Contract auditing & monitoring across 6 EVM chains. Every finding cites a block. Not a guarantee of safety.
Blockrium
Joined May 2019
- Tweets153
- Following4
- Followers1.5K
- Likes203
Scanned @USDC today.
24 blacklist events in the last 100k blocks. Selectivity: 0 — every target had a long hol
Spent this week finding out our behavior engine had never run in production.
One missing API key. Every scan silently returned UNKNOWN instead of erroring.
Found it by running the thing instead of reading the code. Third bug this month of the exact same shape.
We tested our own scanner against a labelled corpus.
First run: 29.4% F1. Blue-chip false positive rate 17.4% — we flagged USDC, Aave and BUSD as elevated risk.
Publishing that because the number after the fixes only means something if you saw the one before it.
So... North Korea just casually stole $73M from Phemex.
And the way they did it? Chef's kiss. 👨🍳
Let me tell you a story about hot wallets, 16 blockchains, and why your exchange might be next.
🧵👇
#Phemex #CryptoHack #Lazarus
January 2025. Phemex wakes up to a nightmare.
$73 MILLION gone.
Not from one wallet. Not from one chain.
From hot wallets across 16 different blockchains.
Ethereum. Solana. Bitcoin. All of them.
This wasn't a hack. This was a heist.
#CryptoSecurity
🚨 BYBIT HACK: $1.4 BILLION stolen - Largest crypto heist in history
Feb 2025: North Korea's Lazarus Group
Compromised Safe Wallet multisig
401,347 ETH drained
How it happened 🧵👇
#Bybit #CryptoHack #Lazarus #NorthKorea
3/ Impact:
52% of ALL 2025 crypto thefts
Bitcoin dropped 20%
Market panic
$160-400M laundered immediately
State-sponsored attacks are the new normal.
#Bitcoin #CryptoSecurity #DeFi
4/ Key Lesson:
Even multisig cold wallets can be compromised through UI manipulation.
Verify EVERYTHING at the blockchain level.
Never trust the interface alone.
#SecurityLessons #CryptoEducation #BlockriumShield
🚨 BYBIT MEGA HACK: $1.4 BILLION stolen by North Korea
Feb 21, 2025: Largest crypto heist in history
Lazarus Group compromised Safe Wallet
CEO unknowingly approved malicious transaction
401,347 ETH drained
This changes everything.
Thread 🧵👇
#Bybit #CryptoHack #NorthKorea
2/ The Scale:
$1.4-1.5 BILLION in Ethereum
Largest crypto heist EVER
401,347 ETH stolen in one transaction
For context:
• Mt. Gox: $450M
• Coincheck: $530M
• Bybit: $1.4B
Not even close.
#CryptoSecurity #Ethereum #Lazarus
3/ Who Did It:
FBI attributes to North Korea's Lazarus Group (TraderTraitor)
Same group behind:
• Sony Pictures hack (2014)
• WannaCry ransomware
• Multiple crypto heists
Funds nuclear & missile programs
#NorthKorea #CyberWarfare #StateSponsored
🚨 UNLEASH PROTOCOL HACKED: $3.9M drained via multisig compromise
Dec 30: Admin access gained through governance
Unauthorized contract upgrade
1,337 ETH laundered via Tornado Cash
Your governance is only as secure as your weakest signer.
Thread 🧵👇
#UnleashProtocol #DeFiHack
6/ Lessons for protocols:
✅ Use hardware wallets for ALL signers
✅ Implement time-locks on upgrades (24-48hr minimum)
✅ Require multiple independent verifications
✅ Monitor governance actions 24/7
✅ Use cold storage for critical operations
#DeFiSecurity #Web3Security
7/ Blockrium Shield detects:
• Multisig vulnerabilities
• Unauthorized upgrade attempts
• Governance anomalies
• Suspicious admin patterns
• Time-lock bypasses
Catch governance attacks before millions vanish.
#BlockriumShield #AIAudit #DeFiSafety