About this research desk
WDGuides is an independent research desk covering the Web3 security landscape. We publish weekly loss data reports, verified news reviews, structured intelligence and full-chain incident research — every figure sourced, every status labeled.
What we cover
Five research columns track the Web3 security market from five angles:
- Weekly News Review — 10–20 source-backed events per week, classified by failure vector.
- Weekly Data Report — the indicator map and week-over-week loss statistics.
- Weekly Intelligence — the same five questions answered every week, in the same order.
- Weekly Loss Price Update — stolen totals, attack-type distribution and security-service market prices.
- Deep Analysis — full-chain reviews of the week's most significant single incident.
Monthly loss reports (under Security Market Intelligence) are published at the start of the following month.
Our approach
Evidence-first. Every figure in our reports traces to a source in a deliberately narrow whitelist of primary and specialist providers. We do not paraphrase secondary aggregators without checking them against primary trails, and we do not report a figure we cannot trace. If a story has only one source we say so, and we mark it accordingly.
Source whitelist
| Category | Sources | Role |
|---|---|---|
| Security & audit firms | Chainalysis, SlowMist, CertiK, PeckShield, Immunefi, Hacken, TRM Labs, Elliptic, Solidus Labs, rekt.news | Incident analyses, loss figures, exploit confirmations |
| On-chain data | Etherscan, TRONSCAN, Solscan, DefiLlama, Dune, Blockchair | On-chain verification, address labeling |
| Project official | Project blogs, X, GitHub, security disclosures | Primary statements, post-mortems |
| Industry media | CoinDesk, The Block, Blockworks, Cointelegraph, Decrypt, Protos | Cross-check and context |
| Regulators | OFAC, FCA, SEC, CFTC, EU MiCA | Enforcement actions and freezes |
Editorial standards
Every event in a weekly review carries a status label:
- Confirmed — at least two independent sources, or a public on-chain trail, support it.
- Largely confirmed — one strong source plus corroborating detail; figures may still revise.
- Confirmed pattern — the pattern is well-attested; specific counts are still preliminary.
- Unconfirmed / under investigation — single source or open investigation; treated as provisional.
- Informational — research or funding signal with no loss figure attached.
Regulatory freezes (Tether blacklists, OFAC freezes) are tracked separately from unrecovered exploit losses, because they are recoverable in principle. We are also explicit about which figures are estimates and which are computed exactly — see the “Which numbers are estimates?” item in the Weekly Data Report FAQ.
Cadence & scope
Weekly reports cover the trailing seven days and publish on the Monday following the window. Monthly loss reports are published at the start of the following month and aggregate the prior month's data. The week-over-week view is the default; longer comparisons appear in monthly and intelligence columns when the data warrants it.
Brand context
This site is one in a vertical of independent research desks covering adjacent Web3 topics, sitting alongside a sister site focused on the Tron energy and transfer economy. Editorial decisions here are independent of commercial interests; the brand link in the footer is disclosed and marked as such.
Editor
WDGuides Research Desk — Independent research desk focused on Web3 security data, on-chain forensics methodology and practical defense guidance.
Contact & feedback
Tips, corrections and source leads are welcome. If a figure is wrong or a status label needs revising, tell us and we will update the record on this page (and note the revision in the next weekly report).