Sendor

breaking things to make them stronger.

[Sendor @Send0rr]

@Ministerr feels unreal

[Sendor @Send0rr]

@blknoiz06 This time we're reaching 1000$ per SOL

[Sendor @Send0rr]

@Tukytuky_ We're so back

[mert @mert]

some insane cooking from @HeliusPrivacy coming to Solana soon

[bugcrowd @Bugcrowd]

Quick Rule of Thumb💡

Focus on hunting for critical/high-impact bugs and leave the low-severity noise behind. That's where the real impact (and payout) happens, and you'll stumble across lower severity bugs while you're hunting anyway 💰

[pashov @pashov]

Cybersecurity truly is about being the best version of yourself

You have to keep beating your last best performance, you have to be better than the invisible blackhats who grind 24/7 for that one exploit. It's a game for the persistent and brave. I love playing it. It's the hardest technological game to play that I've found so far.

The rewards are great, mostly because competition is weak - people are afraid of the hard challenges. Just by being attracted by the hard challenges you are already ahead of most. Keep going. Let's win this🫡

[playboi.eth @adeolRxxxx]

Ekubo was hacked after a public contest audit at c4. Man, I have been thinking.

Those black hats would probably have been laughing at our ass during those times.

insane skill gap.

[PeckShieldAlert @PeckShieldAlert]

#PeckShieldAlert An OLPC/LABUBU pool on PancakeSwap on #BNBChain has been exploited, resulting in a loss of ~$1.1M.

The exploiter bridged the stolen funds to #Ethereum, deposited 633.4 $ETH into #TornadoCash, and sent 0.0221 $BNB and 0.0411 $ETH to a dead address.

[F12 @f12sec]

🚨 @namada (privacy chain) MASP drained ~$600K , and nobody noticed:

The indexer still shows the funds, but live RPC says 0

ATOM, USDC, OSMO, TIA, NYM all swept from the shielded pool (over IBC)

Privacy chain + stale indexer = invisible hack 🧵

[Microsoft Threat Intelligence @MsftSecIntel]

Since February 2026, Microsoft Defender Experts have tracked a cryptocurrency clipper campaign that combines clipboard theft, wallet address replacement, worm-like functionality, and Tor-based communications, enabling both financial gain and continued access to devices. https://t.co/tngq6Gmx30

This campaign uses malicious .lnk files to deliver a worm and a script-based stealer. Upon execution, the clipper deploys a portable Tor client, routes traffic through a local SOCKS5 proxy, and blends data theft with remote code execution, turning a financially motivated stealer into a lightweight backdoor.

Due to the nature of this attack chain, defenders should hunt for correlated behaviors rather than investigate isolated events. Read our latest blog to get our full analysis, as well as detection and mitigation guidance to help security teams investigate and contain similar activity in enterprise environments.

[pashov @pashov]

If you have live smart contracts projects that have not been audited in more than 6 months, you mandatorily need a reaudit right now. Do not be the next news headline.

Get security auditors who utilize AI + human expertise. Make sure your security strategy is sound🫡

[Sendor @Send0rr]

@wiseadvicesumit Today's onchain hack is brutal