n33k

Security researcher @ambergroup_io.
Views are my own.

[mwa @MichaelWuAmber]

September 1, 2026 - Hong Kong
9月1日 香港

Something we’ve been cooking up for a while is finally ready to meet the world.
A new brand. A mission for the next decade. And products we believe might change the future.

我们酝酿已久的一件大事，终于要和大家见面了。
全新的品牌，未来十年的使命，以及我们相信会改变未来的产品。

No spoilers for now.
If you’ll be around and want to join us, message me 🚀

先不剧透。
如果你9月1日也在香港，想来现场，message me 🚀

[n33k @neeksec]

Our deep dive into the Yearn exploit covers every technical detail and the "profound mastery" behind the attack.

[Amber Group @ambergroup_io]

$9M gone. Zero bugs found. 📉🔥

The Yearn yETH "Π Collapse" is a terrifying example of how a protocol can be destroyed using its own rules. No "hack"—just pure mathematical exploitation of the StableSwap invariant.

The future of DeFi security isn't just code; it's math.

Full breakdown: 👉 https://t.co/tDcjPi9jCg

#DeFi #YearnFinance #Web3Security #Crypto

[Amber Group @ambergroup_io]

Our security team has written an detailed analysis on the SparkDEX Perpetual Exchange Hack — breaking down the recent attack on the platform.

Learn about the vulnerabilities exploited and the steps taken to mitigate the incident.

Read our full analysis here: https://t.co/PXV3mXj2AK

[Ashley @ash1eyhsu]

Nemo Protocol @nemoprotocol is a Pendle fork on Sui.
On 9/7, it suffered a hack targeting the py_index manipulation, exploited for ~$4M.

Here's the detailed analysis:👇

[n33k @neeksec]

As a result, the attacker could mint a massive amount of liquidity with just one token A. The attacker then burned a portion of their liquidity, draining the pool.

[n33k @neeksec]

After investigating the Cetus exploit transaction, I believe I have identified the root cause of the bug. The issue stems from a type casting from u256 to u64 within the get_amount_by_liquidity function.

[n33k @neeksec]

The attacker crafted a liquidity value that caused checked_shlw to return a small value. In the subsequent div_round operation, this small value resulted in a division that returned 0, but due to rounding up, div_round returned 1. The final required amount of token A was only 1.

[n33k @neeksec]

@CantinaBouncer

[Cantina 🪐 @cantinasecurity]

Introducing the @superformxyz CTF hosted by Cantina.

$100,000 on the line.

No judges. No questions. Just you and the dark forest.

Participants will need a cantina invite code 🪐

(Don't have one? Retweet and mention @CantinaBouncer for access)

[billh @hibillh]

I'm grateful that we were able to take 3rd place in the #BlazCTF competition. Kudos to my team @chiachih_wu @ashleyhsu_eth @neeksec for their amazing work.

Hats off to the organizers @hackthedefi for their thoughtfully crafted challenges, providing an opportunity for self-reflection on various blockchain security abilities. Looking forward to future learning and growth!

[n33k @neeksec]

I’m honored to be the Lead Judge of @ajnafi Audit Contest on @sherlockdefi. Happy auditing, Watsons!

[SHERLOCK @sherlockdefi]

Another day, another Audit ‼️

All the best to the participants of the @ajnafi Audit Contest 🫡

𝗔𝗷𝗻𝗮 also shared the 𝗚𝗿𝗶𝗲𝗳𝗶𝗻𝗴 𝗣𝗼𝘀𝘁 𝗠𝗼𝗿𝘁𝗲𝗺 shortly after the Contest started yesterday. Links below 👇

[DevsOnChain 🥷⛓️ @DevsOnChain]

📢 Announcement: Meet the master CTF crafters for QuillCTF-Dubai

🔥These CTF legends have crafted the toughest and the most insane challenges of all time

🏆 Three days to go; prepare your teams and get ready for the hunt!

🖊️ 𝗥𝗲𝗴𝗶𝘀𝘁𝗲𝗿 𝗡𝗼𝘄 - https://t.co/n1dss4ZZFx

[pashov @pashov]

Did you think randomness "just doesn't work" on the blockchain? There actually are some solutions but all have trade-offs. Important factors are:

- Unpredictability
- Biasability
- Verifiability
- Guaranteed Liveness
- Cost

https://t.co/D9BzZFvIvK

[n33k @neeksec]

I’m the lead judge in current Perennial Fix Review contest on @sherlockdefi.

@perenniallabs had arranged multiple rounds of auditing. It’s not easy to find bugs now. However, Sherlock is not lacking intelligent minds. Can’t wait to see the brilliant discoveries from you!

[n33k @neeksec]

Climbing the leaderboards and achieving milestones @sherlockdefi

[n33k @neeksec]

@nobody20185 @sherlockdefi I guess so 🙏

[n33k @neeksec]

I began my smart contract auditing journey on @sherlockdefi six months ago. It has been an incredibly thrilling experience.

This time, I am the lead judge of Allo V2 and really looking forward to your discoveries.