外部眼

💸狙击SOL金狗💸发掘聪明钱💸Alpha Call💸web3工具开发💸加密货币市场分析💸

[外部眼 @web3eye2009]

@Jolyne_AI 协议？软件？

[外部眼 @web3eye2009]

@hezhiyan7 @readwise save

[外部眼 @web3eye2009]

北京市检察机关近日公布一起以虚拟货币为媒介进行非法外汇交易的案件案例。2023 年，林某等 5 人利用名下多张银行卡，接收人民币资金。将客户转入的人民币兑换为 USDT 并跨境转移，实现变相买卖外汇，涉案总金额超 11.82 亿元人民币。2法院以非法经营罪判处 5 名被告人两年至四年有期徒刑，并处罚金。

[外部眼 @web3eye2009]

全球首家市值达到4万亿美元的公司英伟达（Nvidia）。英伟达因其在人工智能芯片领域的领先地位，市值突破了4万亿美元，成为历史上首家达到这一里程碑的公司。#AI #crypto #Nvidia

[外部眼 @web3eye2009]

@tremelaniameme DEirm51yTMsvSFUmL1UBisy3bYKvEPLJaZXC7VY4XGwB

[外部眼 @web3eye2009]

@0xSunNFT @ParallelAIx ccswap，全网最快狙击机器人

[CCSWAP @CCSWAP_HUB]

立即體驗 CCSWAP BOT 極致阻擊快感

豐厚獎勵等你拿，名額有限，火速加入！

@ccswapio_bot @ccswapio_hubs

#ETH #Ethereum #Bot #CCSWAP #NEIRO #PEPE #PepeCoin #DOGE #TERMINUS

[外部眼 @web3eye2009]

@xunika777 ok

[外部眼 @web3eye2009]

期待。。。

如获自由，市场又将是翻江倒海。

#CZ #Binance #meme #memecoin #BSC

[外部眼 @web3eye2009]

Hachi: A Dog's Tale

#hachi #movie #doge #memecoin

[外部眼 @web3eye2009]

@JupiterExchange 表示过去一周团队收到报告称少数使用 Solana DeFi 的用户资金被盗。

经调查发现名为 “Bull Checker” 的恶意 Chrome 扩展程序，如果用户有此扩展程序建议立即删除，任何 dapp 或钱包中均未发现漏洞。

[Jupiter @JupiterExchange]

Identification Of Malicious Extension
Over the last week, we received reports that a small number of users using Solana DeFi got drained.

After extensive investigation, we have identified a malicious Chrome extension called “Bull Checker” that had targeted users on several Solana-related subreddits.

Users with this extension would interact with the dApps as per normal, have the simulation show up as normal, but have the possibility of their tokens being maliciously transferred to another wallet upon transaction completion.

If you have this extension (or similar extensions with extensive permissions you cannot trust), please remove it immediately.

Note that there is no vulnerability found in any of the dapps or wallets.

A report with all the key technical details, including why the simulation looked normal, is available at:
https://t.co/u5mfmRbJMz

For the report, we collaborated with @0xslipper from @Offside_Labs who was extremely helpful for much of the technical analysis.

Much thanks to @blowfishxyz, @RaydiumProtocol and @phantom who also reviewed this post too.

Example Transactions
Here are 2 examples of transactions that have interacted with the malicious program

5UMucMksJweA1AtgyxrK8DJeBXr3DQGEGRs5Kkq2pZjr

https://t.co/gGodMZNuvK

https://t.co/hvziyniTuQ

In both cases, malicious instructions were added to regular Jupiter and Raydium instructions, and the resulting transaction was signed by the user as per normal, but had their tokens and authority transferred to the malicious address.

The Suspected Extension: Bull Checker
Upon further investigation of several affected users who have been drained by the same program, we have identified an extension called “Bull Checker”, which has the permissions to read and change all the data on the website, as a potential cause.

Raydium has confirmed that their affected user has the same extension installed.

Bull Checker is supposed to be a read-only extension that allows you to view the holders of memecoins. There should be no need for an extension like this to read or write data on all websites.

This should have been a major red flag for users, but apparently several users continued to install and use the extension.

After installing Bull Checker, it will wait till a user interacts with a regular dApp on the official domain, before modifying the transaction sent to the wallet to sign. After modification, the simulation result will still be “normal” and not appear to be a drainer.

Technical Analysis
For a full technical analysis, including why the simulation check looked normal, how the drainer tx worked, and what the extension code did, please refer to the jupresearch post here:

https://t.co/u5mfmRbJMz

Targeting Memecoin Traders
In addition to the above information, while researching “Bull Checker” we discovered that it was publicised by an anonymous Reddit account, “Solana_OG”. This person appeared to target users looking to trade memecoins, and lured them to download the extension.

Links:
https://t.co/WuhFWj5gdH
https://t.co/j5Du0YRi4L

Key Safety Habits
While we have identified one malicious extension, there might still be other malicious extensions out there.

1. If you suspect an extension contains malware, particularly if they have both “read” and “change” permissions, uninstall it immediately.

2. Do not trust something just because someone mentioned it on Reddit or other media and it has many upvotes. Astroturfing and social engineering for the purpose of scamming are very real.

3. Extensions that request for extensive permissions are highly suspicious. An extension like Bull Checker should not need to read and modify all your website data. You should have an extremely high degree of confidence in an extension before you start using it.

4. In addition, Blowfish has released a new guard instruction feature called SafeGuard that prevents all simulation spoofing attacks. It’s currently being adopted by multiple Solana wallets and will likely be useful in prevent such future attacks.

Conclusion
Stay safe out there, and don’t install extensions that can read/write data unless you are really sure.

Many thanks to Siji from Offside Labs, Blowfish, Raydium and Phantom for assisting in this investigation.

[外部眼 @web3eye2009]

Black Myth: Wukong已经在Steam排名第一，超过了CS2。

#CS2 #BlackMythWukong #Steam

[外部眼 @web3eye2009]

https://t.co/mXqfxbKvAn是Solana生态上的无代码构建器，可以不使用任何代码或者合约来构建去中心化的应用程序，就像在solana上使用windows一样！

平台上产生的所有收入将按 50/50 的比例分成，代币和 NFT 持有者均等分配。

目前solana官方也关注到了 该项目
如果https://t.co/mXqfxbKvAn能够落地，所有的meme都可以通过https://t.co/mXqfxbKvAn来做出不一样的应用生态，目前看到官方已经有画面展示了。

CA：62CsquahdQ3J286G9UTqV6whxryfihdV4yg7kSJnpump
NFT: https://t.co/OYI7fpiPmj
网站：https://t.co/x705knSsBk

[外部眼 @web3eye2009]

炒币要从小培养，这样他她它可能就不会像你一样赔的底裤都没有！

[外部眼 @web3eye2009]

单个币安账户能撸50u
1.去ok借58个ton，然后卖出8个。
2.ok剩余的50个ton转去币安质押 。
3.20天后币安取回58ton，转回ok还币。

[外部眼 @web3eye2009]

最近跟一下@sunpumpmeme应该还是有利可图，一是还没什么工具可以狙击，二是没什么聪明钱可以跟，大家都属于摸着石头过河阶段。还没那么卷。

[外部眼 @web3eye2009]

早期项目 @monke_aptos,今晚十一点从APT的pump里发射，马上开始了，钱包需要持有apt参与，感兴趣的可以观摩观摩搞。
aptos pump 官推：@uptos_
地址：https://t.co/xk5WbHFRzQ

[外部眼 @web3eye2009]

这个可以，速度

9E5GuvUrs4MbJ5jRhDoMEy67fGrHSbphjCnoALcTpump

[外部眼 @web3eye2009]

5个聪明钱包地址，财务自由靠自己。

第一个【值得关注】
Cex9cBbixJyT6qYgScgM6QKhBXuHL1zJniRErrD3HZyQ

第二个【钻石手】
Gwv9NGzyQvUPYk7A5mhDXHVL88P39Eoz9omQ1SVgguMv

第三个【内幕之神】
H3QsBrrivimFJmSpTXuvig2n1Bh7JuYxrriRSEszT6cc

第四个【25S国外KOL】
5wPWthsivjuGi43WbTo5LdSjDTJ8pXSSHyfXWVojJjUF

第五个【扫地僧】
DNfuF1L62WWyW3pNakVkyGGFzVVhj4Yr52jSmdTyeBHm