@natasaloizou@HacKanCuBa Osea, cambien sus contraseñas y pongan 2FA. Pero no por esto, en este leak no hay contraseñas, "solo" un montón de archivos sensibles
🧅 TOR archive feed:
https://t.co/6KYeJyyMyC
Every IP that has ever been a TOR node!
Searchable with full timeline, exit/guard/middle role, country, ASN, updated hourly since 2024.
Here's everything you need to know about the Balancer Hack:
1. The attack targeted Balancer's V2 vaults and liquidity pools, exploiting a vulnerability in smart contract interactions. Preliminary analysis from on-chain investigators points to a maliciously deployed contract that manipulated Vault calls during pool initialization.
2. Improper authorization and callback handling allowed the attacker to bypass safeguards. This enabled unauthorized swaps or balance manipulations across interconnected pools, draining assets in rapid succession (within minutes).
3. The exploiter initiated a series of transactions starting with a key Ethereum mainnet tx (0xd155207261712c35fa3d472ed1e51bfcd816e616dd4f517fa5959836f5b48569), which funneled assets to a new wallet under their control. Funds were then consolidated, likely for laundering via mixers or bridges.
4. Balancer's composable design where pools interact heavily amplified the flaw. Similar issues have plagued AMMs before, often tied to how they handle deflationary tokens or pool rebalancing.
Full forensic details are still emerging, with auditors like PeckShield and Nansen involved. No evidence of a private key compromise; this was a pure smart contract exploit.
Here's roughly the stolen assets:
>Ethereum: ~$70M+ drained (main hit)
>Base & Sonic: ~$7M combined
>Other chains: ~$2M+
>Main stolen assets: WETH, wstETH, osETH, frxETH, rsETH, rETH — roughly $110–116M total.
Here's what you should do If you're exposed:
1/ Withdraw Immediately: Pull funds from Balancer V2 pools if possibleavoid affected ones.
2/ Revoke Approvals: Use Revoke, DeBank, or Etherscan to cancel smart contract permissions for Balancer addresses.
3/ Monitor Wallets: Track via Etherscan or Dune Analytics for suspicious activity.
4/Stay Informed: Follow lookonchain, PeckShieldAlert, and Balancer for updates.
🟣 Nuestros Analistas de Seguridad @__Danners__ y @0xbara estuvieron en Paraná en el #Hackingday compartiendo todo lo que saben sobre hacking y técnicas ofensivas de Active Directory.
Un placer compartirlo con nuestra comunidad.
¡Gracias por la invitación!
🔥 Estuvimos en vivo en @bysepatw!
Nuestro consultor de seguridad @__Danners__ habló sobre AD, sus vulnerabilidades (Kerberoasting, AS-REP Roasting, certificados) y mostró una demo en vivo.
Les dejamos el link con la charla:
🔗https://t.co/Lxexf46S5a
¡Gracias por el espacio!
Hoy vamos a estar charlando con @__Danners__ sobre seguridad en Active Directory (AD) y creo que no podes perdértelo, ya que es un tema súper importante!! Así que te esperamos a las 19hs 🇦🇷 23hs 🇪🇸 por Kick, Twitch y YouTube https://t.co/gaiY5XVfoc
@RobertoFocke Todo culpa de Cristina Robert, y después todo culpa de Macri, y después todo culpa del incompetente X2, y eventualmente lo mismo dirán de milei