SlowMist Releases Last Week's Security Incidents in the Web3 Space

According to statistics from the SlowMist Blockchain Security Incident Database, from October 1st to October 7th, 2023, there were a total of 10 security incidents in the following projects, with an increase in DNS hijacking attacks and Discord hacking incidents:

• Galxe (2023-10-06): Unauthorized access gained through DNS hijacking resulted in the misappropriation of funds from visitors, affecting 1,120 users. Loss: Approximately $270,000.

• MCT (2023-10-06): DNS domain hijacking allowed private keys to be uploaded to a fraudulent domain. Precautionary measures advised. Loss: Not specified.

• Counterfeit CommEx Token (2023-10-06): Large removal of liquidity in a rug pull, with the deployer extracting approximately $154,000.

• friend.tech (2023-10-05): Four users faced SIM card swap attacks, resulting in significant losses. Loss: Approximately $385,000.

• Stars Arena (2023-10-05): Major security vulnerability in the platform's smart contract led to a substantial fund theft. Loss: Approximately $3 million.

• DePay (2023-10-05): The platform faced a flash loan attack, resulting in a relatively small theft. Loss: $827.

• Metropolis World (2023-10-05): The platform's Discord server was compromised. Loss: Not disclosed.

• GEMIE (2023-10-02): Discord server hacked, leading to the sharing of phishing links. Users are advised not to interact. Loss: Not specified.

• VendX (2023-10-02): Another instance of a Discord server being compromised. Loss: Not specified.

• Counterfeit EigenLayer Token (2023-10-01): An exit scam involving a counterfeit token that resulted in significant profits for the deployer. Loss: Approximately $300,000.