Academy Hot News Article

OKLink Audit, a new module designed by OKLink, will be launched to become a “Patron Saint” in Blockchain

2022.07.27

OKLink Audit was officially launched to provide the perfect security service for the blockchain industry. Relying on OKLink, the world’s leading blockchain big data and technical service provider, the product combines outstanding code vulnerability mining capabilities, business logic integration capabilities, and authoritative blockchain data on 27th July.

In recent years, encryption technology and asset volume have developed rapidly worldwide, and its total value even exceeded $3trillion. That not only do the public chain, wallets, exchanges, and other sectors continue to develop, but also the concepts of Defi, NFT, GameFi, and Meta-universe have become talking points, which leads to the market capacity, trading volume, the number of users and other data increasing significantly.

Blockchain-related security incidents have increased significantly. The background of this phenomenon is due to the lack of supervision and the absence of an effective security mechanism, especially when the ecosystem on the chain is booming.

According to OKLink Audit statistics, although the overall encryption market was in a downward trend in 2022 due to the macro environment and the related behaviors on the blockchain decreased sharply, 132 security incidents occurred in the first two quarters alone, and it is staggering that the top ten hacker attacks caused losses of about $351 million.

Rug pull, a high-profile fraud type, is becoming the biggest trust threat in the blockchain industry, and the growth rate of hacker attacks caused by security leaks, flash loans, code vulnerabilities, etc. is also accelerating. What’s more, social media fraud and phishing attacks have increased significantly. The modus operandi of such cases is to steal user tokens by obtaining the control of the project discord and publishing phishing links.

“TokenScanner” creates a safe zone in the blockchain industry by providing multi-directional protection

Against the backdrop that the security situation is still grim, OKLink Audit adheres to the original intention of “technology links a better life” and undertakes the mission of closely integrating blockchain data, technology, and security. It launched Tokenscanner in the first version of the product, including four modules (contract analysis, tradability analysis, holder analysis, and liquidity analysis) and 21 risk item evaluation criteria. Through data analysis and code analysis, these parameters can help users quickly locate the risk items of interactive addresses, so as to avoid them the first time.
Contract analysis refers to the detection of the code, and then checking whether the tokens have the risks of unauthenticated, additional issuance, destruction, termination of transactions, privileged events, transaction tax modification, single point, false deposits, and so on. Tradability analysis is to know whether the project has the problem of non-sellable tokens and high tax points without interaction. Holder analysis and liquidity analysis, through blockchain data, help users understand situations and problems, including but not limited to token position distribution, concentration, whether there is a risk of rug pull, and whether liquidity is sufficient.
There are various scenarios in which the Tokenscanner can be used, such as monitoring whether tokens are unsalable, setting too high tax of purchase/sales tax, issuing, repurchasing, destroying tokens, locating privilege events, etc.
As shown in the example below, select the ETH chain ( only BSC and ETH are available in phase I), enter “0x0441”, and the parameter results of the token will appear after searching.

First of all, MHX is defined as the existence of honeypot risk (it can only be bought but not sold), including “only the address of the project party can be sold”, “it can only be sold once” or “it can only be sold in a small amount”, etc. Fraudsters can achieve this in a variety of ways, including but not limited to controlling the white list of selling addresses, requiring that the “to address” cannot be a DEX address, controlling the taxes charged for selling, controlling the total number of sales, and increasing the control background. Secondly, 12 of the 21 risk items were detected, and the risk score was 0.
Enter the details page of “MegaShiboX INU”, and the basic information of the token is summarized on the left, including the token address, creator, creation time, token price, total supply, circulation supply, the source of the first handling fee, and whether there is an agency contract. On the right is the risk score and risk analysis.
Click the expand button to see the four analysis dimensions, including tradability analysis, contract analysis, holder analysis, and liquidity analysis, as well as which risk items have been hit.

At the bottom of the page, the content displayed includes the specific information of the privilege transaction, privilege address, and privilege function involved in the token.

As of its launch, OKLink Audit has scanned more than 1.2 million tokens, of which more than 15,000 are at risk.

In addition to scanning specific addresses, users can also connect wallets and view the risk of money held. Currently, the wallets supported include OKX wallet and MetaMask.

After connecting the wallet, it will be sorted according to the risk score of the tokens held. It supports clicking on one of the tokens to learn more information.

Based on the accumulation of blockchain big data and technical services of OKLink for many years, especially the Multi-Chain browser of 15 public chains that have supported EVM, UTXO, and other models, the “token scanner” supports real-time scanning and provides faster, more accurate and more perfect data.

The more professional the “Security Audit” ability is, the better service provided for the whole industry ecosystem of blockchain

The more outstanding the contract audit ability, the better the service is for the whole industry ecosystem of blockchain

In addition to the risk token scanning function, the module launched synchronously in this version also has a smart contract audit service. This service combines data analysis and code analysis (detecting more than 50 risk items one by one), which can check the security risks at the code level, and then provide practical and effective comprehensive solutions to the problems. The projects involved in the audit cover the public chain, Defi, L2, stablecoin, wallet, NFT, and other sectors.

OKLink Audit ensures the safety of the project through the combination of static code scanning and manual verification. The audit team also set three levels of scoring standards (basic score, time score, and environment score) for each vulnerability to ensure the accuracy and professionalism of the audit results. More practical, the expert team will also provide targeted modification suggestions to improve the security, privacy, and availability of the project.

OKLink Audit has audited Lido, Iotex, ONT, OKC USDT, Web3 wallet, and other head projects. More automated audit tools are continuously updated, including but not limited to the batch audit function of judging specific characteristics, search and display of online audit reports, and other services.

Conclusions

With the rapid development of blockchain technology worldwide, security incidents are inevitable, and blockchain security issues will be paid more and more attention. The “Token-Scanner” product module has formed a set of practical and effective comprehensive security solutions, providing security services covering wallet, public chain, Defi, NFT, Web3, and other sectors. Therefore, this launch is not only a product innovation that combines the advantages of existing underlying infrastructure and core technology but also undertakes the mission of blockchain security and promotes the development of the industry.

Disclaimer: The Content is for informational purposes only, you should not construe any such information or other material as investment, financial, or other advice.

Recommended

hot-news-en