https://curasec.metacog.co.kr/tags/defi/Recent content in Defi on CuraSecHugoen-usMon, 17 Aug 2026 13:03:16 +0000https://curasec.metacog.co.kr/insights/2026-08-17-the-ack3-h1-2026-defi-incident-dataset-audit-scope-across-13/Mon, 17 Aug 2026 13:03:16 +0000https://curasec.metacog.co.kr/insights/2026-08-17-the-ack3-h1-2026-defi-incident-dataset-audit-scope-across-13/<ul> <li><strong>Engineer — Skip</strong></li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Learn:</strong> Research across 135 DeFi incidents shows that the &lsquo;audited&rsquo; label routinely overstates project-wide assurance — 67.6% of attack paths fell outside all identified pre-incident audit scopes. Useful context when evaluating what your own audit attestations actually cover in board or customer conversations.</li> </ul>https://curasec.metacog.co.kr/insights/2026-07-21-hackers-steal-23-7-million-in-crypto-from-ostium-in-off-chai/Tue, 21 Jul 2026 12:43:35 +0000https://curasec.metacog.co.kr/insights/2026-07-21-hackers-steal-23-7-million-in-crypto-from-ostium-in-off-chai/<ul> <li><strong>Engineer — Learn:</strong> The attack exploited off-chain price-feed infrastructure to manipulate a DeFi protocol — a useful design-level lesson for anyone building systems that trust external data pipelines (oracles, webhooks, enrichment feeds) without integrity controls. No patch available; review data-ingestion trust boundaries.</li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Skip</strong></li> </ul>