The Audit Gap in Blockchain Security: A Four-Year Empirical Study of Public Audit Findings and Real-World Exploit Incidents

This paper presents an empirical analysis of the Web3 security landscape over the four-year and three-month period from 1 January 2022 to 27 March 2026. The dataset combines 23,818 public audit findings produced by 22 independent security firms with 218 real-world exploit incidents documented by...

PT-2025-17693 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not explicitly mentioned. There is no information about the estimated number of potentially affected devices worldwide or details about real-world...

CVE-2018-10942

creationtimestamp| type| source ---|---|--- 2024-12-25 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-25 2024-12-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-26 2024-12-28 00:00:00+00:00| seen| The Shadowserver...

PT-2022-8388 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as general information, estimated number of potentially affected devices...

CVE-2019-17506

creationtimestamp| type| source ---|---|--- 2022-12-12 13:30:07+00:00| seen| https://t.me/truesecator/3813 2024-10-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-29 2024-10-30 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabiliti...

PT-2019-2094

Name of the Vulnerable Software and Affected Versions Windows 7 affected versions not specified Windows Server 2008 R2 affected versions not specified Description A remote code execution issue exists in Remote Desktop Services formerly known as Terminal Services due to a kernel Use-After-Free UAF...