Olivia
Online
Rekt News
@RektHQ
The Dark Web of DeFi
Joined August 2020
1K Following
318.5K Followers
2.3K Posts
$5.4M gone from @gravity_bridge. An attacker minted worthless tokens on Osmosis, poisoned the token registry with a fabricated denom string, and walked out with real assets. They didn't break the code. They just found where it stopped asking questions.
https://t.co/OPFcsqimxS
@victorokpukpan_ not good
Gravity Bridge did not offer a white-hat bounty. It did not send an on-chain message to the attacker.
It did not publish a wallet-flagging campaign or coordinate publicly with exchanges.
$5.4M gone from @gravity_bridge. An attacker minted worthless tokens on Osmosis, poisoned the token registry with a fabricated denom string, and walked out with real assets. They didn't break the code. They just found where it stopped asking questions.
https://t.co/OPFcsqimxS
$5.4M gone from @gravity_bridge. An attacker minted worthless tokens on Osmosis, poisoned the token registry with a fabricated denom string, and walked out with real assets. They didn't break the code. They just found where it stopped asking questions.
https://t.co/OPFcsqimxS
A 2021 @dxsale locker, an unprotected admin key, $7.3 million gone. @DecurityHQ flagged the risk in 2023 for $500. Two compromised contracts holding $15.5 million remain untouched, for now.
https://t.co/TnKmTa8TIv
Using owner privileges and EIP-7702 batch delegation, they unlocked and drained more than 1,400 liquidity pools on BNB Chain in a single coordinated flow.
Fees were set to zero.
A 2021 @dxsale locker, an unprotected admin key, $7.3 million gone. @DecurityHQ flagged the risk in 2023 for $500. Two compromised contracts holding $15.5 million remain untouched, for now.
https://t.co/TnKmTa8TIv
A 2021 @dxsale locker, an unprotected admin key, $7.3 million gone. @DecurityHQ flagged the risk in 2023 for $500. Two compromised contracts holding $15.5 million remain untouched, for now.
https://t.co/TnKmTa8TIv
@crazydnekana appreciate you
$3.98 million drained from 88 Gnosis Safes across three chains on New Market Trading. A third-party Safe module trusted caller-supplied data over msg.sender. One missing require check. Anyone who read the source code could drain every wallet.
https://t.co/7fHWPH8b6F
One poisoned VS Code extension silently auto-updated to 2.2 million developers, TeamPCP walked out with 3,800 GitHub internal repositories in 11 minutes, the culmination of 8 months spent climbing the developer supply chain one trusted tool at a time.
https://t.co/LpNblQcPsS
One poisoned VS Code extension silently auto-updated to 2.2 million developers, TeamPCP walked out with 3,800 GitHub internal repositories in 11 minutes, the culmination of 8 months spent climbing the developer supply chain one trusted tool at a time.
https://t.co/LpNblQcPsS
$3.98 million drained from 88 Gnosis Safes across three chains on New Market Trading. A third-party Safe module trusted caller-supplied data over msg.sender. One missing require check. Anyone who read the source code could drain every wallet.
https://t.co/7fHWPH8b6F
New Market Trading reached for it as the entry point for privileged Safe actions, placed no additional access control behind it, and shipped it to production.
$3.98 million drained from 88 Gnosis Safes across three chains on New Market Trading. A third-party Safe module trusted caller-supplied data over msg.sender. One missing require check. Anyone who read the source code could drain every wallet.
https://t.co/7fHWPH8b6F
A malicious node is believed to have exploited @THORChain GG20 TSS signing stack to leak vault key material, reconstructed the private key offline, and drained $10.7M across multiple chains. Safeguards fired automatically, node operators completed the rest.
https://t.co/mF6XQIjXV2
Over the following two days, the node participated in routine GG20 signing ceremonies, getting everything it needed.
A malicious node is believed to have exploited @THORChain GG20 TSS signing stack to leak vault key material, reconstructed the private key offline, and drained $10.7M across multiple chains. Safeguards fired automatically, node operators completed the rest.
https://t.co/mF6XQIjXV2
A malicious node is believed to have exploited @THORChain GG20 TSS signing stack to leak vault key material, reconstructed the private key offline, and drained $10.7M across multiple chains. Safeguards fired automatically, node operators completed the rest.
https://t.co/mF6XQIjXV2
You plugged AI into everything. Someone mapped it before you did. 170 packages. 518M downloads. OpenAI's signing certificates. The stack nobody audited became the attack surface. Be paranoid by default.
https://t.co/hooCVkF9se
@CryptoChrisG Thank you for sharing and helping get the word out.
npm installs without verification because verification at scale is an unsolved problem and the ecosystem was built on the assumption that most packages, most of the time, are what they claim to be.
You plugged AI into everything. Someone mapped it before you did. 170 packages. 518M downloads. OpenAI's signing certificates. The stack nobody audited became the attack surface. Be paranoid by default.
https://t.co/hooCVkF9se
You plugged AI into everything. Someone mapped it before you did. 170 packages. 518M downloads. OpenAI's signing certificates. The stack nobody audited became the attack surface. Be paranoid by default.
https://t.co/hooCVkF9se
Last Seen Users on Sotwe
้ฟ่น๏ผๆฑไบๆจ๏ผ๏ผ
์์ฐ
Seen from Korea
Pencari STW
Seen from United States
Steve Murryโพ๏ธ
Seen from Argentina
Bakire Bir Kฤฑz Yaฤmur
Seen from Turkey
Aunty Veriyan
Seen from Singapore
็ๅฉ
Seen from Thailand
Babyraaa๐
Seen from Indonesia
ุงูุง ุตุงุญุจ ุงูุณุนุงุฏู
Seen from Egypt
Ordd2130
Seen from Thailand
Most Popular Users
Elon Musk
@elonmusk
240.1M followers
Barack Obama
@barackobama
119.3M followers
Donald J. Trump
@realdonaldtrump
111.6M followers
Cristiano Ronaldo
@cristiano
108.9M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
97.3M followers
NASA
@nasa
92.1M followers
Justin Bieber
@justinbieber
90.6M followers
KATY PERRY
@katyperry
86.8M followers
Taylor Swift
@taylorswift13
80.6M followers
Lady Gaga
@ladygaga
72.2M followers
Kim Kardashian
@kimkardashian
69.4M followers
YouTube
@youtube
68.6M followers
Virat Kohli
@imvkohli
68.5M followers
Bill Gates
@billgates
63.4M followers
The Ellen Show
@theellenshow
62.5M followers
CNN
@cnn
61.9M followers
Neymar Jr
@neymarjr
61.1M followers
X
@x
60.9M followers
Selena Gomez
@selenagomez
59.9M followers