Rastro

Track the on-chain flow. Blockchain forensic intelligence platform with encrypted reports on @Solana.

@Colosseum Frontier • Supported by @SuperTeamBr 🇧🇷

[Rastro @CryptoRastro]

🚨 EXPLOIT ALERT 🚨

Humanity Protocol wallets linked to the project were compromised → +$30M+ in ethereum:0xcf5104d094e3864cfcbda43b82e1cefd26a016eb drained (losses climbing from $19M to over $32M reported).

On-chain analyst @SpecterAnalyst was one of the first to flag the suspicious drains from 17+ wallets that interacted with Humanity Protocol.

The attacker exploited compromised private keys belonging to a member of the Humanity Foundation, draining $H tokens and swapping them aggressively for ETH/BNB on DEXes like Kyber and PancakeSwap. $H token crashed 85-90%.

⚠️ Important: • Core protocol remains secure and user funds on the main contracts are SAFU • This was not a smart contract bug — it was a private key compromise • The team (via @Humanityprot and @terencekwok) has acknowledged the incident and is working with leading security firms • Trading continues but they strongly advise: pause all interactions with bridge and liquidity pools until further notice.

✅ Recommendations: • Immediately stop any bridge or LP interactions with Humanity Protocol until official all-clear • Only follow verified updates from @Humanityprot or @terencekwok (beware of scammers and fake DMs) • Projects should use Multisig + Timelock + regular key rotation for foundation/admin wallets • Revoke any unnecessary approvals if you interacted with related contracts.

User funds are SAFU on the core protocol, but private key management still kills projects. Stay safe out there.

[Rastro @CryptoRastro]

@SuperteamBR @colosseum @usebido @riptidesim @kaxisclub Parabéns a todas as equipes! 🇧🇷🔥

[Rastro @CryptoRastro]

@colosseum

[Rastro @CryptoRastro]

@solana_sailor @solana @SolanaFndn @superteam @toly We’re in! 👁️🔥

What’s the point of an on-chain investigation if the final report is just a manipulable PDF?

We solve this with an end-to-end encrypted and verifiable solution on Solana.

Encrypted on-chain investigations, built for real-world impact.

[Rastro @CryptoRastro]

@solana_sailor @solana @colosseum @superteam @toly We're in! 👁️🔥

What's the point of an on-chain investigation if the final document is a useless and easily manipulated PDF?

We solve this with our end-to-end, encrypted, and verifiable solution in Solana.

Encrypted on-chain investigation in Solana.

[Rastro @CryptoRastro]

We're in.

[Sailor @solana_sailor]

2,857 projects entered Colosseum Frontier

I put them all in one image

Looks like an entire ecosystem
But it’s a single hackathon

Build on Solana.

[Rastro @CryptoRastro]

@kukasolana @RoundFinanceSol We are proud to say: We were born with the support of the @SuperteamBR 🇧🇷

The journey to Colosseum Frontier has been incredible.

The submission deadline has passed, but construction has only just begun.

Thanks @kukasolana

[Rastro @CryptoRastro]

🚨 EXPLOIT ALERT 🚨

@Polymarket UMA CTF Adapter on Polygon was compromised → ~$660K in POL drained.

@zachxbt was one of the first to flag the suspicious transfers from the UMA CTF Adapter Admin.

The attacker exploited an old 6-year private key, draining roughly 5,000 POL every 30 seconds from an internal operations/rewards wallet.

⚠️ Important:
• User funds and main Polymarket contracts are SAFU
• This was **not** a smart contract bug, it was a private key compromise
• The team has already rotated the key and revoked permissions
• Trading continues normally

✅ Recommendations:
• Immediately revoke approvals for the UMA CTF Adapter
• Avoid interacting with the affected adapter until official confirmation
• Projects should use Multisig + Timelock + regular key rotation for admin/ops wallets

User funds are SAFU, but old key management still kills projects.

[Lookonchain @lookonchain]

Warning: #Polymarket's contract appears to be exploited, and the attacker is stealing funds.

So far, more than $660K has already been stolen.

Source: @zachxbt

https://t.co/WXvRwtWEFs

[Rastro @CryptoRastro]

@usebido @TimDraper 🔥🔥🔥

[Rastro @CryptoRastro]

@solana_sailor @colosseum @crabbylions @toly @solana Lol

[Rastro @CryptoRastro]

@witty_cruz 🔥🔥

[Rastro @CryptoRastro]

@SolanaFloor @colosseum @solana 🔥🔥🔥

[Rastro @CryptoRastro]

@vibhu @colosseum Build 🔥🔥

[Rastro @CryptoRastro]

@vibhu We're in! 👁️🔥

What good are on-chain investigations if the final document is a worthless and easily manipulated PDF? We solve this with our end-to-end, encrypted, and verifiable solution in Solana.

[Rastro @CryptoRastro]

@solana @colosseum We're in! 👁️🔥

What good are on-chain investigations if the final document is a worthless and easily manipulated PDF? We solve this with our end-to-end, encrypted, and verifiable solution in @solana

[Rastro @CryptoRastro]

@kukasolana We're in! 👁️🔥

What good are on-chain investigations if the final document is a worthless and easily manipulated PDF? We solve this with our end-to-end, encrypted, and verifiable solution in Solana.

[Rastro @CryptoRastro]

@mattytay @colosseum We're in! 👁️🔥

What good are on-chain investigations if the final document is a worthless and easily manipulated PDF? We solve this with our end-to-end, encrypted, and verifiable solution in Solana.

[Rastro @CryptoRastro]

@colosseum @solana We're in! 👁️🔥

What good are on-chain investigations if the final document is a worthless and easily manipulated PDF? We solve this with our end-to-end, encrypted, and verifiable solution in Solana.

[Rastro @CryptoRastro]

🚨 EXPLOIT ALERT 🚨

@EchoProtocol_ on @Monad, $76.7M Unauthorized eBTC Mint.

@lookonchain detected the mint of 1,000 eBTC first. The attacker compromised a single admin EOA key, granted themselves minting rights, and created the tokens.

⚠️ Important:
• Monad chain itself is safe
• Not a smart contract bug — it was poor key management (single EOA admin)
• Attacker used part of the minted tokens as collateral on Curvance to borrow real WBTC, then bridged and laundered via Tornado Cash
• Still holds ~955 unbacked eBTC

✅ Recommendations:
• Avoid using Echo Protocol / eBTC until official confirmation
• Monitor any Curvance positions exposed to eBTC
• Projects should move to Multisig + Timelock for admin/minting roles

[Lookonchain @lookonchain]

Crazy — another hack just happened!

According to @dcfgod, @EchoProtocol_ on Monad was exploited.

The hacker:
minted 1,000 $eBTC ($76.64M) on Monad;
deposited 45 $eBTC ($3.45M) into Curvance;
borrowed 11.3 $WBTC ($867K) from Curvance;
bridged the 11.3 $WBTC to Ethereum and swapped it for 385 $ETH ($821K);
then deposited the 385 $ETH into Tornado Cash to launder the funds.

The hacker still holds 955 $eBTC ($73.2M).

https://t.co/iswmvC0Gk1