Poor4ΞvΞr.docx.exe

Noob/Script kiddie/Smart Contract Security Enthusiast

[Chaofan Shou @shoucccc]

26 LLM routers are secretly injecting malicious tool calls and stealing creds. One drained our client $500k wallet.

We also managed to poison routers to forward traffic to us. Within several hours, we can directly take over ~400 hosts.

Check our paper: https://t.co/zyWz25CDpl

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

@F4nx_K bruh stop playing with your dumb bot, go do some real shit

[sampledtech @sampledtech]

who’s gonna be the Kanye of software?

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

@downsin @cz_binance @0x0xFeng chigga just wanna hustling

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

Spent a lot of time finally solving the BRIDGE TAKEOVER challenge🥲

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

I haven't written code for almost half a year. @onlypwner is a great resource to help me with my review. I'm currently stuck on BRIDGE TAKEOVER and need to refresh my knowledge of the EVM.

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

I haven't written code for almost half a year. @onlypwner is a great resource to help me with my review. I'm currently stuck on BRIDGE TAKEOVER and need to refresh my knowledge of the EVM.

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

@1vilP 我是学生 能送点吗

[patrickd @patrickd_de]

Ethereum Smart Contract Auditor's 2023 Rewind

https://t.co/XAkN8HSgeV

🎉🥳 It's done! Let it be known far and wide🔁

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

Who needs Netflix When we have blockchain?
https://t.co/YfHTwIJgmk

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

@8olidity lol,dev closed the claim

[SunSec @1nf0s3cpt]

🌟DeFiHackLabs monthly recap. We released 10 PoCs in April.

🔥MVP: @gbaleeeee contributed to 4 of them.
Contributors: @0xPoor4ever @0xCryptothink @NFTUSM @yicunhui2

👉https://t.co/CcKAqxGah1
#web3sec

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

@RealShit_0731 dumbshit

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

a simple script

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

https://t.co/cSufkjjQ6J

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

Obviously, it seems like the dev is saying "Give me your fucking money".

[Beosin Alert @BeosinAlert]

3/ Later, the USDC-WETH pool (0x82cf66e9a45Df1CD3837cF623F7E73C1Ae6DFf1e) was deployed through the factory contract, and the pool’s USDC and WETH has max approval to the Feeto address of the contract factory at initialization, which has an obvious risk of centralization.

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

too many details🧐, interesting

[Beosin Alert @BeosinAlert]

Detailed analysis of the Yearn Finance @iearnfinance $11M hack.
The root cause is the misconfiguration of yUSDT Token contract. When performing a rebalance to reselect pools, only USDT is used as the add amount, and USDC cannot add to the pool.

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

Dexible has been exploited, with the core being that attacker can input a token as the router and the routerData constructs a function call of transferFrom(address, address, uint256), a quick read of the code on the phone, there may be some details to overlook

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

@gbaleeeee semgrep uses some scan rules

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

These vulnerabilities can be find just by using SAST.

[Poor4ΞvΞr.docx.exe @0xPoor4ever]

another one vulnerable contract allows anyone to make arbitrary function calls

[BlockSec @BlockSecTeam]

Users who approved to 0x907cc6a91ace65c745ab2c5851da64584d356288, please revoke the approval immediately!