NEW BOT Телеграм, страница

Forwarded from Vladimir S. | Officer's Channel (officercia)

Frontend Security

• Try: https://drive.google.com/file/d/12-e1g8Ad7q0avIOge-NELNBaDlpmk0TV/view

• Also: https://blog.embarklabs.io/news/2020/01/30/dapp-frontend-security/index.html a bit old but still…

• From ToB: https://docs.google.com/document/u/0/d/1-_0Wlwch_vtkPM4F-SdEXLjQYaYT7KoPlU2rjt7tkLQ/mobilebasic

#web2 #offtopic

Embark Blog

DApp Frontend Security

This article is the second in my series of articles based on the frontend of the decentralised web. Throughout the series we’ll look at Web3.js & accessing the Ethereum Blockchain client-side,

👍1🤯1

571 views04:43

Daily Security

Vladimir S. | Officer's Channel

Frontend Security • Try: https://drive.google.com/file/d/12-e1g8Ad7q0avIOge-NELNBaDlpmk0TV/view • Also: https://blog.embarklabs.io/news/2020/01/30/dapp-frontend-security/index.html a bit old but still… • From ToB: https://docs.google.com/document/u/0/d/1…

Learning Best Practices from Web Applications to Avoid Similar Security Vulnerabilities in Decentralized Applications: www.theseus.fi/bitstream/handle/10024/170724/Aboualy_Mahmoud_bachelor_thesis.pdf

👍1🤯1

940 views04:44

Daily Security

https://composable-security.com/blog/secure-integration-with-layer-zero/

Smart Contract Audits - Composable Security

Secure integration with LayerZero - Smart Contract Audits - Composable Security

A few weeks ago we reviewed a project that was integrating with LayerZero Omnichain Tokens. We were not able to find an all-in-one security checklist for that

👍2🤯2

1.94K views13:14

Daily Security

Forwarded from EthSecurity

Aave v3 bug bounty part 1 and part 2

Top 5 duplicated issues of competitive audits thread

@EthSecurity1

Medium

Aave v3 bug bounty part 1: Security concerns and improvements about the `executeFlashLoan` function

Important Note: each of the issue I have found have been already fixed and deployed with the release of Aave 3.0.2

🤯1

691 views17:35

Daily Security

Forwarded from The Block News Feed

OpenSea tells users to rotate API keys after third-party security breach

The Block

OpenSea tells users to rotate API keys after third-party security breach

The breach may be related to a similar third-party security incident disclosed by analytics firm Nansen yesterday.

🤯1

737 views21:28

Daily Security

Forwarded from Remedy

Hey folks, how are you today?

We recently shared gas optimization tips on our Discord - and there’s plenty more to come.

If you find this useful and would like to join Remedy’s Server, follow this link:

https://discord.gg/uqFZjBgP

Make sure you press the ✅ button to get verified and gain full access to the server.

❤1🤯1

735 views19:38

Daily Security

https://www.coinspect.com/wallet-EIP-712-injection-vulnerability/

@ethers_security

Coinspect Security

A UI Flaw in Top Crypto Wallets We Need to Address

EIP-712 text injection vulnerability affecting multiple crypto wallets: Analysis and implications

🤯1

822 viewsedited 13:37

Daily Security

Forwarded from Solidity Treasures (Andrey)

#offtop The Galxe platfrom has been hacked. Dont use it.

🤯1

722 views17:40

Daily Security

https://github.com/OffcierCia/Crypto-OpSec-SelfGuard-RoadMap#problem-3

officercia.mirror.xyz/GX0LvoKDcC12ACXzhT3F_3PVRSfEyhE8cJYMZnoia9U

🔥2👍1

3.01K views22:09

Daily Security

Forwarded from Adventures in Dystopia

Hi, my dear 😊!

New day, new attack on web3 developers and artists.
At this time, the scam link is https://fluffmania.com/.

Attackers send this link in comments (for example, in our group, too) (pic)

This site is looks like free-mint landing (do you like free minting?).
But instead, the site asked users to send their liquidity to a target address. 0x02b73dcA543Adf4061CA45ec118CD13ee37Bf2db (debank)
After, the site sends report to a telegram chat group using a special bot.
The bot credentials is bot6522192634:AAHy8NqRdYBBaoTJSH5N5K2HQRktKMqegSU (pic) (getMe)

The invite link to the telegram chat group is https://news.1rj.ru/str/+AHq8y1C9GWMxMjg0 (pic)
The chat group created on 27 September 2023.

The report chat has two telegram users:
- @nothingnessssssssss (tg id 5549919234)
- @mutuNFTs (tg id 6444639769)

Stay safe my friends!

Please open Telegram to view this post

VIEW IN TELEGRAM

Please open Telegram to view this post

VIEW IN TELEGRAM

810 views16:21

Daily Security

Forwarded from alpharush

We just released Slither 0.10.0 which adds support for Vyper, adds 5 new detectors, and improves the integration with Foundry! Let me know if you have any issues or feedback https://github.com/crytic/slither/releases/tag/0.10.0

GitHub

Release 0.10.0 · crytic/slither

0.10.0 - 2023-10-18
This release adds support for Vyper 0.3.7 (thanks to the funding from VyperLang)! Currently, Vyper frameworks such as Ape are not supported. To run slither on Vyper codebases, t...

🔥6

1.01K views15:49

Daily Security

Check out a great list from a cool guy 🔥

https://github.com/OffcierCia/tips-solidity-code-auditors

@ethers_security

GitHub

GitHub - OffcierCia/tips-solidity-code-auditors: Gaining the most elusive of tips. Add your input and let's collect them all!

Gaining the most elusive of tips. Add your input and let's collect them all! - OffcierCia/tips-solidity-code-auditors

❤3🔥2

2.94K viewsedited 14:51