Daily Security

Looks like $20M of seized funds tied to the US Government was likely stolen in the past hour. Theft address 0x3486ee700ccaf3e2f9c5ec9730a2e916a4740a9f 0xbf6f7c503e858aded4e18ce2bcf93846fd726c15 0x15d0a31ed5050ed8decd3c101aaee0b2ad2e6441

🫣😃

Hi, guys. Unfortunately, I am not so active in this half of the year due to personal reasons🥲 However, I am planning to fix it quite soon. Meanwhile, if the content on these resources helped you or your friends, I would be grateful for a donation🫶 Tron (TRC20) TPyHztRbhq4SgRogmHHhUeAJpYjfrpmvab EVM 0x06009Fd4D3a8a8D00b4b402EE133369651eDf516

Added one more source🙌

Looks interesting A game for Ton Hackers https://www.hacktheton.com/en A checklist for Ton Developers https://github.com/PositiveSecurity/ton-audit-guide Tron checklist from previous post https://t.me/ethers_security/265 Follow for more @ethers_security

In the past hour a victim was drained for 12K spWETH ($32.4M) Theft txn hash 0xf7c00f18175cdea49f8fdad6a1d45edeb318f18f3009f51ab9f4675171c1d8fb Theft address 0x471c725Bd1F29850CBb8eeA4cdf6c9Ce3caC5607 h/t ScamSniffer

Check out a cool article from my colleague 😉 The Hidden Backdoors of Blockchain: Why End-to-End Security is Crucial in Web3 https://medium.com/@5m477/the-hidden-backdoors-of-blockchain-why-end-to-end-security-is-crucial-in-web3-328c83300379 Follow for more @ethers_security

The project Truflation was hacked a few hours ago for $5M+ on multiple chains from the treasury multisig and personal wallets EVM theft address 0x53d2094b31429a13e739358b16354d8e0826b25a 0x2122a76213b23daf633b850cb659750db0cac801 0x4ec10144f1a96eed9b04d324d0997b5325c56472 0x7ea07c76328fc789435fc77a2a4d527c5bbc333e 0x3f8e5cc8abd032dd6ad652423e951ab06f833126 SOL theft address 6v4R3z5ahHqx3pbxMpYQMu26cuQoonLX2Rqq7WF35yzp

added a couple more https://molfar.com/en/useful-apps https://www.bellingcat.com/resources/2024/09/24/bellingcat-online-investigations-toolkit/

AI Privacy Guide Guide to using AI technologies safely while protecting your privacy: - self-hosted solutions - popular AI services - best practices - practical setup instructions. https://github.com/iAnonymous3000/ai-privacy-guide Contributor twitter.com/iAnonymous3000 #ai #privacy

Interesting 👀 https://somekirill.hashnode.dev/hacking-bridges-off-chain-code

Be careful about upgrading to IOS 18.0. It is recommended to wait for more bug-free versions Also keep an eye on https://support.apple.com/en-us/100100 for security updates

Top Phishing Techniques September 2024 detailed review - Bypass SPF - Return-Path Mismatch - Deepfakes or Vishing - Homograph Attack and Typosquatting Attack - DNS Hijacking - Fast Flux https://redteamrecipe.com/top-phishing-techniques Author twitter.com/Hadess_security Source

Found a checklist for TRON Projects. Take a look🔮 https://github.com/PositiveSecurity/tron-audit-guide Follow for more: @ethers_security

New release: tree-sitter grammar for the circom language "It is already integrated by @semgrep in the latest 1.86.0 release, so now you can write custom semgrep rules for your ZK circuits in circom." https://github.com/decurity/tree-sitter-circom Follow for more: @ethers_security

Set your reminders! • https://twitter.com/i/spaces/1RDxlyplOzqKL #lecture #opsec

APIFY social media scrapers 400+ online tools (actors) for scraping data from Instagram, Twitter, Facebook, TikTok, YouTube and other social media. console.apify.com/store-search?category=SOCIAL_MEDIA Free trial #socmint #osint

My eyes 🌚🔍😁 APIFY social media scrapers 400+ online tools (actors) for scraping data from Instagram, Twitter, Facebook, TikTok, YouTube and other social media. console.apify.com/store-search?category=SOCIAL_MEDIA Source

Interesting 🌚 officercia.mirror.xyz/1XgiSTo2QKTi2bow7B6IF3nTB9K-_k4eBBl79sqmZFs

Deep Dive into Discord: OSINT Techniques (by Nina Maelainine) - Discord Server Directories - Bot Directories and Resources - Specialized Tools https://medium.com/@ninamaelainine/deep-dive-into-discord-osint-techniques-00534bf69371 #osint #socmint