Gate Research's report states that in December 2024, the Web3 industry experienced 27 security incidents, resulting in a loss of approximately $4.11 million, a decrease from the previous month. However, contract vulnerabilities remain the primary threat, accounting for 72% of the total losses. Major incidents included the FEG cross-chain vulnerability, Clober DEX liquidity vault attack, Vestra DAO staking contract exploit, Clipper DEX single-asset withdrawal vulnerability, and the HarryPotterObamaSonic10Inu flash loan attack. These events exposed key risks in smart contracts and cross-chain protocols, emphasizing the need for enhanced contract audits, the introduction of real-time monitoring, and multi-layered protection mechanisms to improve platform security and increase user trust.