Blockchain Security Guide

Blockchain Security Guide

A total of 127 articles Last updated on 05.19

Special topic introduction

What are the common security issues in blockchain? How to ensure the security of crypto assets and projects?

Elliptic: Colorado-based company Xinbi is suspected of $8 billion in illegal cryptocurrency trading

ChainCatcher news, according to Cointelegraph, blockchain security company Elliptic disclosed that a company registered in Colorado in 2022, Xinbi Co. Ltd, is associated with an illegal online marketplace called "Xinbi Guarantee."This marketplace is based on the Telegram platform and is a Chinese illegal market primarily serving Southeast Asian scammers, having received $8.4 billion in funds to date, mainly in the form of USDT transactions. Merchants on the market provide scammers with technology, personal data, and money laundering services, assisting them in carrying out "pig butchering" scams. Xinbi Guarantee claims to be an "investment and capital guarantee group company," but its status was updated to "delinquent" in January 2025 for failing to submit periodic reports on time. The black market's money laundering service has the largest transaction share and also offers Starlink devices, stolen personal data, and fake IDs.Elliptic states that Xinbi Guarantee is the second-largest illegal online marketplace, with transaction volumes exceeding $1 billion in the fourth quarter of 2024, and is linked to North Korean hacker money laundering. The $8.4 billion transaction volume may only be the tip of the iceberg of actual trading volume. The platform has 233,000 users and operates under a "guarantee model," yet remains a hotbed for illegal activities. Records from the Colorado state government show that Xinbi Co. Ltd was listed as "in violation" in January 2025 for failing to submit its annual report on time.

Report: The number of "Rug Pull" incidents in the cryptocurrency sector has decreased, with only 7 cases reported from 2025 to present

ChainCatcher news, according to a report by Cointelegraph, based on the latest report from the blockchain analysis platform DappRadar, there were 21 "Rug Pull" incidents at the beginning of 2024, while there have only been 7 incidents so far in 2025, indicating a yearly decline in their frequency. However, since the beginning of 2025, the Web3 ecosystem has lost nearly $6 billion due to such incidents, with 92% attributed to the collapse of Mantra's OM token (the token's founder denies this was a "Rug Pull"). In contrast, the total losses from "Rug Pull" incidents during the same period in 2024 were $90 million.DappRadar analyst Sara Gherghelas pointed out that although the frequency of such incidents has decreased, their destructiveness has increased, and the scams have become more complex, often orchestrated by professional teams. The nature of these incidents is also evolving; in the first quarter of 2024, many originated from DeFi protocols, NFT projects, and Meme coins, while in the same period of 2025, they mostly occurred in the Meme coin sector. Gherghelas also warned that a sudden surge in the number of unique active wallets, high transaction volumes but low user activity, unverified smart contracts, limited GitHub activity, anonymous developer teams, or projects with sudden spikes in DApp activity could all be warning signs of a "Rug Pull."
ChainCatcher Building the Web3 world with innovators