- A deep dive into the main components of ERC-4337: Account Abstraction Using Alt Mempool — part1, Part 2
- OWASP Smart Contract Security
@EthSecurity1

some checklists: Beirao's Checklist
Decurity's Checklist
ETH Devs's Checklist
Hans's Checklist
Jeffrey's Checklist
Jonas's Checklist
Miguel's Checklist
Nisedo's Checklist
Owen's Checklist
Rahul's Checklist
Rajeev's Resource
Rareskill's Checklist
Roman's Checklist @EthSecurity1

Radiant hacked 51 $m loss

Seems private keys compromised

Exploited on BSC, ARBITRUM

Root cause: looks like the attacker just had control of 3 multisig signers allowing them to transfer ownership.

as owner, they could then call setLendingPoolImpl on the addresses provider to upgrade the implementation

@EthSecurity1

- EVM LOW LEVEL VULNERABILITIES - ECDSA signature vulnerabilities @EthSecurity1

Tapioca DAO hacked

vesting contract ownership transferred to exploiter, and then all vesting tokens emergency released

https://arbiscan.io/token/0x2c650dab03a59332e2e0c0c4a7f726913e5028c1?a=0x70285a11489bed93686410ebc727057cafb8129d
@EthSecurity1

- Vulnerabilities every beginner Smart Contract Security Researcher should find - Retrospecting Unhealthy Order Allowance Vulnerability in Perpetual Protocol
- Solidity Smart Contract Unbounded Loops DOS Attack Vulnerability Explained with REAL Example
@web3privacy1

Looks like $20M of seized funds tied to the US Government was likely stolen in the past hour. - @investigations

RT for visibility: x.com/officer_cia/status/1849534839319302453

#security #opsec

Seems hacker returned funds

- SEAL911 crisis handbook - DAO Governance DeFi Attacks @EthSecurity1

$150,000 Evmos Vulnerability Through Reading Documentation
https://medium.com/@jjordanjjordan/150-000-evmos-vulnerability-through-reading-documentation-d26328590a7a [12 hours] Ethereum code line-by-line
https://youtu.be/gPQ-uXj03iQ?feature=shared @EthSecurity1

Use this list of fantastic telegram channels I've put together in order to discover them as your own personal Web3-Google!

Feel free to use this folder to onboard your non-web3 friends to Web3, as the majority of the channels are maintained by independent researchers. There are also additional channels for news, CT reviews, and more!

A small tip to subscribooors: if you find a channel interesting, move it out of the folder into your main list of chats. That way you’ll view content you’re interested in more often, and channels get more views instead of just subscribers!

- Aztec Multiple-Spend Error Bugfix Review - Alchemix Missing Solvency Check Bugfix Review - CurveFinance price anomaly - Defi fork bugs @EthSecurity1

- A detailed write-up Fuel critical vulnerability Immunefi Attackathon, 150 $k paid - An exploration of low-level Solana VM behavior. How to escalate from a powerful memory corruption primitive to full program control. - Foundry tips @EthSecurity1

BGM TOKEN. The reward logic can reduce the token in LP, leading to price inflation when there is limited token in the LP. loss : 500k $ hack trx: https://app.blocksec.com/explorer/tx/bsc/0x8580825008800b9e13266f40b41a838a521e4d0bb4abc1cb78684253b7bc9fd1?line=26&debugLine=26 @EthSecurity1

thala was hacked for 25 m$ but seal911 exposed hacker identity and he accepted 300 k$ bounty. rootcause: https://x.com/moon_shiesty/status/1857886309580157260 @EthSecurity1