The Messiah Project is an innovative cryptocurrency security initiative that combines cutting-edge AI technology, flexible workflow automation, and comprehensive security testing methods. It aims to prevent another $1.5 billion hack. Through these technologies, we seek to provide a secure and reliable environment within the cryptocurrency ecosystem, safeguarding users' digital assets from malicious attacks.
Technical Framework: Messiah
Bybit Incident PoC
Our PoC uses the Bybit hacker incident as a case study, simulating a secure wallet website to demonstrate our AI-based security solution for analyzing frontend JavaScript to prevent malicious operations.
- Simulated Secure Wallet Frontend Website:
- React.js:
- We use the React.js framework to create the frontend interface and pair it with TypeScript to add static type checking, enhancing code maintainability.
- App.tsx:
- This file contains the user interface of the simulated wallet and injects malicious logic so that we can test security vulnerabilities.
- Smart Contracts:
- We use Solidity to write two different smart contracts:
- Trojan.sol:
- This contract uses a common ERC20 transfer function but actually swaps the address of the logic contract, simulating a malicious operation.
- Transfer.sol:
- This contract acts as the wallet logic address, responsible for transferring funds from the wallet to other addresses.
AI Detection Solution
This section mainly utilizes artificial intelligence technology to assist in the automated detection process, identifying potential threats within websites and smart contracts.
- Python:
- We use Python to write a CLI tool to parse and check the contents of the website, analyzing the web content.
- n8n:
- As an automation tool, n8n integrates AI to understand and scan frontend JavaScript to detect abnormal behavior.
Through this technical framework, the Messiah Project strives to enhance the awareness of potential security threats and significantly improve the protection of user funds.