" a dual hard indicator of the trust system in the Web3 industry.It is reported that CertiK is a global leader in Web3 security services, and its Skynet platform conducts multidimensional security assessments of projects through a security scoring system; RootData is an industry-leading Web3 asset data platform that has innovatively constructed a transparency scoring model covering dimensions such as token economics, team background, and compliance audits.In this collaboration, CertiK will leverage RootData's standardized data interface to enrich the data dimensions and coverage of security ratings; RootData will rely on CertiK's professional security assessment capabilities to inject authoritative calibration basis into its transparency scoring. Both parties will jointly promote the "CertiK Skynet Score + RootData Transparency Score" dual assessment standard, providing a reliable reference benchmark that combines security and transparency for project parties, exchanges, investment institutions, and users.

According to monitoring by blockchain security firm CertiK, the Wasabi Protocol has experienced a security breach, with approximately $2.9 million in funds stolen. Preliminary investigations indicate that the attacker gained privileged roles after compromising the wallet deployed by Wasabi, subsequently carrying out the attack.The stolen funds are currently dispersed across the following addresses: 0xb8Bb...70dB (approximately $677,000) and 0x6244...f906 (approximately $1.1 million), and the incident is still under investigation.

According to market news, attackers launched an attack on Syndicate by infiltrating the Commons cross-chain bridge. The related address acquired approximately 18.5 million SYND tokens and sold them for a profit of about $330,000, with the funds having been transferred to Ethereum.

Web3 security company CertiK released the report "2026 Digital Asset Regulatory Status," systematically outlining global regulatory trends. The report indicates that by 2026, the regulatory frameworks in major jurisdictions will have basically been established, and the industry is entering a phase of full compliance. The report shows that anti-money laundering enforcement has replaced the definition of securities attributes as the primary regulatory risk, with global anti-money laundering-related fines exceeding $900 million in the first half of 2025, and transaction monitoring capabilities becoming a core compliance requirement.At the same time, smart contract security audits are evolving from industry best practices to entry requirements, becoming essential for license approval and token listings. Additionally, global stablecoin regulatory frameworks are becoming more consistent, generally establishing principles such as full reserves and licensed issuance; however, differences in cross-jurisdictional regulation still pose compliance challenges. The report points out that with regulatory convergence and strengthened enforcement, the industry has entered the "strong compliance era." CertiK states that the core issue facing enterprises is shifting from "Are we compliant?" to "Can we quickly build and implement compliance capabilities?" Licensing in multiple regions, investments in anti-money laundering, and ongoing security audits are becoming the foundational thresholds for institutional development.

According to CertiK monitoring, the DeFi protocol Rhea Finance was attacked, with attackers extracting at least $7.6 million in total.The attackers misled the oracle and validation layer to complete the attack by creating fake token contracts and injecting liquidity into newly created funding pools.

Blockchain security company CertiK stated that in March 2026, a total of 46 security incidents were recorded, with total losses of approximately $39.8 million (excluding phishing). This is the highest number of recorded security incidents in a month since November 2024.CertiK also mentioned that after reaching a low point in the third quarter of 2025, the number of security incidents increased in the fourth quarter of 2025 and the first quarter of 2026, with the exploitation of code vulnerabilities becoming more frequent, possibly related to the rise of artificial intelligence.

According to CertiK's latest report, losses from cryptocurrency ATM scams in the U.S. will reach $333 million by 2025, with the FBI receiving over 12,000 complaints, a 33% increase year-on-year. CertiK points out that cryptocurrency ATMs can convert cash into cryptocurrency within 5 minutes, and the identity verification requirements are extremely low, making them the least frictional channel for scammers to withdraw funds.Among the victims, 86% are seniors aged 60 and above, primarily due to their liquid savings, lack of knowledge about cryptocurrency, and social isolation. The main scam tactics include pig butchering investment scams, government impersonation, tech support scams, grandparent scams, and fake debt collection services.The involvement of AI technology has made the situation even more severe. By 2025, AI-driven social engineering scams are expected to yield 4.5 times the profits of traditional methods, and real-time deepfake technology has been systematically integrated into scam operations. Transnational criminal organizations also operate with a corporate division of labor model, significantly increasing the difficulty of law enforcement tracking.

According to CertiK statistics, the total losses due to vulnerabilities in all security incidents in the cryptocurrency sector in February have been confirmed to be approximately $35.7 million, of which about $8.5 million is attributed to phishing attacks. This figure is the lowest monthly loss amount since March 2025.