Share this article
OpenZeppelin Reveals Top 10 Blockchain Hacking Techniques in 2022
The first and second place bugs involved layer 2 scaling system Optimism and vanity address generator Profanity.
Updated Mar 17, 2023, 3:06 p.m. Published Mar 17, 2023, 3:09 a.m.
OpenZeppelin, a crypto cybersecurity company that provides an open-source framework to develop secure smart contracts, on Thursday U.S. time revealed the final results of the top 10 blockchain hacking techniques of 2022, in an effort to make the crypto space more safe.
First and second place included a bug on the software node level of layer 2 scaling system Optimism and a vulnerability on the key generation level of vanity address generator Profanity. The Optimism bug, if exploited, causes “an infinite mint” of Optimism’s native token OP that “would collapse many (if not all) Optimism protocols,” while the vulnerability on Profanity put at least $160 million at risk, said Ashiq Amien, one of the six panelists on the project.
STORY CONTINUES BELOW
All of the hacking techniques were already publicly disclosed in 2022, before the start of the project.
Following Monday’s $200 million exploit of decentralized finance (DeFi) lending protocol Euler Finance, the reveal of top 10 hacking techniques is meant to highlight the best practices for security measures on various levels of blockchain code including the smart contract level, key generation level and node level.
The project “helps to push security boundaries forward and strengthen the security of the whole ecosystem by basically accumulating all the research and ideally surfacing underrated research,” said Nikita Stupin, a blockchain security engineer and researcher at OpenZeppelin.
Stupin added in an interview with CoinDesk, “This primarily is for security researchers so that they are up to date with the most novel approaches, the most novel techniques, or the most novel attack vectors so that they can apply them and see them in their audits.”
Additional members of top 10 list include a bug that allowed exploiters to empty all wrapped token contracts, potentially forcing the wrapped ether (wETH) contract to be insolvent and a vulnerability on the Avalanche blockchain that was used to break security assumptions of several protocols, including decentralized exchange SushiSwap and lending platform Abracadabra, according to the announcement.
Community members first picked on the top 15 hacking techniques that occurred in 2022, while a panel of six blockchain security experts, which included Paradigm’s head of security Samczsun, determined the top 10 from the community list.
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
Solana’s Drift Launches v3, With 10x Faster Trades
With v3, the team says that about 85% of market orders will fill in under half a second, and liquidity will deepen enough to bring slippage on larger trades down to around 0.02%.
What to know:
- Drift, one of the largest perpetuals trading platforms on Solana, has launched Drift v3, a major upgrade meant to make on-chain trading feel as fast and smooth as using a centralized exchange.
- The new version will deliver 10-times faster trade execution thanks to a rebuilt backend, marking the largest performance jump the project has made so far.
Top Stories
