Damocles

Web3 Security | GameFi Security| Web3 Security Ai Agent | Smart Contract audit and others Web3 Security area.
Discord:

[Damocles @DamoclesLabs]

💪💪💪

[HackerX.Africa @hackerxafrica]

Africa doesn’t just need AI consumers.

We need creators. Builders solving real problems.

That’s what AI EduHack is about.

And Season 2 is now live.

Powered by @OpenCampus_xyz, @EduChain_xyz, @SailfishFinance, @DamoclesLabs

Application details in thread 👇

[Damocles @DamoclesLabs]

Honored to team up with Pencil Finance as their security partner. Excited to work side-by-side in bringing safer, more robust services to the education-finance sector!

[Pencil Finance @pencilfinance_]

🌟Damocles Labs Becomes the Strategic Security Partner of Pencil Finance!

Security is the cornerstone of innovation. We are thrilled to announce that @DamoclesLabs has entered into a strategic partnership with @pencilfinance_
to provide end-to-end Web3 security protection.

🛡 Key Highlights
• In-Depth Defense – Multi-layer protection that covers code audits, penetration testing, and real-time on-chain monitoring.
• Tailor-Made Solutions – Customized security strategies and contingency plans designed for Pencil Finance’s tokenized student loan pools and tranching model.
• Security Enablement – Joint AMAs, workshops, and developer bootcamps to share DeFi security best practices with the community.

[Damocles @DamoclesLabs]

We’re honored to be the audit partner for SubstanceX’s V2 upgrade. Looking forward to more collaborations in the future, and wishing the project continued success and growth! 🚀

[SubstanceX (💙🌋🧡) @SubstanceX_]

🔥 Mainnet V2 is officially live!

This launch kicks off with a 100,000 $ZETA trading campaign —
$ZETA can now be used as margin for perpetuals,
and a bigger $BTC campaign is coming next 👀

🗓 July 8, 2:00PM – July 15, 2:00PM (UTC+8)

📖 Details: https://t.co/dKMcBhpI7a

💰Trade now: https://t.co/DM6eDdwtfI

Let’s go @zetachain 🚀
#ZETA #SubstanceX #TradingCampaign

[Damocles @DamoclesLabs]

We are truly honored to partner with @paywith_crypto as their security partner! Damocles Labs is committed to leveraging our Web3 security expertise to fully safeguard the PaywithCrypto ecosystem and its global users. Excited to set a new standard for Web3 payment security together!

[Vincent Tse @TheVincentTse]

Partnership Announcement

We are proud to announce that @DamoclesLabs has become a security partner of PaywithCrypto.

Together, we are advancing a new frontier in Web3 payment security. Embedding business-centric, real-time protection across the PaywithCrypto ecosystem to ensure secure, efficient, and scalable operations for merchants and users worldwide.

Damocles Labs provides:
✅ Blockchain Security Audits
✅ Exchange & Wallet Security Audits
✅ Smart Contract Security Audits
✅ Web Client and Server Penetration Testing
✅ Application Logic Audits
✅ Mobile App Risk Analysis
✅ Advanced Penetration Testing Exercises

Their expertise enables PaywithCrypto to deliver a platform fortified against modern threats, built on trust, transparency, and operational excellence.

This partnership sets a new standard for crypto payment security. Ensuring that PaywithCrypto not only builds technology but leads securely into the future of global digital commerce.

About Damocles Labs:
Damocles Labs specializes in unified security frameworks and real-time risk solutions for Web3 businesses, with proven success in GameFi, DeFi, and blockchain-based operations.

About PaywithCrypto:
PaywithCrypto bridges digital assets with real-world commerce, providing seamless, secure crypto payment solutions for merchants, users, and businesses around the world.

🔗 Damocles Official Links:
Damocles Labs Website: https://t.co/T6OGlawsfJ
Damocles Labs X: https://t.co/cyh99k2MSq

[Damocles @DamoclesLabs]

Thanks for the trust. Looking forward to cooperate again in the future.🎆

[Blend | On-chain Bank for EDU🧡 @Protocol_Blend]

🚨 Exciting News! 🚨

Blend Protocol has successfully completed its security audit! 🔒

We’re committed to delivering a secure, transparent, and trustless DeFi experience. This audit ensures that our protocol is safe and ready for launch on EDUCHAIN. 🚀

Big thanks to @DamoclesLabs for their thorough review and expertise. 👏

📄 Read the full audit report here: https://t.co/Bn8Y1aehdm

[Damocles @DamoclesLabs]

@pumpdotscience hey team check your message

[ThrustPad @ThrustPad]

We’re thrilled to share that Thrustpad contracts have been successfully audited by @DamoclesLabs! 🎉  This underscores our dedication to a fair and secure launch on EDUCHAIN. 🚀🔎

Read the full audit report here: https://t.co/l4GMkZyl6l

[Damocles @DamoclesLabs]

Once again encountered a bug affecting token output of @playbigtime. We sincerely recommend all GameFi developers to conduct rigorous security testing on game protocols when launching new features and to design more comprehensive test cases. Also, as we mentioned in last year's report, it may be worth considering encrypting the protocols for both incoming and outgoing data transmissions. #BigTime📷

[Damocles @DamoclesLabs]

Hello, builder. This is our security analysis from an existing perspective on BigTime. Based on our conclusions, BigTime carries significant security risks. We hope that our analysis report can be helpful to you.
#BigTime #GameFi #GameFicheat #Anticheat @playbigtime

[Damocles @DamoclesLabs]

🌟We are excited to announce that we have become the strategic security partner of EDU-Chain.

🛡️As the strategic security partner of EDU-Chain, we will leverage our rich experience in web3 business security to provide comprehensive security support, helping EDU-Chain become the most secure and trusted educational public chain in the industry. At the same time, we will continuously enhance the security awareness and secure development capabilities of learners and educators by harnessing the power of EDU-Chain.

🛠️About EDU-Chain: EDU-Chain is a decentralized platform that aims to tackle the key challenges facing the education sector today. At its core, it is an ecosystem that connects learners, educators, content creators and educational institutions, enabling new ways of collaboration and value creation with blockchain technology. Beyond its role as a platform, it is a community, helping to facilitate meaningful interactions and exchanges to improve the outcomes for stakeholders in the sector.

⚔️About DamoclesLabs: DamoclesLabs is a security team that takes a business-centric approach. They not only excel in Web3 security but also focus on the business aspects. Currently, they are dedicated to establishing unified security standards and real-time interchangeable security solutions for the GameFi industry.

EDU-Chain OFFICIAL LINKS:
X: https://t.co/0t0jIsBIKV
Website: https://t.co/jrDMHz0lXv
Hackathon: https://t.co/kduBga8cCL

Damocles OFFICIAL LINKS
Website：https://t.co/5pDeo6suqV
X： https://t.co/ChTClGXfHD

[Damocles @DamoclesLabs]

This situation is usually caused by a lack of validation on the server side. Typically, SLG games have the settlement service in the GS, where both clients only report state modification data (such as movement, attacks, placements). However, in the case of "Champions Tactics," it seems that some game-related information is stored on the client side as well. Therefore, a hacker only needs to analyze the protocol and manually send protocol that affects the game settlement to the server at the beginning of the match, leading to an immediate victory.
Therefore, game developers should focus on vulnerability discovery in game protocols during quality testing or security audits. Additionally, they should ensure proper version control with each version change.
#Champions #GameFi #security

[PANews丨APP全面升级 @PANewsCN]

育碧首款Web3游戏《Champions Tactics》遭遇单玩家自动胜利漏洞，排位赛几乎瘫痪

育碧（Ubisoft）最近推出的NFT角色扮演游戏《Champions Tactics: Grimoria Chronicles》遭遇重大漏洞，有一名玩家通过不明方式实现了“自动胜利”，导致其他玩家无法正常进行排位赛。

这位玩家（昵称为Schilleri11或Paulstar111）在每场线上对战中自动获胜，排名榜上显示他已进行超过56,000场比赛。

受影响的玩家在Discord服务器上抱怨称，每次匹配到此玩家都无条件输掉比赛，导致游戏无法正常进行。游戏的Discord管理员已表示团队知悉该问题并已封禁该玩家，但部分玩家反馈该账户仍在活跃。Ubisoft正在加紧修复漏洞，但该事件已引发玩家对游戏稳定性的强烈不满。

《Champions Tactics》官推公告称，针对上周末的匹配问题，团队已找到解决方案，正在制定补偿计划，以回馈玩家的耐心与支持。

[Damocles @DamoclesLabs]

seems this attack by Ace Drainer

[Damocles @DamoclesLabs]

📢 Security Alert

Lottie Player is currently under a supply chain attack. @1inch and all websites using Lottie Player version 2.0.5 and above are becoming unsafe. Please refrain from visiting these websites, and it is advised for the project teams to check the versions of the libraries they are using.#supplyChainAttack #1inch

[Damocles @DamoclesLabs]

@1inch Developers need to be alert to false phishing emails. Like this bro received version:

[Damocles @DamoclesLabs]

See you tonight

[Salvo Games @_Salvo_Official]

🎮 Salvo Space Announcement 👋
Topic: GameFi Market Trends, Technological Innovations, and Potential Projects

🔈 Link: https://t.co/O0BNhZ6BCC
⏲️ Time: October 29 (Tuesday) 20:00 (UTC+8)

Organizer: Salvo Games
Guest Lineup:
Chai (Budao Initiator: @Lbxx_520)
Lucia (CMO of ArcX: @ArcX_games)
Damocles (@DamoclesLabs)
Eleven (Head of VOOX Chinese Market: @voox_zh)
Carl (BD head of Salvo)

🌟 Join us to discuss the future of GameFi, share market trends, and explore innovative technologies. We look forward to interacting with everyone! #GameFi #Salvo #AMA

[Damocles @DamoclesLabs]

The new issue about @playoffthegrid : By modifying "productid" field in "OffTheGridLRLT8\EasyAntiCheat\Settings.json" file , you can manually disable EAC, which means that the developer has not fully utilized the heartbeat provided by EAC to detect whether EAC is enabled. This also gives cheating players a chance to bypass EAC protection. It seems that many GameFi developers need to strengthen their learning and awareness of security solutions.

The screenshot below indicates that even with EAC disabled, game analysis can still be performed using the regular version of CE.

Using security solutions in the wrong way does not effectively protect the safety of players and investors.

[Damocles @DamoclesLabs]

Based on the current analysis and data collection, there have been numerous hacks appearing. @playoffthegrid is a great game, and we hope the project team can enhance their security. Due to network issues, we were unable to test the logic for acquiring NFT items during settlement. We also hope the project team can increase auditing and testing efforts in this area. #OffTheGrid #hacker

[Damocles @DamoclesLabs]

@playoffthegrid @NeillBlomkamp @VladKorolev_ @pierskicks @GunzillaGames you can find the report on our website or the github:
official website: https://t.co/Bm3aUzUa2E
GIthub ZH: https://t.co/z3dJGqW5YM
Github EN: https://t.co/GQO6tLTkHr

[Damocles @DamoclesLabs]

Based on the current analysis and data collection, there have been numerous hacks appearing. @playoffthegrid is a great game, and we hope the project team can enhance their security. Due to network issues, we were unable to test the logic for acquiring NFT items during settlement. We also hope the project team can increase auditing and testing efforts in this area. #OffTheGrid #hacker

[Damocles @DamoclesLabs]

@vonitahgaming @playoffthegrid we have analysis this game , eac is too weak to detect the hackers🥲 and many guys are currently developing the cheats.

[Damocles @DamoclesLabs]

If guys wish to optimize the game by themselves, you can refer to the following solutions.
WIN + R
%USERPROFILE%\Saved Games\OTG\
GzGameUserSettings.json

Set the following to 0

"antiAliasingQuality": 0,
"textureQuality": 0,
"shadowQuality": 0,
"effectsQuality": 0,
"globalIlluminationQuality": 0,
"reflectionQuality": 0,
"postProcessQuality": 0,
"foliageQuality": 0,
"shadingQuality": 0,

scroll down...

"hideoutMeshMinLODQuality": 0,
"gameMeshMinLODQuality": 0,
Then make the file read-only.

[Damocles @DamoclesLabs]

@JakeeYeXe @playoffthegrid wow game guru

[Damocles @DamoclesLabs]

At present, the security and fairness of @playoffthegrid seem to be challenged. In the future, we will conduct a detailed analysis of the vulnerabilities in EAC and the issues with the game. If possible, we will publicly disclose some security issues with this game.
#OffTheGrid