今天分享的是：SlowMist慢雾：2025年区块链安全与反洗钱年度报告 报告共计：110页 2025年区块链安全与反洗钱年度报告总结 2025年，区块链行业在高速发展中面临复杂的安全与合规挑战，安全事件数量虽较2024年下降，但损失金额同比大 幅上升，反洗钱监管则呈现全球化、体系化推进态势。 安全方面，全年共发生200起安全事件，造成约29.35亿美元损失。以太坊、BSC、Solana是受攻击最严重的三大生 态，DeFi项目和交易平台成为攻击重点。DeFi项目占全年安全事件总数的63%，而交易平台虽仅发生12起事件，却 因单笔大额损失导致总损失高达18.09亿美元，其中Bybit平台被盗14.6亿美元，成为年度最严重安全事件。合约漏洞 和账号被黑是主要攻击原因，朝鲜相关黑客组织表现活跃，采用组织化、专业化攻击模式，针对交易所、多签基础 设施等发起攻击。 欺诈手法持续升级，呈现复合化、隐蔽化特征。钓鱼攻击从简单仿站升级为结合系统命令、钱包权限的复合手法， 包括Clickfix钓鱼、钱包Owner权限篡改、EIP-7702授权滥用等新型攻击方式。社会工程攻击频发，通过招聘面试、 假冒安全专家、售卖假硬件钱包等方 ...

2025年Web3区块链安全形势严峻，全年因黑客攻击、钓鱼诈骗与Rug Pull事件造成的总损失高达33.75亿美元，其中黑客攻击占比超94%，损失金额达31.87 亿美元。尤为突出的是，中心化交易所（CEX）成为重灾区，9起攻击事件造成17.65亿美元损失，占全年总损失的52.3%；而DeFi项目虽损失金额次之 （6.21亿美元），却以91次攻击成为被攻击频次最高的类别。Ethereum公链依旧是安全事件最集中、损失最严重的生态，170起事件共损失22.54亿美元，占 比高达66.79%。整体来看，尽管钓鱼与Rug Pull损失大幅下降，但黑客攻击手段更趋复杂，对基础设施和供应链的威胁显著上升。 在攻击手法方面，合约漏洞利用仍是最高频的攻击方式，191起事件中有62起源于此，占比32.46%，其中业务逻辑漏洞造成的损失最为严重，达4.64亿美 元。然而，年度最大单笔损失来自Bybit交易所的供应链攻击事件——黑客通过篡改Safe钱包前端，盗取14.4亿美元，占全年总损失的42.67%。此外，社会工 程学和地址投毒等针对个人用户的攻击也频繁出现，两起个人用户损失分别高达9100万和5000万美元，凸显普通用户 ...

Solana, Aptos Move to Harden Blockchains Against Future Quantum Attacks► https://t.co/J9C9tUjuCZ https://t.co/J9C9tUjuCZ ...

Event Announcement - Bybit 将于 2025 年 11 月 14 日 8AM UTC 举办区块链安全主题活动 [1] - 活动重点在于探讨 Bybit 如何保障交易的快速、可靠和安全，涉及用户保护和市场稳定等方面 [1] Security Focus - Bybit 强调建立信任始于安全 [1] - 活动旨在汇聚区块链安全领域的顶尖人才，共同探讨安全问题 [1]

Key Achievements - T3 Financial Crime Unit (T3 FCU) has frozen over $300 million in criminal crypto assets globally since 2024 [1] - T3 FCU is a collaboration between Tether, TRON, and TRM Labs [1] Operational Focus - The unit combats money laundering, fraud, and other crimes [1] - T3 FCU showcases effective public-private cooperation in blockchain security [1] Geographic Scope - T3 FCU is working with law enforcement across multiple countries [1]

Blockchain Security - Ethereum co-founder Vitalik Buterin highlights a core blockchain security property: a 51% attack cannot validate an invalid block, preventing validators from stealing user assets [1] - The industry notes this 51% attack protection is limited to on-chain activities [1] Off-Chain Risks - The report warns that in external trust scenarios, collusion by 51% of validators leaves users without recourse [1]

Core Insights - Check Point Software Technologies Ltd. has been recognized in Fast Company's Next Big Things in Tech 2025 list for its innovative cybersecurity solutions aimed at protecting public blockchains from emerging cyber threats [1][2] - The company's blockchain solution offers enterprise-grade, compliance-ready security, marking a shift from reactive threat detection to proactive in-chain prevention [2] - Check Point has received multiple accolades, including being named one of the World's Best Companies of 2025 by TIME and Statista, and one of America's Best Cybersecurity Companies by Newsweek and Statista [4] Company Innovations - Check Point's blockchain security solution is now active on the Cardano mainnet, providing real-time threat prevention capabilities [2] - The solution is designed to protect users, digital assets, and infrastructure before cyber attacks can occur, ensuring trust and safety in decentralized ecosystems [2] - The company employs a prevention-first approach through its Infinity Platform, which integrates management across on-premises, cloud, and workspace environments [6] Industry Recognition - Fast Company's list features a diverse array of technologies with the potential to revolutionize consumer and business lives [3] - The recognition serves as both a snapshot of current technology trends and a prediction of future developments in the tech industry [4]

Core Insights - Data443 Risk Mitigation, Inc. reaffirms its leadership in blockchain security and trusted ledger validation, emphasizing its nearly ten years of experience in data protection and digital ledger infrastructure [1][5] - The company has a proven track record within the Unique Node List (UNL) ecosystem, contributing to network stability and trust through high-availability validator nodes [2][3] - Data443 is expanding its capabilities to support multiple ledger architectures and is developing analytics dashboards for enhanced transparency in validator performance [4] Company Overview - Data443 provides software and services for secure data management across devices and databases, with over 10,000 customers in more than 100 countries [6] - The company focuses on identifying and protecting sensitive data, implementing effective data protection and privacy management strategies [6] Infrastructure and Technology - Data443's validator infrastructure is built on a security-first foundation, ensuring high availability and consensus reliability through hardened endpoints and automated failover mechanisms [3] - The infrastructure has processed millions of ledgers without unscheduled downtime, demonstrating its scalability and dependability [3] Future Developments - The company is integrating its data classification, privacy, and compliance solutions with ledger validation to create a comprehensive security framework [4] - Data443 aims to meet the growing demand for validators with stringent operational standards as distributed ledgers gain traction [5]

Partnership Overview - Venn Network provides an added layer of protection for Orbs Network's advanced order protocols [1] - The partnership aims to combine CeFi-grade on-chain order execution with proactive transaction screening [1] - The collaboration results in safer swaps, smarter markets, and stronger trust in DeFi [2] Transaction Volume & Security - Orbs Network handles over 10 million transactions every month across major DEXs [1] - Venn Network's on-chain firewall safeguards every trade by blocking threats before they reach the blockchain [1] Companies Involved - Orbs Network utilizes PancakeSwap, SushiSwap, and other major DEXs [1] - Venn Network is described as bringing a real-time, on-chain firewall [1]

RT BSCN (@BSCNews)THE $48M BTCTURK HACK: WHAT WE KNOW- BtcTurk, one of Turkey’s largest crypto exchanges, has been hit by a $48M theft targeting its hot wallets, per blockchain security firm Cyvers.- The breach, detected on Aug. 14, forced the exchange to halt all crypto deposits and withdrawals. Trading and Turkish Lira transactions continue.- Blockchain security firm Cyvers says the attacker moved funds across Ethereum, Avalanche, Arbitrum, Base, Optimism, Mantle, and Polygon.- Most assets landed in two a ...