_marvy

Full-Stack, Blockchain Engineer and Security Researcher💻
Solidity🪨 || Move💧 || MERN || 🐇🕳️
prev @DotCircleLabs

[_marvy @_marvyCodes]

🧵 Day 12 - Final Day of the Move Security Thread Challenge

-->> Theme: “The Finale - Closing the Loop ” LOL

-> If you’ve been following since Day 1, thank you for your consistency, your focus, and the energy you’ve put into learning Move security daily.
-> Today is a special theme: we close the 12-day journey by studying a bug caused by a loop that… never closes.
-> Let’s finish strong. 💪🔥

[_marvy @_marvyCodes]

🧵Day 11 - Initialization & Versioning Bugs in Move

-> Using FlowX Finance as today’s case study

-->> Initialization bugs in Move are far more subtle than in Solidity because of how Sui handles object versions, module upgrades, and persistent resources.

-->> When versioning is not handled correctly, old entry functions may remain callable even after upgrades leading to catastrophic re-initialization attacks.
Let’s break down what went wrong 👇

[_marvy @_marvyCodes]

@Praise_Ffs nobody?
lol

[_marvy @_marvyCodes]

@miraj369 You didn't ask?

[_marvy @_marvyCodes]

@mister_explore @Ichie_Crypto100 Proof

[_marvy @_marvyCodes]

@mister_explore Assessment update thief

[_marvy @_marvyCodes]

@palmpay_ng @SocomantiniTJT I've shared already

[Immunefi @immunefi]

Here’s a list of all crypto protocols hacked this year. It’s only May.

Stake DAO
WUSD fi/Glov
Gnosis Users
Fractal Protocol
StablR
Mure
Polymarket
MAP Protocol
RetoSwap
HermesVault
Bankr
Echo Bridge
SEA Token
Verus-Ethereum Bridge
Adshares
Thorchain DEX
Transit Finance
Aurellion
SQ Protocol
INK Finance
Renegade
TrustedVolumes
Ekubo
SmartCredit
Sharwa Finance
Bisq
Wasabi Perps
Aftermath Perps
Sweat Foundation
Syndicate
Quant
JUDAO
Singularity Finance
ZetaChain
Scallop Lend
Litecoin
Purrlend
Giddy
Kipseli
Volo Vault
Thetanuts Finance
Juicebox V3
Kelp
Grinex
Rhea Lend
Zerion Wallet
MONA
Dango
SubQuery Network
Hyperbridge
Aethir
BSC TMM/USDT
Drift Trade
LML/USDT staking protocol
GoonFi
Cyrus Finance
Resolv
Neutrl
dTRINITY dLEND
Venus Core Pool
Goose Finance
Aave V3
Gondi V3
Molt EVM
SolvBTC
Curve LlamaLend
FOOM Cash
Wise Lending V2
Ploutos Money
DGLD
Blend Pools V2
IoTeX
Veil Cash
Moonwell Lending
CrossCurve
Step Finance
Revert Lend
Matcha
Aperture LM
Saga
Makina
Meteora DAMM V2
YO Protocol
Truebit
Polycule
Fusion by IPOR
TMX TRIBE
PRXVT

[_marvy @_marvyCodes]

@palmpay_ng @SocomantiniTJT Nothing has been done it's over 6 days now

[_marvy @_marvyCodes]

@palmpay_ng @SocomantiniTJT I've done that via Dm already

[_marvy @_marvyCodes]

@UnkleAyo Hope nd pray??????
Prayyyyy??
Hope???

LoL

[_marvy @_marvyCodes]

@IMOLEreal @palmpay_ng I have this exact same issue man
I Just need my money
paga said they've sent this

[_marvy @_marvyCodes]

@Birniwa10 @palmpay_ng Restart your phone and try again, might help

[_marvy @_marvyCodes]

@SocomantiniTJT @palmpay_ng Try adding a new authentication method and try it

[_marvy @_marvyCodes]

@UnkleAyo @aproko_doctor

[_marvy @_marvyCodes]

@0xsadikbaba What if it is nd you are just on the wrong side

[_marvy @_marvyCodes]

@UnkleAyo Actually

[_marvy @_marvyCodes]

10

[Patrick Collins @PatrickAlphaC]

I recently turned 33, and every year I want to go back to 21-year-old Patrick with a list of lessons.

If you're in your 20s, these are for you.

Most lessons only land after an ass-whooping. And even then, you usually miss them the first time.

[_marvy @_marvyCodes]

@yinkathenoob @mfonbassey01 @Ayobamisos_0X Mi o ti e mo e now
Ma tun kigbe fun mi 😂😭

[_marvy @_marvyCodes]

@BlessedGirl001 No Toph no list

[_marvy @_marvyCodes]

@Tundeym00re @jon_d_doe Someone makes 200k daily
6M monthly
And you think he's foolish enough to not think of this 😂
End

[_marvy @_marvyCodes]

@susylicious2023 Cry