• English
  • 简体中文
  • 繁體中文
  • Tiếng Việt
  • ไทย
  • Indonesia
Subscribe
Real-time News
Dovish 1. Bank of Japan member Asahi Noguchi: Given the uncertain economic outlook, the Bank of Japan should refrain from adjusting interest rates and should closely monitor economic developments. 2. Bank of Japan Deputy Governor Shinichi Uchida: We must pay attention to downside risks facing Japans economy and prices, and the Bank of Japan must currently support the economy through accommodative monetary policy. Neutral 1. Bank of Japan member Kazuyuki Masuda: We do not strongly disagree with the view that Japans overall inflation has not yet reached 2%; considering various economic risks, the Bank of Japan should not rush to raise interest rates. 2. Bank of Japan member Junko Koeda: Given the current high level of uncertainty, it is not appropriate to discuss the specific timing of the next rate hike. We need to closely monitor the economy, inflation, and financial markets before making a decision. 3. Bank of Japan Governor Kazuo Ueda: If the economy and prices develop as expected, we will not change our stance on raising interest rates. We will carefully examine whether the economy and prices meet our forecasts without preconceived views. 4. Bank of Japan member Junko Nakagawa: If the outlook for economic activity and prices is realized, the Bank of Japan will continue to raise the policy rate. We will make appropriate monetary policy decisions through continuous and prudent data assessment. 5. Bank of Japan Deputy Governor Yoshizo Himino: If the economy and prices perform as expected, the Bank of Japan is expected to gradually raise interest rates. As for the timing of rate hikes, we can only say that we hope to ensure that they are not raised too early or too late. Hawkish 1. Bank of Japan board member Hajime Takada: The Bank of Japan has only paused its rate hike cycle for now and should continue to adjust and shift after a period of observation. The Bank of Japan needs to return to a rate hike cycle in a flexible manner. 2. Bank of Japan board member Naoki Tamura: We are likely to achieve our inflation target earlier than expected. Even if uncertainty about US tariffs persists, the Bank of Japan may still need to raise interest rates decisively to address inflation risks.Gold prices fell for a third consecutive day on September 19th as traders grew more cautious about the prospect of Federal Reserve rate cuts and a stronger dollar curbed the precious metals recent gains. Gold prices are now about $70 below Wednesdays all-time high, which was driven to a record high by the Feds 25 basis point rate cut. Gold prices subsequently retreated after Fed Chairman Powells comments on the path of monetary policy were more hawkish than expected, stating that officials would take a "meeting-by-meeting" approach to further easing. Looking ahead, attacks on the Feds independence from the US government could further fuel golds gains. Governor Lisa Cook is embroiled in a legal dispute with President Trump, who sought to fire her over mortgage fraud allegations. Government economic advisor Stephen Milan, who was quickly appointed to fill a temporary vacancy at the Fed, was the only member of the board who dissented from the 25 basis point rate cut at Wednesdays meeting, favoring a 50 basis point cut instead.On September 19th, as market expectations for a Bank of Japan (BoJ) interest rate hike grew, prices for two-year government bonds, sensitive to monetary policy expectations, fell, pushing the yield up 0.5 basis points to 0.885%, the highest level since 2008. The BoJ will announce its interest rate decision later today, with the market generally expecting it to remain unchanged. Investors are closely watching for any clues regarding a September or December rate hike. Uncertainty over tariff policy and the political risks posed by Prime Minister Shigeru Ishibas announced resignation plan complicate the BoJs decision-making environment. However, according to sources familiar with the matter, BoJ officials believe that despite political uncertainty, another benchmark rate hike is still possible this year given that economic development is in line with expectations. According to an institutional survey, most BoJ observers expect a rate hike before January, while the proportion favoring a hike next month has slightly decreased following Ishibas resignation. Overnight index swaps indicate that the market is pricing in a roughly 65% probability of a BoJ rate hike before the end of the year.The yield on 40-year Japanese government bonds fell 1.5 basis points to 3.420%.On September 19th, Jinfang Pharmaceutical-B (2595.HK) officially listed on the Main Board of the Hong Kong Stock Exchange. The stock opened sharply higher in early trading at HK$44, a 115.79% surge from its IPO price of HK$20.4. Based on a 200-share board lot, excluding commissions, the book profit per board lot reached HK$4,722. This strong IPO performance was foreshadowed. In the previous trading days grey market, Jinfang Pharmaceutical-B closed up 110.10% at HK$42.84, with a book profit of HK$4,490 per board lot.

CertiK Crypto Report Counts $2.9B in Assets Stolen in 2022

Cory Russell

Oct 10, 2022 11:57

微信截图_20221010101057.png


Cryptocurrency security company CertiK wants you to be aware that it is not secure. The most recent analysis from the organization explores the murky underbelly of the world of digital assets in 2022.


Sadly, the dark underbelly of the industry is more powerful than crypto enthusiasts would want to accept. In only the first three quarters of the year, cyber thieves have seized over $2.9 billion. Additionally, CertiK claims that the methods used by these crooks are only improving.


According to CertiK's mid-year study released at the end of June, cryptocurrency thieves were on pace to siphon off about $1 billion in assets per quarter. As of today, when they released their third-quarter report, it is proving to be true. But the study contains a wealth of information beyond the startling figures on the front. In the previous three months, the firm has recorded 171 escapades. Decentralized finance (DeFi) flash loan assaults and rug-pull scams are only two examples of the vulnerabilities that may be used to steal from projects from inside. The analysis also finds that while being rare, multi-chain attacks have easily caused investors the greatest harm. Only six vulnerabilities were used in Q3 across different chains, yet they are responsible for more than $440 million of the $504 million in theft.


The rise in rug-pull or "exit" frauds in Q3 is one particular finding in this study that merits special attention. 89 scams were reported to have stolen $37 million in the company's Q2 report; in the Q3 report, 98 of these scams took a total of $57 million, a 54% increase. Hugh Brooks, Director of Security Operations at CertiK, explains to InvestorPlace that despite being simple to carry out, these frauds are not going out of style in the middle of a market slump. As Brooks warns investors, "A project being unaudited should raise a significant red alert." "A project could provide a novel approach to a problem or fill a market need, but if it puts your money at risk, it usually isn't a very smart investment."

As report case studies demonstrate, audits are not a panacea.

An exit fraud is one difficulty, but as CertiK notes, they only make up a small portion of 2022's losses.


Projects get a seal of approval from audits, which also provide confirmation that the smart contracts for the project are not in jeopardy. They are not, however, a failsafe method of project security.


The Slope wallet, Wintermute market maker, and Nomad bridge's respective adventures are three of the biggest ones from the quarter, according to CertiK's research. The $8 million in damages suffered by Slope were caused by a flaw in the way the seed words for users' wallets were kept. Once these words were discovered, hackers were able to steal money from victims' wallets one at a time. The creators of Wintermute made the decision to build its market maker on a wallet address that reduces transaction gas costs, which led to the game's vulnerability. Transactions required less CPU resources to settle when addresses had a lot of zeros in them. However, this choice of address allowed a hacker to quickly open the wallet. The losses suffered by Nomad are the result of hackers taking advantage of a weakness in the process of moving assets from one chain to another.


According to Brooks, "[The projects'] losses were not brought on by flaws in the audited smart contract code." In fact, the smart contracts for Wintermute and Nomad have both been reviewed and fixed. They yet fell prey to two of the greatest hacks of the year.

Projects to Secure Web 3.0: Next Steps

These three instances show that audits are insufficient to address an issue that is just becoming worse as time passes. Auditing is a crucial first step, according to Brooks. But a genuine commitment to security also calls for continuing testing, hardening, and monitoring techniques after implementation.


The issue of exit frauds is real. They keep stealing money from investors. However, as Brooks notes, they don't pose the same threat as the more profitable code attacks. The overall market slump has decreased asset prices and reduced the influx of novice investors, who are more prone than average to become victims of an exit scam.


While rug-pullers continue to use the same old techniques, hackers are growing more sophisticated. Rug-pullers rely on a steady supply of less experienced investors to approach them. On the other side, hackers are targeting large projects with many wallets and high liquidity, which makes them a larger danger to the whole crypto ecosystem.


As a result, according to Brooks, initiatives must do more than just get a smart contract audit. "The sector is developing at an incredible rate. To safeguard users and encourage the creativity that makes this sector so unique, we must enhance the degree of security across the whole Web3 ecosystem if we want this pace to continue. Additionally, CertiK notes in its report that it is striving to compile a group of tools and resources for projects that go beyond the straightforward tasks of auditing and into the world of real-time monitoring and bug hunting.