1chess

Smart Contract Security Researcher
Finding edge-case bugs in DeFi

[1chess @onechesss]

Never trade futures if you don't understand the market well, it will cost you dearly.

[1chess @onechesss]

I discovered this about eight hours before the execution and wrote a thread on my profile, which was followed by members of the @ team. I also sent on-chain messages to all vulnerable IDM wallets. Unfortunately, no one managed to revoke their approval. However, I managed to save 3.2kk USD from one user, as the attacker's second propose couldn't yet be executed.

[1chess @onechesss]

Final/

I shared data with emergency responders, but inactive wallets are hard to reach.

If you know owners/custodians of the wallets above, please alert them.

Fastest mitigation: revoke old BarnBridge approvals now.

Use https://t.co/PIXl84ygd6
Ignore scam replies.

[1chess @onechesss]

1/ URGENT @Barn_Bridge warning

I found ~$4M+ in live approval exposure.

Old gov proposals #14/#15 may put user approvals at risk.

#14 can execute anytime. #15 in ~34h.

Used Smart Yield? Read below + revoke.

Use https://t.co/PIXl84ygd6
Ignore replies.

[1chess @onechesss]

17/ Again: do not trust reply links.
Go directly to:
https://t.co/N3xDyoOqan
Connect your wallet on Ethereum and revoke approvals to the spender addresses above.
Do not send funds.
Do not sign transfers.
Do not interact with “support” accounts in replies.

[1chess @onechesss]

@Hofereototiaho1 @SamuelArtson @NiggaX0148 @Carlitosway2312 @MariaLuaMusic @jimboslicer69 @RICHYNIX @mrmonkey_films @nu11address @chillenty226 hey, pretty random, but i might’ve found some funds tied to this address in an old project (~$2.5k).
if this is you and you’re interested, just dm