Tony KΞ
@tonykebot
Followers
8K
Following
1K
Media
143
Statuses
773
RT @deeberiroz: The technical post-mortem you've all been waiting for has been released :). Great read, thanks @dedaub.
0
4
0
RT @dedaub: Just mitigated: The CPIMP Attack – a stealthy front-running exploit infecting 100s of DeFi proxies across many protocols. Attac….
dedaub.com
CPIMP Attack: Clandestine proxies infiltrated DeFi protocols across chains—hiding in plain sight for weeks before discovery
0
20
0
regarding the ResupplyFi hack, preliminary investigation shows that the ResupplyPair contract uses an empty ERC4626 wrapper as the price oracle. thus the hacker used only 2 crvUSD to borrow 10M reUSD. 0xffbbd492e0605a8bb6d490c3cd879e87ff60862b0684160d08fd5711e7a872d3
5
13
81
welcome to the fried rice kitchen!.
1
0
7
root cause: usual's VaultRouter contract was exploited to redeem USD0++ -> USD0 1:1, thus arbitrage to make money. impact scope is limited and already neutralized
Our @Phalcon_xyz system detected an hack to @usualmoney . Now the protocol has paused, we can share the link here:. Book a demo to know how Phalcon can help protocol to monitor hacks and take automated actions.
2
8
53
cetus hacker is moving fund via Circle CCTP to ethereum, and swapping into eth. 25m is already swapped and 17m usdc still on the account. why it take so long for circle to freeze this account??. @circle wake up!
10
1
26
RT @SuplabsYi: After the Bybit hack, my friend at @SupremacyHQ and I conducted research to identify other critical assets vulnerable to sta….
0
16
0
admin pk compromised or insider job?. admin grants priviledged role to theft.theft then "withdraw stuck tokens". theft:
The Zunami protocol has been hacked — the collateral for zunUSD & zunETH has been stolen. We are currently investigating the situation.
2
1
25
Was asked in a CS2 group about future of solayer chain. My answer: Deploy 1024 tick CS2 server on InfiniSVM. #SHITPOST
3
0
10
Someone sent a lot of messages onchain saying that ZOTH exploit is linked to many accounts, including infini exploiter. Is it just bullshit?. Sender: 0xf1C2754eAAE2fD4E2bDd60D81cd91cb4De417B0b
3
1
24
end/4) if it really happens, all users that have authorized to that smart wallet contracts, will be all in dangerous!. this is just my imagination and i hope devs using eip7702 take care about this.
0
0
0
3/4) ideally, a decent smart wallet implementation should contains enough auth steps to ensure the transaction is only initiated by previledged manager. but what if the auth fuck up? any unaothorized person can transact on behalf of the user's wallet to move user assets.
1
0
0
2/4) a usuful scenario of eip7702 is that eoa wallet can be turned in a smart wallet by authorizing another contract to transact on behalf on the users. this is great application to onboard more ppl to crypto as they don't need to pay fee or don't even need to know the key.
1
0
0
pectra hardfork is set to launch on may.5th for mainnet and while bsc already launched. in this post i'll share about a future attack vector that could target multiple victims. 🧵👇
2
10
41
