Report: Unverified smart contracts become a new target for attackers, with $36.7 million stolen in six months

By: rootdata|2026/06/11 04:45:03

According to a report by Chainalysis, over the past six months, at least $36.7 million has been stolen from protocols with unverified source code, involving protocols such as Truebit, Trusted Volumes, Aperture Finance, and Ekubo. Attackers are searching for vulnerabilities by decompiling the original bytecode. AI-assisted vulnerability exploitation development is accelerating this trend, as large language models can scale the identification of vulnerability patterns.

Chainalysis points out that unverified contracts lack community review and are often excluded from bug bounty programs. The barrier to AI decompilation and vulnerability analysis is rapidly decreasing, allowing attackers to systematically scan thousands of unverified contracts. Protocols should verify all contract code, audit the contracts actually deployed, expand the coverage of bug bounties, and implement real-time on-chain monitoring. Each unverified contract is a potential target for automated scanning, and relying solely on obfuscation as a security measure is no longer effective.

-- Price

Crypto influencer and racing enthusiast Carl Moon finished third in the Ferrari Challenge Le Mans Coppa Shell class, marking his best result of the year. As his racing partner and sponsor, WEEX celebrates this remarkable achievement and continues to lead crypto’s journey beyond boundaries, uniting the innovation of digital assets with the passion of motorsport.

A16Z: The sun bears witness, SpaceX is worth 7.5 trillion

A deep analysis of Musk's ultimate grand vision: how SpaceX, xAI, and Tesla are deeply intertwined, using space AI data centers and Starships to gradually turn the sci-fi fantasies of Mars colonization and multi-planetary civilization into reality.

The stablecoin positioning battle escalates: When compliance is just a ticket to entry, will USD1 become the biggest winner?

How does the GENIUS Act reshape the stablecoin landscape?

Can the CLARITY Act Become Law by July 4? Everything You Need to Know About the Final Battle

The CLARITY Act has cleared a major Senate hurdle, but the hardest battle is still ahead. With the July 4 deadline approaching, can the White House finally pass its biggest crypto regulation bill? Find the clues in our exclusive analysis below.

How to exit after asset tokenization?

Currently, three models have emerged, aimed at providing instant exit routes for tokenized real-world assets. Their differences lie in: who holds the funds required for exit, how efficiently the funds operate, and the extent to which this model can be scaled across different asset types.

The foundation of SpaceX's trillion-dollar valuation: Who is dividing Musk's annual capital expenditure of tens of billions?

SpaceX Supply Chain Revealed: The Invisible Gold Mine Behind the Trillion-Dollar "Space Dream," from Nvidia's Computing Power Monopoly to China's Sole Supplier of Special Materials, these overlooked water-selling talents are the true wealth creation engine.

France vs Senegal World Cup 2026: Mbappe’s New Era Begins Against a Historic Rival

France vs Senegal World Cup 2026 preview: Can Mbappe lead France past Senegal after the shocking 2002 World Cup defeat? Full team news, predicted lineups, key battles, and WEEX's exclusive match prediction.

SharpLink CEO: How to understand that Ethereum developers have just surpassed 1 million?

The most important question in the cryptocurrency industry is not which chain is the fastest, but rather where top builders choose to build in the long term. Ethereum has just surpassed one million cumulative developers; what does this number mean?

Morning Report | MiCA grace period expires on July 1; Kalshi's trading volume in the first week of the World Cup breaks $5.1 billion, setting a record

Overview of Important Market Events on June 15

What is the connection between Huang Zheng of Pinduoduo and blockchain?

From Pinduoduo's "reverse insurance" to blockchain's smart contracts, this article explains how Huang Zheng's underlying logic uses "certainty" rules to reshape the flow of wealth for ordinary people.

Morning Report | Prediction market platforms like Kalshi and Polymarket jointly sue Kentucky over 14.25% trading tax; Bridgewater founder discusses decision-making in the AI era: principled thinking should run parallel to AI, human insight remains irre...

Overview of Important Market Events on June 15

Claude enforces "facial recognition for household registration," starting in July, no ID card means no access?

Anthropic has issued an urgent notice that Claude users may face real-name verification in July. From now on, every time you use Claude, you may need to be prepared with your ID.

On the day of SpaceX's IPO, the first real test of the three perpetual mechanisms

The price has been discovered, and the market surrounding the price is still under construction.

Value Distribution of Stablecoins

The issuance layer obtains user funds and takes the largest profit margin; the two middle layers rely on traffic, distribution commissions, and underlying infrastructure; the application layer enjoys convenience but has no bargaining power.

Galaxy Deep Dive: Is the Bitcoin Four-Year Cycle Still Valid?

Galaxy Research believes that the four-year cycle of Bitcoin is still valid, but the amplitude of the cycle is shrinking. This round's peak is milder, which means that even if the pullback continues, the bottom may be higher than the extreme levels of past cycles.