//security

ON&OFF-chain security & research. Founder @rsch_io. Building safer infrastructure for the decentralized future.

[//security @SecXBT]

Poor is a mindset. Broke is a temporary condition. In crypto, you stay broke only if you refuse to fix your 'poor' mindset.

[//security @SecXBT]

#SCAM

[//security @SecXBT]

Watching this INK network NFT drop on OpenSea. Said it was a FREE mint, but they magically flipped the price to $0.75 once open minting went live.
Broke scammer behavior, LOL.

Stay safe out there!

#NFTScam #INK #Web3

[//security @SecXBT]

For those who haven't joined @commonsmade:

1. Register at https://t.co/KUVgvCXxkT
2. Connect X & GitHub for base score

Each vouch adds points to your base score, and the top 1,000 get the airdrop.

Reply below by tagging their main account to #vouch for me, I'll return it!

[//security @SecXBT]

LMAO.

The dev is selling on their own website, sniping rare #NFTs, then dumping them on #OpenSea while keeping the 10% creator fee permanently enabled. Double-dipping at its finest.

[//security @SecXBT]

NFTs for gambling. Same casino, just with blockchain buzzwords.

[//security @SecXBT]

@RifatOfficiall @SwarmBase https://t.co/R0m5gfGYTa

[//security @SecXBT]

SwarmBase $SWARM (swarmbase*io) has the same dev behind the old LiquiCore Project and Ridera*org.

Fake project. Dev is a scammer.

Do your own research before getting involved.

[//security @SecXBT]

SwarmBase $SWARM (swarmbase*io) has the same dev behind the old LiquiCore Project and Ridera*org.

Fake project. Dev is a scammer.

Do your own research before getting involved.

[//security @SecXBT]

NFTs for gambling. Same casino, just with blockchain buzzwords.

[//security @SecXBT]

︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎

︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎
︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎
︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎
︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎
︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎ ︎

[//security @SecXBT]

Usually when an incident happens, the team’s first move is damage control to calm customers down. In crypto, the first statement is often more PR fire extinguisher than full transparency.

[Mustafa Aljadery @mustafap0ly]

The CTF contract is not exploited, it’s an internal address we use for ops.

POL was being sent to that address because it was in an internal refiller service that checks and refills balances every couple of seconds.

All user funds are safe and the address is being rotated.

[//security @SecXBT]

Found a Mid–High risk in UmaCtfAdapter on Polygon:

"abi.encodePacked(...) collision pattern"

Contract: 0x65070BE91477460D8A7AeEb94ef92fe056C2f2A7

Different inputs can produce the same hash and potentially bypass auth/message validation.

Tiny bug, huge impact.

#Web3Security

[//security @SecXBT]

Now it’s 2K26, and they were right. Money inflated, prices inflated, assets inflated, even lifestyles inflated. The only thing that didn’t inflate fast enough was most people’s income.

[//security @SecXBT]

2K16 was the signal.

[//security @SecXBT]

Stop blindly following signals and start learning the market itself, because real traders survive by understanding charts, risk management, and market psychology, not by copy-pasting entries from strangers and becoming exit liquidity for someone else’s trade.

[//security @SecXBT]

Not financial advice. Just financial sacrifice.

[//security @SecXBT]

Not financial advice. Just financial sacrifice.

[//security @SecXBT]

2K16 was the signal.

[//security @SecXBT]

@zksrzkshmr Is that true, sir?

[//security @SecXBT]

🧡 ethereum:0x6b175474e89094c44da98b954eedeac495271d0f

[//security @SecXBT]

U̶S̶D̶T̶

[//security @SecXBT]

U̶S̶D̶T̶

[//security @SecXBT]

The official account associated with me is X, formerly Twitter, @secXBT. I do not own, operate, or authorize any other social media accounts. Any account claiming to represent me elsewhere is fake, unauthorized, and not affiliated with me.

[//security @SecXBT]

@the1969ETH 👍

[//security @SecXBT]

Blockchain is no longer decentralized.

[Arbitrum @arbitrum]

The Arbitrum Security Council has taken emergency action to freeze the 30,766 ETH being held in the address on Arbitrum One that is connected to the KelpDAO exploit. The Security Council acted with input from law enforcement as to the exploiter’s identity, and, at all times, weighed its commitment to the security and integrity of the Arbitrum community without impacting any Arbitrum users or applications.

After significant technical diligence and deliberation, the Security Council identified and executed a technical approach to move funds to safety without affecting any other chain state or Arbitrum users.

As of April 20 11:26pm ET the funds have been successfully transferred to an intermediary frozen wallet. They are no longer accessible to the address that originally held the funds, and can only be moved by further action by Arbitrum governance, which will be coordinated with relevant parties.