13371337

[13371337 @Kaxaax12]

@BitDanceUp pennysia?

[13371337 @Kaxaax12]

any company monitoring exploits on robinhood?

[13371337 @Kaxaax12]

@coffiasse Actually the root cause is somehow the attacker minted himself 19M native THEO out of air on the theo chain. Then bridge out to base.

[13371337 @Kaxaax12]

@Phalcon_xyz most likely the owner itself

[13371337 @Kaxaax12]

@boez95 how about BSC

[13371337 @Kaxaax12]

@RealityEth there is a ongoing xss attack affecting reality.eth, you may need to take a look
https://t.co/YjfQtKXjwV

[Defimon Alerts @DefimonAlerts]

🚨 Defimon detected a stored XSS via governance proposal text on @RealityEth dApp.

The payload poisons app-global localStorage with attacker controlled RPC URLs, hooks window.ethereum.request and rewrites the answer. Curators, arbitrators or keepers answering any live question get silently flipped to "yes" on attacker-fed data enabling forced execution of malicious module transactions.

A fresh EOA used the permissionless addProposal() on Potion DAO's abandoned Zodiac Reality Module purely as an injection vector: the module asks its question on the shared reality.eth oracle, so it lands in the global question index.

The proposal's question JSON supplies title_html directly with an <img src=x onerror=eval(atob(...))> payload. reality.eth's DOMPurify only sanitizes the markdown path. Direct title_html is trusted verbatim and rendered via jQuery .html('.question-title'). It fires for any reality.eth visitor whose feed includes this entry.

Malicious question: https://t.co/OLO3hF7N3w (do not open with a wallet)
TX: https://t.co/cExPBj5t0N
Attacker: https://t.co/8sRLkE5LXL

[13371337 @Kaxaax12]

i feel sick about this industry

[13371337 @Kaxaax12]

@ScarletKc same

[13371337 @Kaxaax12]

@alphabaseindex You may want to pay closer attention to this gov contract: https://t.co/46VDX4DlER. Both its voting period and execution delay are relatively short.

[13371337 @Kaxaax12]

@ColeTU you leak the address the hack may just ignore them now

[13371337 @Kaxaax12]

@TheChoamNomski @BTC_JEDI21 model Mk4/Mk5/Q is basically unexploitable

[13371337 @Kaxaax12]

@clay_garrett blockchair

[13371337 @Kaxaax12]

@KLoaec can you provide txn?

[13371337 @Kaxaax12]

@iSchmiegle can you post txn?

[13371337 @Kaxaax12]

@RsiDmh @Neyro_network this is a typical rug pull

[13371337 @Kaxaax12]

@LiveOverflow https://t.co/8S6STi6yF9

[notch @notch]

Reject AI.

[13371337 @Kaxaax12]

@coinspect is this related to secondfi attack?

[13371337 @Kaxaax12]

@PeckShieldAlert @ThetanutsFi there is no underlying token to redeem for these 2M option tokens

[13371337 @Kaxaax12]

@Elliot0x maybe they only gained access on unichain rpc server

[13371337 @Kaxaax12]

@GabiGiovanni007 @banteg @Fiskantes no you are wrong