ChainCatcher news, according to market data, after the U.S. attacked Iran's nuclear facilities, the Middle Eastern stock markets opened higher across the board, with Israel's TA-125 index rising by 1%, reaching a historic high. Saudi Arabia's Tadawul All Share Index increased by 1%, Kuwait's Premier Market Index rose by 0.7%, and Qatar's benchmark index climbed by 0.7%. The Egyptian stock index fell by 1.5%.

ChainCatcher news reports that the blockchain security company Asymmetric Research has disclosed a critical vulnerability in Circle's Noble-CCTP (a component of the USDC cross-chain transfer protocol) found on the Cosmos network, and has privately notified Circle. The vulnerability has been promptly fixed, with no loss of user funds or malicious attacks occurring.The security company discovered that malicious actors could bypass the sender verification process of the cross-chain transfer protocol and forge USDC on the Noble bridge. More specifically, the "ReceiveMessage" handler of Noble-CCTP accepts "BurnMessages" from any sender without first verifying that the bridging message was sent from the validated "TokenMessenger" address on the original chain.However, although the vulnerability initially appeared to be an infinite minting flaw, the actual impact is limited due to Noble's minting cap of approximately 35 million USDC.

ChainCatcher news, Beosin EagleEye security risk monitoring, early warning, and blocking platform statistics show that in the entire year of 2022, more than 167 major attack incidents in the Web3 field were monitored, with total losses from various attacks reaching 3.6384 billion USD, an increase of 47.4% compared to attack-related losses in 2021. Among these, there were 10 security incidents with a single loss exceeding 100 million USD, and 21 security incidents with losses between 10 million and 100 million USD.In terms of project types, 12 cross-chain bridge security incidents caused approximately 1.89 billion USD in losses, ranking first among all project types in terms of losses. DeFi projects were attacked 113 times, accounting for about 67.6%, making it the project type with the highest frequency of attacks.In 2022, a total of 20 public chains experienced major security incidents, with Ethereum, BNB Chain, and Solana ranking as the top three in terms of loss amounts; BNB Chain, Ethereum, and Solana ranked as the top three in terms of the number of attack incidents.Exploitation of vulnerabilities was the most frequent and caused the highest losses among attack methods throughout the year. In 2022, there were 87 attack incidents involving vulnerability exploitation, with total losses reaching 1.458 billion USD.Among the 167 major attack incidents monitored in 2022, audited and unaudited projects accounted for almost half each, with proportions of 51.5% and 48.5%, respectively.According to the Beosin KYT virtual asset anti-money laundering compliance and analysis platform monitoring, approximately 1.396 billion USD of stolen funds were transferred to Tornado Cash in 2022, accounting for 38.7% of the total loss funds from all attack incidents. Throughout the year, about 289 million USD of stolen funds were recovered, accounting for only 8% of all losses. A total of 243 Rug pull incidents occurred during the year, with a total amount involved reaching 425 million USD (excluding the FTX incident).