CertiK · 309
Supply surged by 3 trillion dollars, and the established public chain Harmony is in jeopardy again

Supply surged by 3 trillion dollars, and the established public chain Harmony is in jeopardy again

Source: Foresight News Author: Mach Original title: Hackers blasted 3 trillion ONE: The established public chain Harmony was hit by another fatal blow. In 2022, Harmony's total TVL peaked at over 1.4 billion US dollars. According to DeFilLama's latest data, its TVL is less than 170,000 US dollars. Hacker attacks are becoming the “number one killer” of cryptographic protocols. On August 12, X user Juiceberg tweeted that on-chain data showed that the Harmony protocol had been exploited, and that attackers illegally minted about 4 billion ONE tokens (worth more than 3 million US dollars) through empty blocks, accounting for 26% of its total supply. Of these, about 2.8 billion tokens were quickly transferred to exchanges during the price collapse, while Harmony's total supply end point failed to reflect this additional token issuance, causing differences between actual on-chain supply and public data. The attackers have about 115 million pieces left on the chain (about 2.9% of the minting volume), and the vast majority of the rest have either gone to exchange accounts, sold, or stored in deposit wallets. After the news was announced, ONE's price plummeted from $0.00118 to a minimum of $0.00056, and has now rebounded to $0.00078, a 24-hour drop of nearly 38%. The official Harmony response was then retweeted on the X platform. It is cooperating with the team and several related exchanges to block and freeze the funds involved; at the same time, it is promoting software patch development and evaluating network rollback options. Subsequently, the government further announced four sets of relevant wallet addresses, clearly requiring each exchange to block and freeze funds traceable to these addresses: one1uap8dx2z0qsjxqthm5flgcxkeepsz3gsrghnfnone17u300a40ll5wphd8kj5hktryhdjq3ml9f4phy4one1a5hur07z5vtvzhr35zkw8tfqedemkz8t88xgd7one1h56hkxmua0uzfv07fu04cudvtrl35u96pq47vy at around 2 p.m. bridge.harmony.one cross-chain bridge service and requires all verification nodes to immediately upgrade to the latest patch version v2026.1.1. Officially, the patch will prevent further illegal minting, and will be updated separately to handle minted tokens in the future. The relevant release notes are already available on GitHub. This is the third time in recent years that Harmony has experienced major security or technical issues directly related to token supply. In June 2022, its Horizon cross-chain bridge was attacked, losing about $100 million in assets. The US Federal Bureau of Investigation later attributed the incident to North Korea-related hacker groups. In December 2023, a bug occurred in the staking system, causing approximately 146.3 million ONE to be mistakenly minted, involving 74 addresses, of which a single address received more than 51 million tokens. Some of the tokens were then transferred to the exchange. Officials urgently issued a patch and took follow-up measures at the time. Judging from the size of the market, although this incident caused drastic dilution of supply and sharp price fluctuations, the scale of absolute losses was limited. Prior to the incident, Harmony's market capitalization had dropped to around $17 million; after the incident, it fell further back to the $12 million level, and the market value evaporated by about $5 million. Harmony's total TVL peaked at over $1.4 billion in 2022, and DeFilLama's latest data shows that its TVL is less than $170,000. According to CertiK Alert monitoring, as of around 4 p.m., the number of ONE tokens abnormally minted by the Harmony network had exceeded 3 trillion (worth approximately $2.34 billion), involving six abnormal blocks. Early attackers initially used the total supply interface to hide incremental data, and different blocks were packaged one after another, so the 4 billion increase at the time was far from real data. X account BlockWatchDog said that the attackers used Harmony's serious logical errors in cross-shard receipt verification and signature checks to falsify about 3 trillion coins in one go. Harmony is a sharded chain. Transferring coins between different shards requires...

9d ago22#Harmony #hacks

CertiK Report: Brazilian Crypto Market Enters Full Regulatory Phase, Independence Proves Key to Entry

Comparing news, Web3 security company CertiK released the “Intel3D: PSAV and Brazil's New Security Standard” report. The article points out that as the deadline for licensing applications set by the Central Bank of Brazil (October 30 this year) approaches, local virtual asset service providers (PSAV) are facing a round of centralized compliance adjustments, and compliance and security certificates issued by independent third parties are also changing from industry best practices to important requirements for market entry. According to the report, CertiK has now carried out an independent external audit in accordance with the Central Bank of Brazil Regulatory Directive No. 701. As one of the markets with the highest level of crypto asset adoption in the world, the impact of Brazil's regulatory transformation is likely to far exceed the local market. According to the report, Brazil currently ranks fifth in the actual adoption rate of crypto assets in the world. From June 2024 to June 2025, Brazil received an on-chain asset value of US$318.8 billion, accounting for nearly one-third of South America's on-chain activity during the same period. Stablecoins have become an important infrastructure for the local digital asset market, accounting for about 80% of crypto asset transactions declared to the Brazilian Federal Tax Service.

11d ago

Data: USDD supply on the wave market TRON increased by $145 million in a single week, and total supply surpassed $1.23 billion

Comparatively, according to CertiK Skynet statistics, in the past week, the USDD supply on the Wavefield TRON network increased dramatically by about 145 million US dollars, and the total scale exceeded 1.23 billion US dollars, accounting for about 81.6% of the total USDD supply in the entire network. Up to now, USDD's network-wide supply is $1.55 billion, and the TVL is over $2.33 billion. Recently, with the popularity of Wavefield TRON DeFi Summer, Wavefield TRON ecological liquidity is showing an explosive trend. Among them, USDD's TVL on JustLend has exceeded 450 million US dollars. USDD's official Chinese account stated, “The growth of USDD on the wave market TRON is unstoppable.” This round of growth of USDD has further strengthened its leading position in the TRON ecosystem and its leading position in the overall stablecoin circuit.

26d ago

Data: Wrench attacks surged 33% in the first half of 2026, 52 incidents cost $124 million

Comparatively, according to “Hack3D: Wrench Attacks in the First Half of 2026” published by CertiK, 52 wrench attacks have been confirmed in the first half of 2026, an increase of 33.3% over 39 in the same period of 2025. The recorded financial losses associated with these attacks are approximately $124.1 million, up from $10.5 million a year ago. Geographically, the threat situation is highly concentrated. Of the 52 confirmed incidents, Europe accounts for 39, of which France alone accounts for 33, making it the main national center in the data set. From a strategic perspective, the most notable change in the first half of the year was a surge in crypto-related burglary cases. The number of burglary cases increased from 1 publicly reported case in the first half of 2025 to 20 in the first half of 2026. The number of kidnappings remains high, rising from 12 to 16. The number of cases of torture remained the same, at 4, while the number of murders remained at 1 in each first half of the year.

30d ago

VerusCoin's Ethereum bridge was attacked, and about $7.53 million in assets were transferred

Comparative news, according to CertiK Alert's monitoring, a security vulnerability attack occurred on the VerusCoin Ethereum bridge, and the attackers have transferred approximately $7.53 million in assets. CertiK said that the flaw may be related to the bridging contract not properly verifying whether the amount entered on the Verus chain side matches the actual payment amount. Similar issues previously occurred during the May incident.

30d ago#On-chain dynamics

CertiK Report: Wrench Attack Losses Skyrocketed by Nearly 12 Times, and Operational Safety Becomes the New Core of Prevention

Comparing news, Web3 security company CertiK released the “2026 First Half Wrench Attack Report”. According to the report, a total of 52 publicly verified wrench attacks were recorded globally in the first half of 2026, an increase of 33.3% over the previous year; related losses reached about US$124 million, an increase of about 11.8 times over the same period last year. According to the report, attackers are shifting from exploiting technical exploits to attacks targeting asset holders and their real-world networks. The number of house robberies increased from 1 in the first half of 2025 to 20, accounting for 41% of the total number of incidents during the same period. Europe is the region with a high incidence of attacks, with 33 cases in France, accounting for 63.5% of global cases. CertiK said that as real-world risks become an important challenge to digital asset security, businesses and high-value individuals need to establish more comprehensive protection systems. CertiK has launched an operational security service to help identify information exposure risks such as identity, family, residence, and itinerary trajectory; at the same time, it supports organizations to track and analyze cybercrime activities by linking off-chain intelligence, on-chain transactions, and AML risk signals through CertiK Security Workspace. Furthermore, CertiK is strengthening cooperation with international law enforcement agencies such as Interpol and Europol to provide technical support for cross-border attack investigations and security policy research.

31d ago

Opinion: AI has yet to trigger the end of DeFi hacking, and overall attack losses have declined this year

Comparing news, Dragonfly managing partner Haseeb Qureshi said that there was no situation where the market previously feared that AI would trigger the end of DeFi hacking. According to the data, although the number of hacking incidents reached a new high in 2026, the median loss from a single attack has fallen below $500,000, compared to over $2 million in 2025. Haseeb believes that AI-enabled attackers are currently mainly targeting small protocols with weak security protection, while larger DeFi protocols have gradually strengthened their defenses. Excluding the Bybit theft incident in 2025 and large-scale attacks such as KelpDAO and Drift Protocol in 2026, the average amount stolen this year is still lower than last year. However, blockchain security company CertiK notes that the crypto industry's losses due to hacking fell 46.8% year-on-year to $1.32 billion in the first half of 2026, which does not mean that the industry's security has improved significantly. It said that last year's data was greatly affected by Bybit's $1.4 billion theft, and more than 70% of losses in the second quarter of this year still came from KelpDAO and Drift Protocol attacks, and related attacks are generally thought to be related to North Korean hacker groups.

39d ago
Robinhood's new chain skyrocketed in the first week: 568 million trading frenzy detonated Arbitrum, ARB surged 19%

Robinhood's new chain skyrocketed in the first week: 568 million trading frenzy detonated Arbitrum, ARB surged 19%

Source: CoinDesk Author: Brayden Lindrea Reporter Original title: CertiK: Crypto hacking incidents decreased by 47% in the first half of the year, but ecosystem security did not improve. Amid the trading frenzy triggered by Robinhood's new blockchain, Arbitrum's ARB token led the way in growth among the top 100 cryptocurrencies, with a single-day turnover of US$568 million. Digital broker Robinhood's newly launched blockchain is off to a good start, and its benefits are gradually benefiting the Ethereum network Arbitrum. According to CoinDesk data, the native token of Arbitrum (ARB) has risen 19% in the past 24 hours, making it the best-performing asset among the top 100 cryptocurrencies. Bitcoin (BTC) rose 1.5% and traded above $63,000, while Ethereum (ETH) rose slightly by 0.5%, and overall market performance was lackluster. According to blockchain data consulting firm Entropy Advisors, the daily trading volume of Robinhood Chain, which was built based on the Arbitrum technology stack and launched to the public a week ago, exceeded 568 million US dollars on Wednesday, and has so far exceeded 350 million US dollars on Thursday, bringing significant revenue growth. The high volume of trading activity is mainly driven by a wave. Altcoin trading, and the stablecoin balance on the network quickly climbed to over $260 million in its first week. The campaign is generating revenue for Arbitrum. Under the agreement, 10% of Robinhood Chain's net contract revenue will go back to the Arbitrum ecosystem and be distributed to the DAO treasury and developer coalition. Robin's cryptocurrency push Robin announced that the chain was unveiled at last week's London event as the core of a broader crypto push. The brokerage firm announced it would expand access to tokenized US stocks to clients in more than 120 countries, launch a DeFi-powered savings vault that provides yield through the lending protocol Morpho, and outlined plans to expand its crypto business to AI-driven transactions and more asset classes. Early growth surpassed expectations. In an April report, FalconX anticipated that Robinhood Chain could generate around $1.1 million in transaction fees over the first six months. “Based on yesterday's activity alone, Robinhood's annualized revenue valuation has surpassed $12.5 million,” Brendan Ma, head of investment strategy at the Arbitrum Foundation, said on X. He added that most of the activity associated with tokenizing real world assets (RWA) is yet to come. While the burgeoning trading craze is likely to gradually subside, on-chain activity is expected to become a significant new revenue stream for Robinhood over time. FalconX predicts that transaction revenue could grow to $60 million per year by 2030 as users expand from tokenized stocks to decentralized finance (DeFi) and other on-chain applications. Twitter: https://twitter.com/BitpushNewsCN比推 TG Community: https://t.me/BitPushCommunity比推 TG Subscriptions:... https://t.me/bitpush

43d ago谢伟伦
CertiK Mid-Year Report: The frequency of hacker attacks has not decreased but increased, and private key management has become the biggest shortcoming in security

CertiK Mid-Year Report: The frequency of hacker attacks has not decreased but increased, and private key management has become the biggest shortcoming in security

Source: COINTELEGRAPH Author: Brayden Lindrea Reporter Original title: CertiK: Crypto hacking incidents decreased by 47% in the first half of the year, but ecosystem security did not improve. According to the CertiK report, cryptocurrency use cases rose 59% month-on-month in the second quarter to reach 807.5 million US dollars. This is mainly due to attacks on KelpDAO and Drift Protocol, and North Korean hackers are behind the scenes. Cryptocurrency losses fell 46.8% year over year to $1.32 billion in the first half of 2026, but cryptocurrency security firm CertiK said the decline was misleading and warned that attackers were becoming more complex and disruptive. CertiK reports that losses in the first quarter were mainly driven by phishing attacks, totaling US$508.2 million. In the second quarter, the wallet was breached as the main attack route, causing a loss of 807.5 million US dollars. More than 70% of losses in the second quarter stemmed from the hacking of KelpDAO and Drift Protocol, which are believed to have been carried out by North Korean state-sponsored hackers. CertiK told CointeleGraph: “The appearance of 'loss reduced by nearly 50% 'makes people think the ecosystem is safer, but the data does not support this conclusion.” CertiK explained that data for the same period last year was seriously boosted by the $1.4 billion Bybit hack (the biggest cryptocurrency attack in history). According to data, North Korean hackers are still one of the biggest threats to the crypto industry. TRM Labs estimated in April this year that since 2017, these hackers have stolen more than 6 billion US dollars in cryptocurrencies. The amount of cryptocurrency attacks and the number of incidents changed monthly in the first half of the year. Source: CertiK North Korean state actors have been accused of launching cryptocurrency attacks on KelpDAO and Drift Protocol, and even prompted US, Japanese, and South Korean officials to meet at the end of last month to discuss how to deal with North Korea's malicious cyber activities and illegal revenue collection methods. Officials also acknowledged that North Korean IT practitioners are increasingly using AI to enhance their attack plans — some cybersecurity experts believe this has greatly increased the scale, speed, and complexity of protocol attacks. CertiK warned that “the industry is currently experiencing a higher frequency of structural attacks than last year” and that — if the Bybit incident is not taken into account — attacks are becoming “more targeted and more financially disruptive in a single run.” TRM Labs stated in its 2026 H1 report that “the decline in the total amount of stolen funds should not be mistaken for a safer environment.” “A lower total amount simply means no record breaking theft, not a reduction in attackers' capabilities.” TRM's analysis showed that the number of incidents during the H1 period soared from 83 to 207, setting a record for the largest TRM six-month period. TRM also added that smart contracts were used to account for 125 of all H1 events, accounting for 60%. Private key protection According to CertiK, private key and multi-signature wallet management are still the “most critical security aspect” exploited by attackers. CertiK urges cryptographic protocols and institutions with large on-chain assets to strengthen private key management at every level — including hardware security, multi-signature governance, and even geographically dispersed signers. According to CertiK, this is “an area where safety investments achieve asymmetric returns.” Cryptographic hardware wallet vendors such as Ledger have also long reminded users to store mnemonic words offline and never leak them to prevent phishing attacks. Twitter: https://twitter.com/BitpushNewsCN比推 TG Community: https://t.me/BitPushCommunity比推 TG Subscriptions:... https://t.me/bitpush

43d ago谢伟伦#CertiK Report #Cryptographic security #North Korean Hackers #Private key management