Phạm Tiến Minh Đức

[Phạm Tiến Minh Đức @pmbibe]

#PORT3 #CATERC20 @Port3Network

[Phạm Tiến Minh Đức @pmbibe]

🚨 We analyzed a CRITICAL vulnerability in $PORT3
A perfect storm of 3 bugs allowed attackers to:
✓ Bypass authorization with EMPTY signatures
✓ Register fake chains
✓ Mint UNLIMITED tokens
✓ Drain bridge liquidity
The root cause? Owner = 0x0
What happened 🧵

[Phạm Tiến Minh Đức @pmbibe]

🧵 Summary:

Owner = 0x0 enabled signature bypass
Invalid signatures (r=0, s=0) bypassed ecrecover
Attacker registered fake chains
Unlimited token minting occurred
Users lost millions

Thread ends here. Stay safe! 🛡️

[Phạm Tiến Minh Đức @pmbibe]

🚨 We analyzed a CRITICAL vulnerability in $PORT3
A perfect storm of 3 bugs allowed attackers to:
✓ Bypass authorization with EMPTY signatures
✓ Register fake chains
✓ Mint UNLIMITED tokens
✓ Drain bridge liquidity
The root cause? Owner = 0x0
What happened 🧵

[Phạm Tiến Minh Đức @pmbibe]

FIX

[Phạm Tiến Minh Đức @pmbibe]

With fake chain registered:

tokenContracts[23] = 0x4644bbcfd26... // Attacker's contract

Now attacker can:

Forge Wormhole message from "chain 23"
Set emitter = their contract
Set amount = UNLIMITED
Call bridgeIn()
Contract mints tokens ✓

FUNDS DRAINED

[Phạm Tiến Minh Đức @pmbibe]

The Critical Bug
Step 5 - Signature Verification

[Phạm Tiến Minh Đức @pmbibe]

Step-By-Step Attack
Here's how it bypassed authorization:

[Phạm Tiến Minh Đức @pmbibe]

The Attack Transaction
Here's the actual exploit transaction: https://t.co/NM5ITIC0Br

Attacker calls with:

Valid custodian (themselves)
Valid timestamp
INVALID signature (all zeros)

Transaction succeeds 🔥

[Phạm Tiến Minh Đức @pmbibe]

Bug #2 - Empty Signature Acceptance

Result: Attacker sends 65 bytes of zeros → Accepted

[Phạm Tiến Minh Đức @pmbibe]

Critical bug: Signature verification doesn't check for zero address

Here's the trap:

Invalid signatures return 0x0 from ecrecover
If authority = 0x0
Then: 0x0 == 0x0 → TRUE ✗

Authorization BYPASSED with invalid signature

[Phạm Tiến Minh Đức @pmbibe]

When a non-owner wants to call sensitive functions, they must provide:
✓ Valid custodian address
✓ Non-expired timestamp
✓ VALID SIGNATURE

[Phạm Tiến Minh Đức @pmbibe]

CATERC20 is a cross-chain token bridge using:

Wormhole for cross-chain messaging
Signature verification for governance
registerChains() to whitelist token bridges

Problem: The authorization mechanism had a critical flaw.

[Phạm Tiến Minh Đức @pmbibe]

@CryptoBheem @Bheem_Lounge 👌

[Ahmed @CryptoBheem]

let’s do a quickie😈

💎 Lifetime Access to @Bheem_Lounge (worth $2,500)

Will pick anyone from likes/retweets or comment section randomly

Ends in 60 minutes, goodluck😼

[Trader Arpit @ArpitTrader]

$Btc Perfectly Reclaim & Retest 110.5k Level 🎯 Already Shared 🫰
That's How We Play Perfect Setup With Patience 👽

Now Flip 112k We Can Play Swing Till Ath.

[Phạm Tiến Minh Đức @pmbibe]

@CryptoBheem @Bheem_Lounge 👌

[Ahmed @CryptoBheem]

bheem is happy so $1,000 USDT giveaway😗

To top it off, Lifetime Access to @Bheem_Lounge vip (worth $2,000)

https://t.co/pNwflQbzhi

Just like this tweet & join above, winner in 24h- glhf🤝

[Ahmed @CryptoBheem]

$BTC update:

>Must remain above 63.3k
>Key level 66.1k

Change in MS depending on reaction at 66.1k📌 rejection and PA similar to left shoulder or immediate reclaim depending on news day.

Right shoulder valid once 1D close below 63.3k otherwise opt for upside (my long open)

[BHEEM @Bheem_Lounge]

Do you want to make consistent profits each month?

Participate to win a lifetime subscription to @Bheem_Lounge worth $1500.

Still not enough? Win an additional $1000 in USDT by becoming a ByBit user: https://t.co/KiPyMNWfSY

❤️ & ♻️ to enter !!

[Free Crypto Signals @cryptoalvin]

#RSS3 (1W)

$Rss3 Upward trend in the near term✅

100% coming 🤝

#web3 #ai