Daniel Boye

hacked @octra | ex @Nethermind | ctf @nnsctf | security researcher

[Daniel Boye @daniel__boye]

https://t.co/cyhCxzLhxC

[Daniel Boye @daniel__boye]

@lambda0xE happy to help 🫡

[Daniel Boye @daniel__boye]

@hilunaki @octra @octralex @lambda0xE ❤️

[Daniel Boye @daniel__boye]

i found and responsibly disclosed two critical account takeover bugs in @octra's webcli, the browser-based wallet

one needed a single click. the other needed zero

both could sign and broadcast transfers out of a victim's wallet

huge thanks to @octralex and @lambda0xE at @octra for the fast response and coordination throughout

this is what makes the network more secure

[Daniel Boye @daniel__boye]

https://t.co/OxgILjTC5m

[Daniel Boye @daniel__boye]

https://t.co/OxgILjTC5m

[alex @octralex]

just to reiterate: this was an implementation bug in the ZK verification path used when releasing encrypted balances, not a break of HFHE, ristretto, or octra’s encrypted computation layer.

ZK was an auxiliary proof layer rather than part of octra’s native cryptographic design. the incident reinforced our decision to replace that spend-proof path with TAPE, a verifier designed around octra’s own FHE field core. the update is since underway.

excellent technical write-up, and thank you again for the responsible disclosure!

[Daniel Boye @daniel__boye]

@honeydelicacy9 just making the network more secure 🫡

[Daniel Boye @daniel__boye]

https://t.co/cyhCxzLhxC

[Daniel Boye @daniel__boye]

@tomismeta @octra @octralex @lambda0xE @zellic_io @proofofk thanks sir 🫡

[Daniel Boye @daniel__boye]

really appreciate how quickly the @octra team handled this!

huge thanks to @octralex and @lambda0xE for working through the issue during the night, patching it within hours

also big thanks to @zellic_io and @proofofk for helping me getting in contact with the @octra team so quickly

full technical writeup:
https://t.co/XhAHMrQ2iD

[alex @octralex]

https://t.co/X6A13XRRxI

[Daniel Boye @daniel__boye]

@octra @octralex @lambda0xE @zellic_io @proofofk <3

[alex @octralex]

https://t.co/X6A13XRRxI

[Norske Nøkkelsnikere @nnsctf]

🎉24 hours into the CTF, 24 hours left!
Huge thanks to @osec_io, @rivsec and @EPT_gg for all the support 🤠
We just released some new challenges, and here are some cool stats to look at 👇

[Norske Nøkkelsnikere @nnsctf]

We're happy to announce that @osec_io and @rivsec will sponsor our CTF on the 29th of August! The CTF would not be possible without them, as well as the infrastructure sponsored by @EPT_gg - thanks for all the support!🤠

[Atrium Academy @AtriumAcademy]

UHI5 hookathon results are in!

Congratulations to these devs for winning the @inkonchain prize 👏

• YOLO Protocol: @AlvinYap510
• kvhook: @daniel__boye

[Daniel Boye @daniel__boye]

@Nexaweb3 9Z3Bm8YKPqhtvVNuLDMgeWgc3gSDDzLKZ74zJgyxtHsY

[Daniel Boye @daniel__boye]

@crowsolcoin 9Z3Bm8YKPqhtvVNuLDMgeWgc3gSDDzLKZ74zJgyxtHsY

[Daniel Boye @daniel__boye]

@guyxsol 9Z3Bm8YKPqhtvVNuLDMgeWgc3gSDDzLKZ74zJgyxtHsY