EthSecurity

Axelar bridge hacked for $4.67M https://x.com/suplabsyi/status/2068085352343220519 @EthSecurity1

Axelar bridge hacked for $4.67M https://x.com/suplabsyi/status/2068085352343220519?s=61 @EthSecurity1

- Advanced Foundry Cheatcodes Series Part 1 Part 2 Part 3 Part 4 - OpenSense - Starknet Cairo's Security - link - DPRK Civil Engineer Fake Profile Process. Actual DPRK instructional video on how to create their civil engineering profile(s). And here is a sample session with a DPRK Licensed Civil Engineer. @EthSecurity1

seems Aztec hacked twice $2.1M @EthSecurity1

- Blockchain Forensics: Attribution Techniques and the Role of OSINT. -link - Abusing Developer Trust in Cursor and VS Code Remote Development - link - Safer cold storage on Ethereum - link @EthSecurity1

- Blockchain Forensics: Attribution Techniques and the Role of OSINT. -link - Abusing Developer Trust in Cursor and VS Code Remote Development -link

- From PowerShell to Payload: Darktrace’s Detection of a Novel Cryptomining Malware - link - How to secure $70 billion in DeFi: Aave's approach to Web3 security - link - The Dark Side of Upgrades: Uncovering Security Risks in Smart Contract Upgrades. - link @EthSecurity1

Aztec Router exploit for $2.1M Rootcause: deposit transactions were committed to the rollup state root, while the corresponding fund-transfer obligation could be bypassed. https://etherscan.io/tx/0x074ec9317d8336db37e8c348fbdd7515573ff4088239c77ab429f522509aeeb1 @EthSecurity1

Aztec Router exploit root cause: deposit transactions were committed to the rollup state root, while the corresponding fund-transfer obligation could be bypassed. @EthSecurity1

- Coinbase thinks vibe-coding 50% of its platform is a good idea. - link - Paradigm’s Reth Client Bug Briefly Freezes Ethereum Mainnet Nodes. - link - Phished Founder, Liquidated Thief by Rekt. A rollercoaster of a $13M theft and recovery through a swift governance action by Venus Protocol. - link @EthSecurity1

- A Developer’s Guide to Building Safe Noir Circuits - link - How to Recover Your Browser Wallet Extension from a Sudden Failure? - link @EthSecurity1

https://www.youtube.com/watch?v=_T4OyfUoJ1I @EthSecurity1

https://www.reddit.com/r/Monero/comments/1u1tt1p/psa_critical_p2pool_security_update @EthSecurity1

- A theory of Lending Protocols in DeFi - link - LLM-Augmented Explanations for Graph-Based Crypto Anomaly Detection -link - Unexpected security footguns in Go's parsers - link @EthSecurity1

OpenMonero hacked again! 200 XMR stolen @EthSecurity1

How a hacker stole $1.34M from Raydium: - finds a bug inside Raydium's old 2021 code - targets 5 forgotten liquidity pools that were no longer being used. - generates fake ownership receipts to trick the system. - convinces the old program/code that he has liquidity that he never deposited. - withdraws real funds from the pools walks away with: > 150,177 $RAY > 5,603 $SOL > 893,700 $USDC @EthSecurity1

Raydium’s Legacy AMM V3 Exploited for $1.34 Million via LP Mint Validation Flaw @EthSecurity1

flash-loan exploit on mainnet for ~0.3225 ETH from the $SHIP Rootcause: $SHIP (Shina Printer) is an auto-reward token: it accrues an ETH "tax" and pays holders dividends in $SHI. To fund payouts, its distributor (0xa4EcC3c0…) market-buys $SHI on a Uniswap pool , with ZERO slippage protection. Attack TX: https://etherscan.io/tx/0x9868536a8c5b0414a5b6ef8fc534cb9cb8d7b6aa748d6a038f03228c529e8b2f @EthSecurity1

$TOP hacked for $1.59M Rootcuases: The attacker acquired more than 50% of TOP voting power, due to the token’s low market value, execute a governance proposal that minted a large amount of TOP to themselves @EthSecurity1

- What Are BLS Signatures and How Do They Work? - link - Pairing-Based Cryptography Demystified: A Deep Dive into Elliptic Curves - link @EthSecurity1