Mev-boost is now semi-permissioned.
A validator blacklist was added as part of the fix last week.
I'm highlighting it because I can find no public announcement or community discussion about this.
github.com/flashbots/mev-…
@EthSecurity1
A validator blacklist was added as part of the fix last week.
I'm highlighting it because I can find no public announcement or community discussion about this.
github.com/flashbots/mev-…
@EthSecurity1
It seems the @SushiSwap RouterProcessor2 contact has an approve-related bug, which leads to the loss of >$3.3M loss (about 1800 eth)
If you have approved etherscan.io/address/0x044b…, please *REVOKE* ASAP!
One example hack tx: etherscan.io/tx/0xea3480f1f…
@EthSecurity1
If you have approved etherscan.io/address/0x044b…, please *REVOKE* ASAP!
One example hack tx: etherscan.io/tx/0xea3480f1f…
@EthSecurity1
etherscan.io
Ethereum Account (Invalid Address)
The Ethereum BlockChain Explorer, API and Analytics Platform
Check out new tool: SourceGPT a source code analyzer and prompt manager built on top of ChatGPT as the oracle. Then a set of prompt for security purposes can be found at the link provided below
https://github.com/NightmareLab/SourceGPT/tree/main/use_cases
@EthSecurity1
https://github.com/NightmareLab/SourceGPT/tree/main/use_cases
@EthSecurity1
GitHub
SourceGPT/use_cases at main · NightmareLab/SourceGPT
SourceGPT - prompt manager and source code analyzer built on top of ChatGPT as the oracle - NightmareLab/SourceGPT
Hacking play-to-earn blockchain games: The case of Manarium
https://www.blazeinfosec.com/post/hacking-play-2-earn-blockchain-games-manarium/
@secuelydevv
https://www.blazeinfosec.com/post/hacking-play-2-earn-blockchain-games-manarium/
@secuelydevv
Blaze Information Security
Hacking Play-to-Earn Blockchain Games: The Case Of Manarium
This post provides an overview of hacking play-to-earn blockchain games and common security pitfalls affecting P2E. It explains in detail how several vulnerabilities were discovered in a P2E game named Manarium.
Are you familiar with the challenges borrowing and lending protocols face?
#web3sec #defi
Dive into:
- Illiquid liquidations
- Collateral Safeness
- The dangers of governance
- Oracle risk and cost of manipulation
https://tokeninsight.com/en/research/market-analysis/the-7-deadly-sins-of-lending-protocols
@EthSecurity1
#web3sec #defi
Dive into:
- Illiquid liquidations
- Collateral Safeness
- The dangers of governance
- Oracle risk and cost of manipulation
https://tokeninsight.com/en/research/market-analysis/the-7-deadly-sins-of-lending-protocols
@EthSecurity1
Tokeninsight
The 7 Deadly Sins of Lending Protocols
Lending protocols have been a major target for hacks and attacks over the last few years, as many platforms often fail to ensure the security of their code, while others overestimate the safety of their economic designs. However, the industry has been learning…
❤2
The #Cairo Programming Language Book, a comprehensive documentation of the Cairo 1 programming language cairo-book.github.io
Blockchain dark forest selfguard handbook. Master these, master the security of your #cryptocurrency. #web3sec #web3 #DeFi
darkhandbook.io
@EthSecurity1
Blockchain dark forest selfguard handbook. Master these, master the security of your #cryptocurrency. #web3sec #web3 #DeFi
darkhandbook.io
@EthSecurity1
👍1
sort of great DB https://dune.com/pcaversaccio/smart-contract-deployment-statistics https://dune.com/pcaversaccio/minimal-proxies https://dune.com/pcaversaccio/selfdestruct @EthSecurity1
Dune
Smart Contract Deployment Statistics
Dune is the all-in-one crypto data platform — query with SQL, stream data via APIs & DataShare, and publish interactive dashboards across 100+ blockchains.
If a protocol uses any of the OpenZeppelin libraries, always check that the latest released version is used. Thus, you will be sure the most optimized version is used.
You can find vulnerabilities associated with previous versions here👇 https://security.snyk.io/package/npm/%40openzeppelin%2Fcontracts @EthSecurity1
You can find vulnerabilities associated with previous versions here👇 https://security.snyk.io/package/npm/%40openzeppelin%2Fcontracts @EthSecurity1
Find detailed information and remediation guidance for vulnerabilities and misconfigurations.
@openzeppelin/contracts vulnerabilities | Snyk
Learn more about known vulnerabilities in the @openzeppelin/contracts package.