EthSecurity

bug hunter | attack tracer | Defi developer |

[EthSecurity @EthSecurity]

@SpecterAnalyst @zachxbt It’s so strange. Hackers bridges stolen funds from ethereum to btc. This guys do opposite

[EthSecurity @EthSecurity]

@tpiliposian In armenia?

[EthSecurity @EthSecurity]

@DeepPsycho_HQ Maybe but there is golden time

[EthSecurity @EthSecurity]

@0xdice91 Is it awarded?

[EthSecurity @EthSecurity]

@MoneroMavrick If defi + big liquidity were built on monero it could trigger skyrocketing

[EthSecurity @EthSecurity]

1-Bitcoin Lightning bug allows remote theft of bitcoin via LND nodes.
https://t.co/3dSlPwDGAy

2-Uncovering and Fixing an Inflation Bug in Aleo.
https://t.co/CfzIezZai6

[Vladimir S. | Officer's Notes @officer_secret]

Use this list of fantastic telegram channels I've put together in order to discover them as your own personal Web3-Google!

Feel free to use this folder to onboard your non-web3 friends to Web3, as the majority of the channels are maintained by independent researchers. There are also additional channels for news, CT reviews, and more!

[EthSecurity @EthSecurity]

@Sarah4Trump_ Peace

[Trail of Bits @trailofbits]

MCP security issues are well-documented, and now new defensive tools and testing strategies are emerging to help developers secure their implementations. 🧵

[EthSecurity @EthSecurity]

@cvetanovv0 @sherlockdefi This is basic advice seems for noobs

[EthSecurity @EthSecurity]

Level up your blockchain security skills with hands-on shadow audits of real-world smart contracts. Get instant AI-powered feedback and track your progress.
https://t.co/H8eobC3nY1

[EthSecurity @EthSecurity]

The hacker behind the Nomad hack has been arrested
poor guy, he is responsible for hacking 2.8 $ M. hundreds of wallets participated in the nomad bridge exploit.
he is 47 years old and going to jail for 50 years.
note: do not change your name when leaving israel

[Chaofan Shou @Fried_rice]

1inch market maker @trustedvolumes got hacked for over $4.5M and a few smaller MMs got hacked for $0.5M yesterday.

The root cause is that 1inch calls MM contract’s resolveOrders function to get funds to its settlement contract. Most bots only checked the msg.sender = settlement contract - and unfortunately there was an arbitrary call vulnerability in settlement contract. Thus the hacker could forge resolveOrders call and drain MM contracts.

The funny thing is the hacker incorrectly transferred half of the stolen funds to the 1inch settlement contract, making the funds available for everyone to grab, and he spent quite sometime to get funds back. We were trying to compete but the hacker got it first unfortunately.

[SlowMist @SlowMist_Team]

⚠️A critical vulnerability (GHSA-vjh7-7g9h-fjfh) has been discovered in the widely-used elliptic encryption library.

😈Attackers can exploit this flaw by crafting specific inputs to extract private keys with just a single signature, potentially compromising digital assets or identity credentials.

✍️In our latest article, we break down the vulnerability—its root cause, impact, and how to mitigate the risks.

❤️Special thanks to @Rabby_io for providing the vulnerability intelligence.

🔗Read the full analysis here:
https://t.co/5IVZpjuCr6

[EthSecurity @EthSecurity]

@4lteredBeast @mattkratter @USTreasury correct. if a protocol on ethereum were hacked EF do not fork it unless Ethereum protocol hacked

[oot2k @oot2k1]

Certik makes 50.000.000 USD with token audits every year.

We tend to think that contests are a good representation of the overall security market, but there is so much more then that.

[EthSecurity @EthSecurity]

Urgent Update for Geth Users! Attention validators! If you are running Geth v1.15.1, upgrade to v1.15.2 immediately to prevent potential financial loss! https://t.co/VjkvtboQCV

[EthSecurity @EthSecurity]

@NiohBerg what the fuck is "iranian regime"? all they we know as regime are not iranian, most of them like their leader seyed ali hosseini is arab

[EthSecurity @EthSecurity]

@sherlockdefi Does Transferfrom check revert on failure?

[EthSecurity @EthSecurity]

@sherlockdefi read storage find secret