EthSecurity

- Developer Arrested Over Tornado Cash Research. Federico Carrone was released after 24 hours following an overwhelming international intervention from UAE, UK, US, all around European Union, Argentina and the Catholic Church. A good ending to what could have been a Tigran Gambaryan style incident. - Oracle Security Workshop - link - Secure Your ZK Code: Best Practices for Devs & Auditors - link @EthSecurity1

Maya protocol hacked for $1.3M ClaudeAI report: https://claude.ai/code/artifact/469af51b-8f6c-44f0-a213-f7520c9f4b2d @EthSecurity1

Fox Market on BNB Chain hacked for $120K RootCause: through a same-transaction spot-price manipulation bug in its bond mint path. The attacker used massive flash liquidity to push the FOX/USDT pool, minted bonds against a stale pre-swap price, dumped the unlocked referral @EthSecurity1

- Anchor - a framework providing several convenient developer tools for writing Solana programs by Solana Foundation. - A Solana Static Analyser & Reverse Engineering tool. - link - hashcat v7.0.0 release including support for MetaMask and various wallet cracking. @EthSecurity1

Safepal Information including name, email address, shipping address, phone number, and purchase details, was accessed externally without authorization due to the flaw." @EthSecurity1

How to Setup an Ethereum Node Part 1 and Part 2 Inside Ethereum’s Engine: How the Execution Layer Actually Works - link  @EthSecurity1

- How to protect yourself from Google Forms scams -link - My Smart Contract Auditing Mental Model - Not a checklist! - link - Compressed NFTs on Solana - link - ape-safe - Account plugin for the Safe multisig wallet (previously known as Gnosis Safe) for the Ape Framework. @EthSecurity1

https://Kite.foundation hacked for 133M $KITE RootCause: private key compromised @EthSecurity1

- Wise Signer Snap by Patrick Collins. A MetaMask Snap that uses Claude AI to explain blockchain transactions in plain English, helping - link - The CryptoNeo Threat Modelling Framework (CNTMF): Securing Neobanks and Fintech in Integrated Blockchain Ecosystems. - link - Airdrops: Giving Money Away Is Harder Than It Seems. - link @EthSecurity1

what you thought on this: https://x.com/0xLupin/status/2087615702710538421 @EthSecurity1

harmony chain exploit to mint 4B $ONE token.$ONE token drops ~40% equal to 26% of existing supply @EthSecurity1

@Ravencoin's asset transfer qty overflow bug is worth spelling out because the overflow did NOT create an infinite RVN mint, nor a clean “mint arbitrary assets forever” primitive. What it did was subtler: it allowed an invalid asset transfer to pass the asset conservation check on vulnerable nodes, so a bad block could be accepted by one side of the network and rejected by nodes following the fixed rules. The first known invalid block was 4,487,776 at 2026-08-07 15:44:01 UTC, meaning everything after 4,487,775 should be treated as reorg-risk until the network converges. @EthSecurity1

hacker who previously attacked several prop AMMs on Base (such as Kipseli) demanded 20% bounty after Umbrae.io exploit - CEO had to agree. It seems a 10% bounty is no longer an "industry standard". @EthSecurity1

- Sui Move for EVM and SVM Developers: Part 1 - Mental Models - link - How to track your progress as a security researcher - link - Google Spoofed Via DKIM Replay Attack: A Technical Breakdown - link @EthSecurity1

- A Practical Guide to Tracing Stolen Funds - link - Upgradeable Smart Contracts Explained (2025): Part 1 - Proxy & UUPS Patterns in Solidity - link - Upgradable Smart Contracts Series: Part 2 - Top Smart Contract Vulnerabilities & Real-World Hacks -link - Upgradable Smart Contracts Series: Part 3 - Secure UUPS & Transparent Proxies in Solidity - link @EthSecurity1

@unistreetsx on Ethereum hacked for~$17750 RootCause: arbitrary call @EthSecurity1

- Don't get rekt: detecting phishing threats in crypto - link - Inflation Attacks: A deep dive on ERC-4626 - link - Solidity Internals - link @EthSecurity1

Sui Transaction Lifecycle - link EVM – Cosmos Convergence Research From Security Base Part 1, Part 2, and Part 3 by CertiK. @EthSecurity1

- Promises and Limitations of Passkey-Based Smart Accounts - link - Fuzzing Liquity - link - How to be secure by design and not pay millions? - link @EthSecurity1

Seems hacks still keeps going. It pass $90M loss