Cyvers: Ущерб от атак на криптопроекты вырос на 72% за год

cryptonews.ruОпубліковано о 2022-10-31Востаннє оновлено о 2024-09-30

Что произошло? За три квартала 2024 года потери от взломов криптовалютных проектов уже превысили общий показатель за весь 2023 год, установив новый рекорд на отметке 2,114 млрд долларов, сообщили эксперты ИБ-компании Cyvers в новом отчете. Рост в сравнении с аналогичным периодом прошлого года составил 72%, и аналитики заявили о растущей уязвимости как централизованных, так и децентрализованных торговых платформ (CEX/DEX).

Материал BeInCrypto

Что еще известно? В годовом исчислении количество атак на централизованные финансовые платформы (CeFi) выросло на 984%. Показатель для децентрализованных площадок (DeFi) снизился на 25%, однако такие проекты по-прежнему остаются уязвимыми из-за сложности смарт-контрактов и протоколов.

Только во II квартале в секторе CeFi было совершено пять крупных атак, которые привели к убыткам на 401 млн долларов. В частности, биткоин-биржа DMM потеряла 305 млн долларов, а с турецкой криптобиржи BtcTurk было украдено 55 млн.

Что касается DeFi, в течение II квартала было зафиксировано 62 инцидента с ущербом на 171,3 млн долларов. Основными объектами атак остаются проекты на базе Ethereum и BNB Chain, поскольку экосистемы этих блокчейнов наиболее обширны.

В целом в результате нарушения систем безопасности криптопроекты с января по сентябрь 2024 года потеряли 1,62 млрд долларов, что на 99% больше аналогичного периода 2023. В результате эксплойтов смарт-контрактов потеряно 380,4 млн (падение на 19%). Общее количество инцидентов составило 131, прибавив 197% за год.

Пов'язані матеріали

Former SpaceX Engineer Reconstructs Financial Execution System Using First Principles

Former SpaceX engineer Lex Li applies "First Principles Thinking" to financial infrastructure with Plan Execution Lab, recently raising angel funding at a $50M post-money valuation. The team argues that the core function of finance is capital allocation, and the critical gap is not in trading but in execution, which remains highly manual and fragmented. While assets, liquidity, and settlement have migrated on-chain, execution workflows (monitoring, risk management, liquidity coordination) are still human-native. In an era of accelerating AI agents, strategy decay is rapid, shifting the competitive edge from having the best strategy to having the most robust execution network. Plan Execution Lab introduces two core components: 1. **PlanX**: A Financial Execution Protocol designed as infrastructure for the migration from CEX to DEX, providing on-chain execution capabilities, liquidity access, risk management, and capital orchestration. 2. **Xgent**: An Autonomous Financial Runtime. Users define investment intents, risk preferences, and constraints; Xgent automatically constructs an execution graph, verifies it, and handles ongoing execution and optimization—streamlining the process from Intent to Autonomous Execution. The long-term vision is to create the "Bloomberg Terminal for Autonomous Finance"—a shared operating environment and execution network built collectively by participants like execution nodes, liquidity providers, and autonomous agents. The future of finance, they contend, belongs not to isolated algorithms but to open, collaborative execution networks.

marsbit17 хв тому

Former SpaceX Engineer Reconstructs Financial Execution System Using First Principles

marsbit17 хв тому

Former SpaceX Engineer Reconstructs Financial Execution System from First Principles

Plan Execution Lab, a financial infrastructure project founded by former SpaceX engineer Lex Li, has raised angel funding at a $50M post-money valuation. The startup is applying "first principles thinking" from Li's SpaceX experience to rethink financial market execution. Their analysis posits that while assets, liquidity, and settlement have moved on-chain, the execution layer remains fundamentally human-dependent and fragmented. In the era of AI Agents, strategy advantages decay rapidly, shifting the competitive edge from isolated algorithms to robust **execution networks**. Plan Execution Lab's solution is a two-part system: **PlanX**, a Financial Execution Protocol designed to facilitate the migration from centralized exchanges (CEX) to on-chain markets by providing core on-chain execution capabilities; and **Xgent**, an Autonomous Financial Runtime. Xgent allows users to define investment goals and constraints, then autonomously constructs and manages the execution logic—moving from **Intent to Execution Graph to Verification to Autonomous Execution**. The long-term vision is to create the "Bloomberg Terminal for Autonomous Finance"—an operating environment not for humans, but for agents and execution nodes. The future financial system, they argue, will be a collaborative network built by diverse participants contributing execution capabilities, not secret strategies. The core competition will shift to who builds the most powerful and adaptive execution network.

链捕手17 хв тому

Former SpaceX Engineer Reconstructs Financial Execution System from First Principles

链捕手17 хв тому

First Long-Horizon Doc2Repo Training Dataset: Code Agents Move Beyond Bug Fixing and Begin Creating Repositories

With the advancement of LLM Code Agents, the research focus is shifting towards long-horizon, real-world tasks, moving beyond simple bug fixes to full repository generation. To address this, researchers from Renmin University of China introduced the DeNovoSWE dataset. This dataset focuses on long-term software engineering tasks, specifically the "document-to-repository" challenge—generating an entire, executable code repository from a task description. The DeNovoSWE construction method employs a Divide & Conquer approach. It breaks down target repositories into core capabilities and uses a multi-agent Draft-Critic-Repair workflow to automatically generate high-quality, evaluation-aligned task documents. The dataset also implements difficulty-aware filtering to balance quality and diversity. The result is a high-quality, anti-leakage dataset of 4,818 instances. Experiments show that models trained on DeNovoSWE achieve significant improvements in long-horizon repository generation. For instance, Qwen3-30B-A3B-Instruct's performance on the BeyondSWE-Doc2Repo benchmark increased from 5.8% to 47.2%, and on NL2RepoBench from 4.3% to 23.0%. Similar gains were observed with stronger backbones, demonstrating that dedicated long-horizon training data is crucial for advancing Code Agents from maintainers to architects capable of planning and building complete software projects from scratch.

marsbit32 хв тому

First Long-Horizon Doc2Repo Training Dataset: Code Agents Move Beyond Bug Fixing and Begin Creating Repositories

marsbit32 хв тому

Even CZ Praised Hyperliquid as 'Awesome', But Its Biggest Moat Might Also Be Its Biggest Risk

In an episode of Galaxy Brains, Binance founder CZ praised Hyperliquid as "awesome" but clarified that while its product is strong, Binance cannot compete in its specific niche due to Hyperliquid's no-KYC, decentralized model. CZ noted he would not personally operate such a model, highlighting the inherent legal and compliance risks tied to its access advantage. The discussion underscores a core market structure conflict: on-chain perp platforms like Hyperliquid thrive on open, low-barrier access, which regulated exchanges like Binance cannot replicate without abandoning their global compliance posture. However, this very advantage makes Hyperliquid a clear target for regulatory scrutiny. The UK FCA has already issued a warning against Hyperliquid for potentially offering unauthorized services to UK users, framing it as a financial services provider rather than neutral infrastructure. Historical cases like the CFTC's action against bZeroX and Ooki DAO further illustrate that regulators may pursue decentralized structures if they facilitate leveraged trading for retail users without proper controls. Meanwhile, regulated venues like Cboe are developing US-compliant "continuous futures" that mimic perpetual exposure, narrowing the product gap. Hyperliquid's long-term edge may increasingly hinge on its access model—the very feature most exposed to regulatory pressure. The key question is whether its "access premium" can withstand escalating legal challenges as on-chain perps gain mainstream attention.

marsbit51 хв тому

Even CZ Praised Hyperliquid as 'Awesome', But Its Biggest Moat Might Also Be Its Biggest Risk

marsbit51 хв тому

Торгівля

Спот
Ф'ючерси
活动图片