JessicaMW

Aspiring master builder...

[JessicaMW @MsgDotSender]

Finished the Senior track! thank you @LearnWeb3DAO so much for this! #100DaysOfCode #Web3

[Watcher.Guru @WatcherGuru]

JUST IN: BlackRock & Fidelity now hold 134,358 $BTC worth over $5.7 billion for their spot #Bitcoin ETFs.

[Kyber Network @KyberNetwork]

🚨Urgent🚨

Dear KyberSwap Elastic Users,
We regret to inform you that KyberSwap Elastic has experienced a security incident.

As a precautionary measure, we strongly advise all users to promptly withdraw their funds. Our team is diligently investigating the situation, and we commit to keeping you informed with regular updates.

Thank you for your understanding and cooperation during this challenging time.

[Bitcoin.com News @BitcoinNews]

North Korea-Backed Cybercriminal Entity Lazarus Group Behind Poloniex Hot Wallet Breach #cryptoexchanges #poloniexhack https://t.co/xTRn6xMDir

[CharlesWang @0xCharlesWang]

A protocol which was audited by Trail of Bits and HatsFinance was exploited, I have quite a critical opinion when it comes to different security companies, but these two I would absolutely see as top notch.

This makes this topic even worse, that a protocol which had such a great audit coverage got exploited. It was not a bug reported, it was exploited….

The web3 security needs to unite together to prevent such things in the future - the only question is:

„How can we do this?“

What is your opinion on this topic?

[ddimitrov22 @ddimitrovv22]

Just discovered this hidden gem. A repo with 90+ write-ups for Immunefi discovered bugs. Painful to see some of them are not paid but a lot to learn from here.

https://t.co/v6GWQIazlN

[zuhaibmohd @zuhaib44]

🕵️ Audited a bridge contract a while ago and uncovered some fascinating bugs! 🐛

1. Discovered a DoS vulnerability preventing deposits and withdrawals. 😱

2. Unearthed a cross-function reentrancy issue causing double token spending. 💸

I'll be sharing detailed analysis with PoC on GitHub soon once the report is public: https://t.co/7xVDBpiNgz 🔍📝

Stay tuned for updates! 🚀🔐

[dYdX @dYdX]

crypto rally sponsored by mommy gfs everywhere 😌

[Dimitar Tsvetanov @cvetanovv0]

EVM Mastery is all you need to learn Ethereum Virtual Machine👇🏼
https://t.co/vIT5Dam6Uz

[Watcher.Guru @WatcherGuru]

JUST IN: BlackRock's iShares #Bitcoin Trust has been listed on the DTCC (Depository Trust & Clearing Corporation).

[Watcher.Guru @WatcherGuru]

JUST IN: $33,000 #Bitcoin

[Security Trybe @SecurityTrybe]

After clicking an advertisement on an unsecure website, your computer freezes.
A message appears, demanding you pay a certain amount of money to unlock your computer.
What is this type of attack called?

[Dimitar Tsvetanov @cvetanovv0]

Great article from Chainlink which explores the differences between Market Manipulation and Oracle Exploits 👇🏼
https://t.co/eWcwhEv1js

[PeckShieldAlert @PeckShieldAlert]

#PeckShieldAlert @yyctrader1 has reported that #friendtech wallet was compromised. The scammer has already transferred the stolen funds from #Base to #Ethereum via #Orbiter and deposited some to #Binance.

[Mike Miller @mikemillercyber]

How I landed my first SOC Analyst job in Cyber Security:

1. During my interview, I was handed a few pieces of paper, that were in fact printouts from Wireshark. I was asked to determine what was going on in the series of packets.

2. I took a moment, reviewed them, and then smiled.

3. I described to the interviewer, the complete story these packets told, which included the use of insecure protocols, which raised a red flag. I also determined that downloads of music from LimeWire was happening within the organization.

I was hired on the spot.

I flourished at this organization and learned so much once I was able to ride in the hot seat.

At the time:

1. I couldn't count in binary.
2. I couldn't describe the OSI model.
3. I didn't have a security certification.

It's great to understand theory. Sometimes it's just better to have hands on practical knowledge.

#cybersecurity #informationsecurity #infosec #leadershipbyexample

[The Cyber Security Hub™ @TheCyberSecHub]

Cybercriminals Using EvilProxy Phishing Kit to Target Senior Executives in U.S. Firms https://t.co/tNxBZzFmwE

[Rekt News @RektHQ]

In the arena, breaking things.

A double-whammy of embarrassing security blunders led to @starsarenacom being drained of $2.9M on Saturday.

Ever heard the phrase ‘stop digging’?

https://t.co/l4j5xskmTr

[CertiK @CertiK]

CertiK is once again acknowledged in @Apple's latest iOS Security Update.

Our dedicated SkyFall Team contributed to identifying three critical vulnerabilities in the iOS kernel, affecting several devices pre-iOS 17.

Here’s a deep dive on the findings 👇

[Lookonchain @lookonchain]

HTX Global Hacker just returned the stolen funds of 4,999 $ETH ($8.2M). @justinsuntron

https://t.co/fIxrm01a4z
https://t.co/gHM0Yjqlqs

[Beosin Alert @BeosinAlert]

Analysis of the Stars Arena exploit:🔽

The contract is not open source, there seems to be a reentrancy vulnerability.

During the call of the 0xe9ccf3a3 function, the attacker reentered and called the 0x5632b2e4 function, setting a block height.

Then, in the sellShares function, this height was used as a parameter to calculate the amount of $AVAX to send, resulting in an abnormally large calculated amount. Ultimately, the attacker was able to obtain a large profit.

[PeckShield Inc. @peckshield]

Our initial analysis on today's @starsarenacom $2.9M hack indicates a reentrancy issue on the Stars Arena: Shares contract at https://t.co/Wm48TRTHvi

The reentrancy is abused to update the weight when the share/ticket is issued so that 1 share can be sold at a much higher price ~274k $AVAX