Vitali Gorgut  🥇

Web3 Security Researcher | Crypto-native since 2017 | Over $1 billion secured | VC Adviser

[Vitali Gorgut  🥇 @gorgut_]

@0xAlexHex probably waiting for a bigger fish 😉 cuz it could be a harm for reputation too

[Vitali Gorgut  🥇 @gorgut_]

🚨 Make sure to withdraw funds and revoke approvals on Balancer V2 contracts

[Vitali Gorgut  🥇 @gorgut_]

Thanks for telling the story — grateful to be on this journey with you 🙌

Excited for the future and all the travels ahead ✈️

[JohnnyTime 🤓🔥 @RealJohnnyTime]

Travel the world, work from a beach or a ski resort, and earn up to $2M a year? 😱

Smart contract auditors around the world are living this dream: full remote freedom, great pay and total control over your lifestyle. Real stories, practical steps and an exact roadmap to start👇

[Vitali Gorgut  🥇 @gorgut_]

@n4nika_ Congrats on a fantastic year! You've been killing it, and it's clear how much hard work you've put in.

Keep succeeding!🚀

[Vitali Gorgut  🥇 @gorgut_]

Be aware of the @suidefai $aiSUI IDO happening on @polkastarter today. The team has reportedly banned multiple people who asked them questions about the project and called these questions FUD.

Historical data shows similar patterns in 78% of identified rug pulls.

[Vitali Gorgut  🥇 @gorgut_]

@cleanunicorn Interesting. I am wondering how exactly this Private Key got into Claude's suggestions.

[Daniel Luca 🦄 @cleanunicorn]

https://t.co/6OMNxHHULI

[Vitali Gorgut  🥇 @gorgut_]

8/8 This scam highlights the importance of examining not just external transactions, but also the "Advanced mode" for INTERNAL transactions. Tools that let you trace the full execution path are essential.

Spread this message for a secure crypto space!

[Vitali Gorgut  🥇 @gorgut_]

🚨 If you are on @etherscan, beware of a "Game" scam contract circulating on the #Ethereum mainnet targeting those who know Solidity but don't look closely enough.

You CANNOT win the advertised 50 ETH. But you will lose your ETH.

1/8 Here's a breakdown:

#Solidity #SmartContract #SecurityAudit

[Vitali Gorgut  🥇 @gorgut_]

7/8 If you replicate this on Remix or test it locally, it might seem like you can win. That's because you're likely not replicating the hidden New call made via an external contract via delegatecall to another contract.

The attacker's external contract is the key to the deception. The contract ensures that the caller of Try function is actually a user and not another contract: require(msg.sender == tx.origin).

[Vitali Gorgut  🥇 @gorgut_]

The same malicious contract is being deployed and verified on Etherscan 24/7.

[Vitali Gorgut  🥇 @gorgut_]

Can you identify what's wrong with this smart contract? The code might seem legit, but it is a trap as there is already one victim who thought he might win 50 ETH.

https://t.co/B2NPodF6MV - do not interact with it, it's malicious.