GoPlus Security 🚦 (@GoPlusSecurity): 🧵1/3

🧵1/3 🧯Old contract exploits keep happening — how should projects respond? Recently, smart contract vulnerability attacks have been occurring frequently. In particular, legacy contracts deployed years ago are being increasingly exploited as attackers leverage AI techniques to surface vulnerabilities, causing significant losses for both projects and users. ▪︎ On June 9, the Token of Power (TOP) contract on #ETH, deployed 7 years ago, was exploited, resulting in a loss of approximately $1.5 million; ▪︎ On May 25, the 3-year-old contract of http://WUSD.fi was attacked, causing a loss of around $200,000; ▪︎ On June 14 and June 18, @aztecnetwork was attacked twice consecutively, both due to a 2-year-old legacy contract being exploited, with total losses exceeding $4 million. To address this crisis, adopting AI-based continuous and always-on audit services may be the only effective path forward. AI audits can complete security checks on historical contracts in a short time, balancing reliability and cost-effectiveness, helping eliminate these hidden risks for projects and developers. GoPlus’ AI continuous audit platform DeepScan reviewed several recent legacy contract exploit incidents and found that DeepScan could detect the vulnerabilities within a very short time. Losses that could have been prevented were instead handed over to attackers — a truly unfortunate outcome. 👉12 minutes to detect the Token of Power (TOP) contract vulnerability