Bytescan Security Lab

This is an EU-based Cyber Security Lab, Focusing on analyzing malware, Blockchain Security, AI-Safety, cloud Servers, API, and Web Security.

[Bytescan Security Lab @Bytescan_]

CVE-2026-36433 — Arbitrary code execution in Actions Semiconductor Media Player Utilities v.4.46

No signature. No checksum. No auth. Their own firmware update toolkit (Production.dll + RdiskUpgrade.exe) accepts any firmware you hand it over USB.
https://t.co/meTetZ91W1
#CVE

[Bytescan Security Lab @Bytescan_]

CVE-2026-39020 assigned - DoS in Wings3D 2.4.1 via crafted Wavefront OBJ file.

I found this with vulcan our LLM based fuzzer

Advisory: https://t.co/tqzQNlsHFz

#bugbounty #CVE #fuzzing #security

[Bytescan Security Lab @Bytescan_]

I just joined the waitlist for @immunefi Signals. Project-level intel on payout velocity, response times, and where to hunt. https://t.co/QFlFB9aJfu

[Bytescan Security Lab @Bytescan_]

SecondFi wasn’t “hacked” in the usual sense.

Its Android signer generated Ed25519 nonces from public transaction data, meaning a single on-chain signature could expose a private key.

374 wallets drained. 16M ADA lost. 129M ADA swept into custody.

[Bytescan Security Lab @Bytescan_]

CISA contractor reportedly exposed AWS GovCloud admin keys, plaintext passwords, internal DevSecOps infrastructure, and software deployment secrets in a PUBLIC GitHub repo.

And even worse...
• Secret scanning allegedly disabled
• Passwords stored in CSVs
• Keys remained valid ~48h after disclosure
A reminder that many major breaches don't start with 0-days. They start with basic OPSEC failures.
#CyberSecurity #AWS #CloudSecurity

[Bytescan Security Lab @Bytescan_]

THORChain - Rekt IIIThursday, May 21, 2026THORChain - Rekt Three exploits in five years. Toss in a $200 million insolvency crisis. Sprinkle $1.2 billion in North Korean laundering on top. The relationship between THORChain and North Korea runs deeper than most protocols would care to admit.

[Bytescan Security Lab @Bytescan_]

Governments call it age verification. But, we Security researchers call it a config file edit!
The EU's digital identity app was bypassed in under 2 minutes!!! This isn't protection. It's a threat!

[Bytescan Security Lab @Bytescan_]

Today I was reading about the Volo DeFi hack analysis , it is fascinating to see it didn’t get hacked in the usual code exploitation. It seems the attacker had the admin key and simply used it. That is the uncomfortable reality in defi hacks, control of the key is control of everything. and it doesnot matter how many times your code get auditted!
#defihack

[Bytescan Security Lab @Bytescan_]

What TWAP is in DeFi world?

TWAP stands for Time-Weighted Average Price. Instead of reading the current price right now like spot price, it reads the average price over the past N seconds.
So the idea is that averaging over time makes it harder to manipulate so one big momentary spike gets diluted by all the normal prices on either side of it.

Uniswap V3 implements this using a tick accumulator that means every second the pool adds the current tick (its internal price representation) to a running total stored on-chain.

When you ask for the TWAP, you take two snapshots , one from N seconds ago and one from now . So subtracting them, and dividing by N seconds. You get the average tick, which converts into an average price.

How this helps for DeFi security ?
If the TWAP window is 5 minutes and an attacker moves the price for 10 seconds, only 10/300 = 3% of the window is affected. The average barely moves. That is the entire point of a TWAP . So it forces an attacker to sustain a manipulation across many blocks, which is expensive.
#web3 #security #blockchain @Bytescan_

[Bytescan Security Lab @Bytescan_]

@PhilippeBo64866 yeah because many of them are just under radar and still used in some industries

[Bytescan Security Lab @Bytescan_]

Fuzzed a 30-year-old archive format for 18 iterations and found a signed integer overflow in the timestamp parser. Without UBSan it would have been completely invisible. This is why you compile with sanitizers.
#fuzzing #sofrware #security #hacking

[Bytescan Security Lab @Bytescan_]

We can audit your code at https://t.co/VLJzHLeK69 where you get concerete security fuzzing on your backend and on-chain contracts, and do not forget to monitor your code regularly ! Whenever you add a new feature to your protcol you introduce a new potential bug, one time audit is just an illusion for security!

[Bytescan Security Lab @Bytescan_]

@CryptoRank_io https://t.co/dpwbrohZhJ scans sol tokens for any security or rugpull issues before investing!

[Bytescan Security Lab @Bytescan_]

@elonmusk to the moon ? ;)

[Bytescan Security Lab @Bytescan_]

@samczsun 911 does not operate there ;)

[Bytescan Security Lab @Bytescan_]

One time audits create false confidence. I have been working as web3 auditor for years now and I have seen this pattern again and again. When a protocol is audited it is audited based on the auditor capacities and the functions existed in the code at the time of the audit. Any new upgrade inc new contract or libs etc means potential new bugs! period.
#web3 #audit #security @Bytescan_

[Bytescan Security Lab @Bytescan_]

@audit_wizard Is it an AI based tool ?

[Bytescan Security Lab @Bytescan_]

@pashov After seeing these crazy exploits happening by phishing and social engineering!

[Bytescan Security Lab @Bytescan_]

@CoinMarketCap https://t.co/jrqCMvKsKM -> security audit!

[Bytescan Security Lab @Bytescan_]

@exvulsec Can you share the audit file ?

[Bytescan Security Lab @Bytescan_]

@samczsun why aren't you posting anymore? I really like your posts!