Incident studies
Public-incident studies
Retrospective analyses of real, publicly disclosed exploits — these are not umibit audit reports, but independent studies built from public disclosures, showing why full-coverage pre-launch audits matter. Every claim cites public sources you can check.
These are public-incident studies, not umibit engagements.
This section analyses real incidents for security research and methodology, and implies no business relationship between umibit and the projects involved. Every claim can be checked against the sources listed on each page.
5
Incident studies
16
Root causes mapped
16
Critical + high
Why include real exploits? AI keeps accelerating vulnerability discovery and 0day output, and the attack surface of bridges and protocols keeps growing. These studies break down how real losses actually happened — empirical backing for umibits methodology, and why full-coverage review + AI before launch is a must.
| Event | Chain | Severity | Incident rating | Date |
|---|---|---|---|---|
| Euler Finance donateToReserves 缺失健康检查事件复盘 Euler Finance（借贷协议）≈ $197M（后经链上协商追回约 $240M 价值） | Ethereum | 12 | Critical risk | 2023-03-13 |
| BNB Chain Token Hub 跨链证明伪造事件复盘 BNB Chain · BSC Token Hub（原 Binance Bridge）铸出 ≈ $570M（2,000,000 BNB）· 实际外流 ≈ $100M+ | BNB Beacon Chain · BNB Smart Chain | 21 | Critical risk | 2022-10-06 |
| Nomad Bridge 可信根初始化为零事件复盘 Nomad（乐观式跨链消息桥）≈ $190M（近乎全部 TVL） | Ethereum | 3 | Critical risk | 2022-08-01 |
| Ronin Bridge 验证人私钥失窃事件复盘 Ronin Network / Sky Mavis（Axie Infinity）≈ $625M（173,600 ETH + 25,500,000 USDC） | Ronin · Ethereum | 22 | Critical risk | 2022-03-23 |
| Wormhole 跨链桥签名校验绕过事件复盘 Wormhole（Solana ↔ Ethereum 跨链桥）≈ $326M（120,000 wETH 无抵押铸出） | Solana · Ethereum | 3 | Critical risk | 2022-02-02 |
Want to see umibit’s actual audit deliverables? View audit reports →