BugBytes

Web 3 Bug Bounty Platform
Powered by @ImmuneBytes

Don't Fear Hackers, Hire Them!

[Naveen @cryptedtech]

Why can't @TransitFinance learn from its past mistakes and get its #smartcontracts properly audited?

#bugbountytips #bugbounty #blockchains #Blockchain101 #WEB3 #CryptoNews #Cryptoinvesting #scammed #Hackers #hackathon #hackathons #web3community #CryptoCommunity #web3jobs

[ImmuneBytes @ImmuneBytes]

In yet another crypto phishing scam, a victim lost 💰$218K worth of ETH on Dec 19. The method of exploit happens to be the usual—signing of a malicious ERC20 Permit message by the victim.

😔Victim:
0x9f6bcc3d52624a2be52a6b5499b582b98f7e5a41

😈Scammer Address:
0xe265398bc6ea0a4ae1de43de6e0fad81c205013b

😈Hack Txn: https://t.co/Q4XjzmLAoZ

Learn about PERMIT2 ERC-20 token approvals and associated risks here: https://t.co/pKZqcoeOsC.

To know phishing techniques adopted by crypto scammers and how to avoid falling for them, read these deep-insight articles on crypto phishing.

👀Zero-Value Token Transfer Phishing Attack https://t.co/96Lz4qdnEY

👀What is an Ice Phishing Blockchain Attack?
https://t.co/Mm1JG3tgvw

👀The Beginner’s Guide to Phishing Attacks
https://t.co/a3FxdReooM

#bugbountytips #bugbounty #blockchains #Blockchain101 #blockchaintechnology #WEB3📷📷 #CryptoNews #cryptowallet #Cryptoinvesting #Ethereum #Binance📷📷 #scammed #Hackers #hackathon #hackathons #web3community #CryptoCommunity #smartcontract #SmartContracts #web3jobs #hacked #spammed #cryptotransfer #CryptoMining #Cryptocurency #cryptocurrency #CryptocurrencyMarket #cryptocurrencies #CryptoInvestor #CryptoInvestment

[ImmuneBytes @ImmuneBytes]

We are equally excited to start our association with
@vanarchain. Eagerly looking forward to collaborating with them for making the #VANAR blockchain safe and secure to build on.

#bugbountytips #bugbounty #blockchains #Blockchain101 #blockchaintechnology #WEB3 #CryptoNews #cryptowallet #Cryptoinvesting #Ethereum #Binance #scammed #Hackers #hackathon #hackathons #web3community #CryptoCommunity #smartcontract #SmartContracts #web3jobs #hacked #spammed #cryptotransfer #CryptoMining #Cryptocurency #cryptocurrency #CryptocurrencyMarket #cryptocurrencies #CryptoInvestor #CryptoInvestment

[Vanar @Vanarchain]

📢 NEW ADOPTION ALERT 📢

Great news for future #VANAR ecosystem builders! 🌟

@ImmuneBytes, renowned for auditing 205+ projects on 16 networks, is adding @VanarChain to their supported blockchains.

[ImmuneBytes @ImmuneBytes]

On 26 Nov, an #eth address 0xee439Ee079AC05D9d33a6926A16e0c820fB2713A was scammed for ~💰$1.25M in a phishing attack where it lost ~605 $aETHWETH to 😈Fake_Phishing188696.

Hack Txn: https://t.co/JF0R9GXlQx

The addresses involved are:

👉Fake_Phishing187019:
0x0000db5c8B030ae20308ac975898E09741e70000

👉Fake_Phishing188583:
0x00004FD598eAcFda276553cdf9f1bE668eAB0000

👉Fake_Phishing188696: 0xc7C195a20EE6991ef20de42C669F30B27D7c4dD1

The 😈Fake_Phishing187019 😈address has been involved in many other phishing attacks this month.

Nov 23, 2023: ~💰$770K
Nov 17, 2023: 💰$67.15K
Nov 16, 2023: 💰$112.23K
Nov 15, 2023: 💰$3.4 million

👀Avoid falling for phishing scams by #crypto #scammers by learning more about common #phishing techniques here: https://t.co/ioJkbc3ut2

#bugbountytips #bugbounty #blockchains #Blockchain101 #blockchaintechnology #WEB3📷📷📷 #smartcontracts #cryptocurrencies #cryptocurrency #CryptoNews #cryptowallet #Cryptoinvesting #Ethereum #Binance📷📷📷📷#CryptoCommunity #crypto #cryptotrading #cryptotrader #CryptoTradingStrategies #CryptoTrends #cryptomarket #defi #dapp #token

[ImmuneBytes @ImmuneBytes]

We are excited to announce that we have completed the security audit (smart contract audit and dApp) of @lomads_co —an innovative, all-in-one platform for Web3 collectives.

Lomads’s platform has been designed to harness the power of #blockchain technology to provide efficient, secure, and scalable solutions for real-time contributor validation, project and task management, access control, fund distribution, and tool integration.

Visit https://t.co/y6z4UNxZvN to learn more about Lomads.

The full report can be accessed here: 🗂️https://t.co/KkkbmDzPJX

#smartcontract #blockchains #smartcontracts #blockchaintechnology #WEB3 #cryptocurrencies #cryptocurrency #CryptoNews #cryptowallet #Cryptoinvesting #Ethereum #polygon #optimism #arbitrum #avalanche #defi #AirdropCrypto #Airdrop #cryptomarket #defi #dapp #token #blockchaincommunity #CryptoCommunity #Crypto

[ImmuneBytes @ImmuneBytes]

On Oct 25, a fake #linea token on #ethereum was rugged for 💰~$729K.

The deployer named 😈Fake_Phishing188235 removed 💰~403 #ETH and some fake Linea tokens from the liquidity pool.

The stolen funds have been moved to #tornadocash, and the deployer also received initial funds from Tornado Cash.

📝Contract: 0x00000000fEB6A772307C6aA88AB9D57b209aCb18

😈Deployer add: 0x5Ac6737bD66d870cf52e51d95976E59C9b6DAC99

😈Txn: 0x4ab6ec871ee08d408f1e5af97450af37b052e8df633074f1687d78c9eb6e4ced

#bugbountytips #bugbounty #blockchains #Blockchain101 #blockchaintechnology #WEB3📷📷 #web3community #web3jobs #smartcontracts #cryptocurrencies #cryptocurrency #CryptoNews #cryptowallet #Cryptoinvesting #Ethereum #Binance📷📷 #BinanceUS #blockchainprojects #BlockchainBasics #crypto #web3marketing #BlockchainRevolution #blockchaincommunity #CryptoCommunity #CryptoWallet #crypto #cryptotrading #cryptotrader #CryptoTradingStrategies #CryptoTrends

[ImmuneBytes @ImmuneBytes]

🏴‍☠️ On This Day:
Revisiting Past 😈#Crypto #Hacks

📌The attacker, on Oct 23, 2022, had stolen 💰49,950,000 L2DAO tokens from @TheLayer2DAO on the Optimism chain by exploiting a vulnerability arising from an inefficient deployment of the #smartcontract.

Layer2DAO struck a deal with the hacker and repurchased 31,239,677 tokens at $0.001.

By that time, the attacker had already exchanged 16.7 million tokens.

The hasty deal with the hacker was done to protect the free fall of the L2DAO token prices, which had plummeted by 90% after the news of the exploit broke out.

😈Hacker's Wallet for Storing Stolen Funds: https://t.co/PNyeShBlye

📌On Oct 23, 2022, the BTDOG (BTDOG) token on the #BSC chain suffered an exit scam and caused losses to the tune of 💰~$165K

😈Address: https://t.co/tlWkcq9krg

📌Another token on #BSC, A6 (A6) was #rugged for 💰$56K on the same day.
😈Address: https://t.co/utxe8jfdli

#bugbountytips #bugbounty #blockchains #Blockchain101 #blockchaintechnology #WEB3📷📷📷 #web3jobs #smartcontracts #cryptocurrencies #cryptocurrency #CryptoNews #cryptowallet #Cryptoinvesting #Ethereum #Binance📷📷📷📷 #blockchainprojects #BlockchainBasics #crypto #web3marketing #BlockchainRevolution #blockchaincommunity #CryptoCommunity #CryptoWallet #crypto #cryptotrading #cryptotrader #CryptoTradingStrategies #CryptoTrends

[ImmuneBytes @ImmuneBytes]

On Oct 13, Beluga Protocol @Belugadex, the multichain stable swap AMM on the #Arbitrum chain, was exploited for ~113 $ETH (~$175K) in a flash loan attack.

The attack, which was initially funded by 0.1 $ETH from #OKX exchange, happened in 21 transactions during which USDT-USDC.e balance was manipulated to make a profit.

The 😈attacker has moved the stolen 113 $ETH worth ~$175K to #MEXC crypto exchange.

📝Contract Address: 0x9e8675365366559053f964be5838d5fca008722c

🔓Hack Txn: https://t.co/5fUeUr8va3

😈Exploiter Add: 0x4843e00ef4c9f9f6e6ae8d7b0a787f1c60050b01

Attack Contract: 0x9e8675365366559053f964be5838d5fca008722c

🤔Know how price manipulation attack happens at https://t.co/yT5mNS3DBL

#web3community #bugbountytips #Blockchain #Blockchain101 #WEB3 #web3community #web3jobs #bugbountytips #BugBounty #crypto #cryptocommunity #blockchaintechnology #blockchaindevelopment #blockchaingaming #blockchainrevolution #blockchaineducation #blockchains #blockchaincommunity #blockchaintech #blockchaininnovation #blockchainjobs #blockchainintegration #blockchainsecurity #blockchaindevelopers #blockchainsolutions #blockchaintech #DeFi #DeFiRevolution #web3development #web3education #web3event #web3innovation #cryptocurrency #cryptocurrencynews #cryptocurrencies #cryptonews #bugbounty #bugbountytips #bughunter #bugbountytip #cryptowallet #smartcontracts #smartcontract

[ImmuneBytes @ImmuneBytes]

On Oct 13, a zerotransfer scammer 😈grabbed over 💰~$40K BSC-USD from address 0xa8498C4C9eCcB46838cAA6df390E4940722a7613.

Hack Txn:
https://t.co/H2Opg2z3Mc

Phishing address: 0x458728b505243a4FC6C138586d7E8feB44dF9961

The scammers polluted the victim’s txn history with fake Binance-Peg Tether USD (USDT) tokens and then grabbed funds from him.

😈Fake Token Contract: 0xEcbbdcfdc692c5259BF2F3E334DaBA44142a0542

👀More about Zero Transfer Attack: https://t.co/9oqlJDgvau

#bugbountytips #bugbounty #blockchains #Blockchain101 #blockchaintechnology #WEB3 #web3community #web3jobs #smartcontracts #cryptocurrencies #cryptocurrency #CryptoNews #cryptowallet #Cryptoinvesting #Ethereum #Binance #BinanceUS #Ethererum #Solana #blockchainjobs #blockchainprojects #BlockchainBasics #crypto #web3marketing

[ImmuneBytes @ImmuneBytes]

On Oct 13, @Wise_Lending protocol on #ETH was attacked by the attacker but the transaction was successfully front-run by a notable white-hat MEV bot c0ffeebabe.eth.

This is the same white hat MEV bot which returned 💰2,879 ETH (~ $5.4 million) to Curve Finance, during its exploit in July 2023.

👉It front-run the txn by offering ~93.4 ETH ($146.9k) as a bribe.

👉Additionally, the bot managed to secure its income of 75.79 ETH ($118K) through this exploitative maneuver.

👉It returned the 💰169.19 ETH to @Wise_Token.
In response, @Wise_Token rewarded the bot with 1 ETH.

The attacker, in this case, leveraged two critical vulnerabilities to execute the attack:

👉Manipulating Share Values through 'Donate':

The first exploit involved manipulating the value of each share within the lending pool by using the 'Donate' function. This manipulation likely created a skewed perception of the pool's health and assets.

👉Precision Loss in 'withdrawShares':

The second exploit took advantage of precision loss, causing the 'withdrawShares' function to return a value of 0. This clever manipulation allowed the attacker to withdraw the donated WBTC, effectively emptying the pool.

👉Successful Frontrun Transaction: https://t.co/Q0bSGh85lS

👉Failed WiseLending-Exploiting Transaction: https://t.co/AgG8wQdPJ3

#bugbountytips #bugbounty #blockchains #BlockchainEducation #Blockchain101 #blockchaintechnology #WEB3 #web3community #web3jobs #smartcontracts #cryptocurrencies #cryptocurrency #CryptoNews #cryptowallet #Cryptoinvesting #Ethereum #Binance📷📷 #BinanceUS #Ethererum #Solana #blockchainjobs #blockchainprojects #BlockchainBasics

[ImmuneBytes @ImmuneBytes]

💡Tip of the Day

When using fallback functions in a #smartcontract, always:

👉Check that the data is empty if the fallback function is being used for the purpose of logging received Ether.

👀Failing to do so will make the callers fail to notice:

a) If your contract is used incorrectly
b) Any non-existent functions that are called

Reason: The Fallback function is called for plain ether transfers (without data) and also when no other function matches.

#bugbountytips #bugbounty #blockchains #BlockchainEducation #Blockchain101 #blockchaintechnology #WEB3 #web3community #web3jobs #smartcontracts #cryptocurrencies #cryptocurrency #CryptoNews #cryptowallet #Cryptoinvesting #Ethereum #Binance📷📷 #BinanceUS #Ethererum #Solana #blockchainjobs #blockchainprojects #BlockchainBasics #smartcontracts #solidity

[ImmuneBytes @ImmuneBytes]

On Oct 17, @FantomFDN suffered a breach of a few Fantom wallets.

The estimated losses from the Fantom Foundation funds are around 💰~$550K, and overall losses across multiple wallets are speculated to be around 💰~$7.1M (~4501ETH)

In an official statement, @FantomFDN acknowledged the breach and informed the community that although a few of the compromised wallets are labeled as “Foundation Wallets,” they were not being used officially by Fantom.

They had been reassigned to a Fantom employee, who was using them as personal wallets.

While the hack investigation is still underway, the cause of the hack could be 🔑private key theft🔓, executed with the help of phishing attacks and social engineering.

More information will be available after the completion of the hack analysis by @FantomFDN.

Stolen funds from the @FantomFDN wallet theft are currently sitting in EOA
https://t.co/uRPNoCsBXw

#bugbountytips #bugbounty #blockchains #Blockchain101 #blockchaintechnology #WEB3 #web3community #web3jobs #smartcontracts #cryptocurrencies #cryptocurrency #CryptoNews #cryptowallet #Cryptoinvesting #Ethereum #Binance📷 #BinanceUS #fantom #blockchainjobs #blockchainprojects #BlockchainBasics #crypto #web3marketing #BlockchainRevolution #blockchaincommunity #CryptoCommunity #CryptoWallet #crypto #cryptotrading #cryptotrader #CryptoTradingStrategies #CryptoTrends #crypto

[ImmuneBytes @ImmuneBytes]

On Oct 1, a fake EigenLayer token (EL) on #BSC was exploited for 💰 ~$300K.

The 😈deployer removed liquidity from the L.P. in over 45 txns.

📝Contract: 0x14ac066ac2CD24CBdE31f78659c11F13aB61E4e7

😈Deployer: 0x12296f35e7B58F47Bb78C3fB4d1ba943c1270E85

The deployer wallet is linked to many addresses, some of the addresses are mentioned below:

👉0xF6Da79E6E590799e744500798670529E9BA360ba
👉0xAae3DA50681fD263474A611385f8EF950d4Dacd1
👉0xAAE3FD742636EFfbFFA9E64Ce6E6Fc2eA9CDaCd1
👉0x60aa5758FCe685142ca8eA00D754a44AF219ACA6
👉0xAbeD42dD1cE4Be247c4B66eE5b3fCdD2686BAa07

#Blockchain #BlockchainEducation #Blockchain101 #WEB3 #web3community #web3jobs #Cryptos #bugbountytips #BugBounty #ethereum #blockchains #BlockchainRevolution #Crypto #CryptoNews #cryptocurrencies #hacks #defi #cryptotrading #cryptomarket #CryptoInvesting #CryptoInvestor #CryptoInvestment #BlockchainTechnology

[ImmuneBytes @ImmuneBytes]

🐞Spot the Bug Challenge #13

Hey, #smartcontract auditors and developers,

Do you really think you have mastered #solidity and #smartcontracts?

Spot the bug in code (image) and prove it?

#bugbountytips #bugbounty #blockchains #BlockchainEducation #Blockchain101 #blockchaintechnology #WEB3 #web3community #web3jobs #smartcontracts #cryptocurrencies #cryptocurrency #CryptoNews #cryptowallet #Cryptoinvesting #Ethereum #Binance #BinanceUS #Ethererum #Solana #blockchainjobs #blockchainprojects #BlockchainBasics

[ImmuneBytes @ImmuneBytes]

🏴‍☠️ On This Day: Revisiting Past 😈#Crypto #Hacks

📌On Sep 26, 2022

$Dollar Token on #BSC was rugged for 💰~$382K, where the 😈deployer removed 382,660.18 BSC-USD and 3,142,177.01 Dollar tokens from the L.P.

A few days later, the same deployer removed liquidity from another #token named Themis.

📝Contract: 0x781163f0110b69DcBb2289339E3Ea16D040966D5

😈Hacker Add: 0x9B5C721715Fd9ABaEabCb64E89B777c06aDee4a1

📌On Sep 26, 2020

@kucoincom, a Singapore-headquartered #cryptocurrency #exchange, fell victim to a security breach involving its wallet infrastructure.

The breach resulted in the unauthorized transfer of tokens, primarily ERC-20 tokens, from the exchange.

Approximately 💰$281 million worth of cryptocurrency assets, including #Bitcoin (#BTC) and #Ethereum (#ETH), were compromised during the incident.

#Blockchain #BlockchainEducation #Blockchain101 #WEB3 #web3community #web3jobs #Cryptos #bugbountytips #BugBounty #ethereum #blockchains #BlockchainRevolution #Crypto #CryptoNews #cryptocurrencies #hacks #binance📷📷📷#smartcontract #defi #cryptotrading #cryptomarket #CryptoInvesting #CryptoInvestor #CryptoInvestment #BlockchainTechnology

[ImmuneBytes @ImmuneBytes]

#ImmuneBytes 💡Audit Tip #13

Handle exceptions diligently in #SmartContracts.

Failing to handle ⚠️exceptions can allow 😈attackers to exploit the contract.

Always:

🛡️ Use the 'require', 'assert', and 'revert' functions properly.

🔒 Log exceptions for debugging.

#blockchain #BlockchainEducation #blockchains #blockchaintechnology #blockchain101 #WEB3 #web3jobs #web3community #cryptocurrency #cryptocurrencies #CRYPTONEWS #cryptotrading #solidity #ethereum #smartcontracts #smartcontract #BugBounty #bugbountytips

[ImmuneBytes @ImmuneBytes]

🐞#ImmuneBytes Spot The #Bug Challenge #12

Hey, #smartcontract 👨‍💻auditors and developers,

A majority of #crypto exploits originate from some vulnerability or other in the #smartcontract.

👇Are you up for the challenge of spotting the bug in the code (image)?

#bugbountytips #bugbounty #blockchains #BlockchainEducation #Blockchain101 #blockchaintechnology #WEB3 #web3community #web3jobs #smartcontracts #cryptocurrencies #cryptocurrency #CryptoNews #cryptowallet #Cryptoinvesting #Ethereum #Binance #BinanceUS #Ethererum #Solana #blockchainjobs #blockchainprojects #BlockchainBasics

[ImmuneBytes @ImmuneBytes]

On 22 Sept, Unleashed Beast ($BEAST) token on #BSC was #rugged for 💰~$55K when the 😈deployer removed 262.55 WBNB and 368,734,937.91 $BEAST #tokens from the L.P.

📝Contract Add: https://t.co/9dV9NQP6MU

😈Deployer Add: https://t.co/pbL9GNeQPY

😈Txn: https://t.co/HTzQsMFpt0

The deployer then transferred 💰262 BNB to add 0x6bea6D31d03C1BA7af0880532D888E98AAF395E5, which was then sent to Binance Hot Wallet

#Blockchain #BlockchainEducation #Blockchain101 #WEB3 #web3community #web3jobs #Cryptos #bugbountytips #BugBounty #ethereum #blockchains #BlockchainRevolution #Crypto #CryptoNews #cryptocurrencies #hacks #binance📷 #solidity #smartcontract #defi #cryptotrading #cryptomarket #CryptoInvesting #CryptoInvestor #CryptoInvestment #BlockchainTechnology

[ImmuneBytes @ImmuneBytes]

On Sep 24, KUB/KUB-Split Tokens on #BSC was 😈exploited for 💰~$78.4K in a flash loan attack.

The attacker created a malicious #smartcontract to interact with the #token contracts and manipulated the pool using a fake #USDC token.

📝KUB-SPLIT Token Contract: 0xc98E183D2e975F0567115CB13AF893F0E3c0d0bD

📝KUB Token Contract: 0x808602d91e58f2d58D7C09306044b88234ab4628

😈📝Attacker Contract Add: 0xa7Fe9c5D4b87b0d03E9bB99F4B4E76785de26b5D

😈Attacker add: 0x7Ccf451D3c48C8bb747f42F29A0CdE4209FF863e

Fake USDC token: 0xa88D48a4c6D8dD6a166A71CC159A2c588Fa882BB

#Blockchain #BlockchainEducation #Blockchain101 #WEB3 #web3community #web3jobs #Cryptos #bugbountytips #BugBounty #ethereum #blockchains #BlockchainRevolution #Crypto #CryptoNews #cryptocurrencies #hacks #binance📷 #solidity #smartcontract #defi #cryptotrading #cryptomarket #CryptoInvesting #CryptoInvestor #CryptoInvestment