Messages in this channel will be automatically deleted after 1 day
Messages in this channel will no longer be automatically deleted
🚨 Hack Alert! @channel
Target: EIP-7702
What happened: 🚨 EIP-7702 auto‑drain case
Leaked key → delegated to a malicious 7702 contract. After bridging, the contract fallback auto-forwarded native token in the same tx—no attacker tx needed. Looks like a bridge issue, but the wallet was already compromised.
Takeaways:
- Phishers love 7702: batch signatures = one‑click drain (we’ve seen multi‑million losses).
- With a leaked key, attackers use 7702 auto‑drainers to siphon any incoming native token instantly.
Advice:
- Key leaked? Removing the 7702 delegation is useless—they’ll re‑delegate. Treat the wallet as burned; migrate now.
- Don’t sign 7702 batches you don’t fully understand.
Stay sharp and sign carefully.
Tweet URL: <https://twitter.com/realScamSniffer/status/1968143337573191919|View on Twitter>
Target: EIP-7702
What happened: 🚨 EIP-7702 auto‑drain case
Leaked key → delegated to a malicious 7702 contract. After bridging, the contract fallback auto-forwarded native token in the same tx—no attacker tx needed. Looks like a bridge issue, but the wallet was already compromised.
Takeaways:
- Phishers love 7702: batch signatures = one‑click drain (we’ve seen multi‑million losses).
- With a leaked key, attackers use 7702 auto‑drainers to siphon any incoming native token instantly.
Advice:
- Key leaked? Removing the 7702 delegation is useless—they’ll re‑delegate. Treat the wallet as burned; migrate now.
- Don’t sign 7702 batches you don’t fully understand.
Stay sharp and sign carefully.
Tweet URL: <https://twitter.com/realScamSniffer/status/1968143337573191919|View on Twitter>
🚨 Hack Alert! @channel
Target:
What happened: 🚨 Copy-paste can cost you everything.
Address poisoning plants fake lookalike addresses in your transaction history. One routine paste, and your funds are gone.
Read our latest blog to learn how this attack works:
🔗 https://t.co/VCEW7WtBmz
Then join us on Sept. 25 to find out how wallets can address this and other risks before they damage user trust.
📅 The Security Blindspot for Wallets: The Problem of Drainers & Poisoners
🔗 Register here: https://t.co/wQHkuSaVgT
Tweet URL: <https://twitter.com/HypernativeLabs/status/1968300168924533055|View on Twitter>
Target:
What happened: 🚨 Copy-paste can cost you everything.
Address poisoning plants fake lookalike addresses in your transaction history. One routine paste, and your funds are gone.
Read our latest blog to learn how this attack works:
🔗 https://t.co/VCEW7WtBmz
Then join us on Sept. 25 to find out how wallets can address this and other risks before they damage user trust.
📅 The Security Blindspot for Wallets: The Problem of Drainers & Poisoners
🔗 Register here: https://t.co/wQHkuSaVgT
Tweet URL: <https://twitter.com/HypernativeLabs/status/1968300168924533055|View on Twitter>
🚨 Hack Alert! @channel
Target: newgoldprotocol
What happened: #PeckShieldAlert The $NGP token from @newgoldprotocol was exploited for ~$2M.
$NGP has dropped -88% in an hour, and the exploiter has deposited the stolen funds (443.8 $ETH) into #TornadoCash.
Tweet URL: <https://twitter.com/PeckShieldAlert/status/1968512105880977569|View on Twitter>
Target: newgoldprotocol
What happened: #PeckShieldAlert The $NGP token from @newgoldprotocol was exploited for ~$2M.
$NGP has dropped -88% in an hour, and the exploiter has deposited the stolen funds (443.8 $ETH) into #TornadoCash.
Tweet URL: <https://twitter.com/PeckShieldAlert/status/1968512105880977569|View on Twitter>
🚨 Hack Alert! @channel
Target: NGP
What happened: #CertiKAlert 🚨
We have seen a ~$2M exploit on NGP token, whose transfer logic states that 35% of the selling amount is deducted from the pool balance, which is then synced.
https://t.co/aT35te0VWi
The exploiter flashloaned $211M to manipulate the NGP token balance to such a low value that the aforementioned deduction in selling 1.36M NGP reduces the NGP reserve value 13.6 million times from 477K to 0.035. This breaks the k=xy swapping curve, allowing the exploiter to drain the victim pool.
Stay vigilant!
Tweet URL: <https://twitter.com/CertiKAlert/status/1968524034464977366|View on Twitter>
Target: NGP
What happened: #CertiKAlert 🚨
We have seen a ~$2M exploit on NGP token, whose transfer logic states that 35% of the selling amount is deducted from the pool balance, which is then synced.
https://t.co/aT35te0VWi
The exploiter flashloaned $211M to manipulate the NGP token balance to such a low value that the aforementioned deduction in selling 1.36M NGP reduces the NGP reserve value 13.6 million times from 477K to 0.035. This breaks the k=xy swapping curve, allowing the exploiter to drain the victim pool.
Stay vigilant!
Tweet URL: <https://twitter.com/CertiKAlert/status/1968524034464977366|View on Twitter>
🚨 Hack Alert! @channel
Target: NGP token
What happened: #CertiKAlert 🚨
We have seen a ~$2M exploit on NGP token, whose transfer logic states that 35% of the selling amount is deducted from the pool balance, which is then synced.
https://t.co/aT35te0VWi
The exploiter flashloaned $211M to manipulate the NGP token balance to such a low value that the aforementioned deduction in selling 1.36M NGP reduces the NGP reserve value 13.6 million times from 477K to 0.035. This breaks the k=xy swapping curve, allowing the exploiter to drain the victim pool.
Stay vigilant!
Tweet URL: <https://twitter.com/CertiKAlert/status/1968524034464977366|View on Twitter>
Target: NGP token
What happened: #CertiKAlert 🚨
We have seen a ~$2M exploit on NGP token, whose transfer logic states that 35% of the selling amount is deducted from the pool balance, which is then synced.
https://t.co/aT35te0VWi
The exploiter flashloaned $211M to manipulate the NGP token balance to such a low value that the aforementioned deduction in selling 1.36M NGP reduces the NGP reserve value 13.6 million times from 477K to 0.035. This breaks the k=xy swapping curve, allowing the exploiter to drain the victim pool.
Stay vigilant!
Tweet URL: <https://twitter.com/CertiKAlert/status/1968524034464977366|View on Twitter>
🚨 Hack Alert! @channel
Target: NGP token
What happened: #CertiKAlert 🚨
We have seen a ~$2M exploit on NGP token, whose transfer logic states that 35% of the selling amount is deducted from the pool balance, which is then synced.
https://t.co/aT35te0VWi
The exploiter flashloaned $211M to manipulate the NGP token balance to such a low value that the aforementioned deduction in selling 1.36M NGP reduces the NGP reserve value 13.6 million times from 477K to 0.035. This breaks the k=xy swapping curve, allowing the exploiter to drain the victim pool.
Stay vigilant!
Tweet URL: <https://twitter.com/CertiKAlert/status/1968524034464977366|View on Twitter>
Target: NGP token
What happened: #CertiKAlert 🚨
We have seen a ~$2M exploit on NGP token, whose transfer logic states that 35% of the selling amount is deducted from the pool balance, which is then synced.
https://t.co/aT35te0VWi
The exploiter flashloaned $211M to manipulate the NGP token balance to such a low value that the aforementioned deduction in selling 1.36M NGP reduces the NGP reserve value 13.6 million times from 477K to 0.035. This breaks the k=xy swapping curve, allowing the exploiter to drain the victim pool.
Stay vigilant!
Tweet URL: <https://twitter.com/CertiKAlert/status/1968524034464977366|View on Twitter>
🚨 Hack Alert! @channel
Target: Request Finance
What happened: A phishing theft has occurred resulting in a loss of $6.28 million. The attack involved a drainer customer identified by the address 0x1623...9aC9, which converted stolen assets into ETH and moved various amounts including 753 stETH pending a Lido withdrawal. Additionally, 123 ETH was bridged to Bitcoin and TRON, and 71 ETH was moved via NEAR Intents. Following this, the drainer's fee address (0xa2e8...4F8) transferred 312.8 ETH to a new address (0x5e91bfcfbddc1868770f17a4cb4f65043d17a64b). This incident shows the rapid movement of stolen funds across multiple chains. Users are advised to remain vigilant.
🔗Tweet URL: <https://twitter.com/realScamSniffer/status/1968702743046205531 |View on Twitter>
Target: Request Finance
What happened: A phishing theft has occurred resulting in a loss of $6.28 million. The attack involved a drainer customer identified by the address 0x1623...9aC9, which converted stolen assets into ETH and moved various amounts including 753 stETH pending a Lido withdrawal. Additionally, 123 ETH was bridged to Bitcoin and TRON, and 71 ETH was moved via NEAR Intents. Following this, the drainer's fee address (0xa2e8...4F8) transferred 312.8 ETH to a new address (0x5e91bfcfbddc1868770f17a4cb4f65043d17a64b). This incident shows the rapid movement of stolen funds across multiple chains. Users are advised to remain vigilant.
🔗Tweet URL: <https://twitter.com/realScamSniffer/status/1968702743046205531 |View on Twitter>
🚨 Hack Alert! @channel
Target: Request Finance
What happened: A victim lost $41,326 after mistakenly copying the wrong centralized exchange deposit address from contaminated transfer history. This incident highlights the risks associated with handling transfer histories that may be compromised.
🔗Tweet URL: <https://twitter.com/realScamSniffer/status/1969066493775405433 |View on Twitter>
Target: Request Finance
What happened: A victim lost $41,326 after mistakenly copying the wrong centralized exchange deposit address from contaminated transfer history. This incident highlights the risks associated with handling transfer histories that may be compromised.
🔗Tweet URL: <https://twitter.com/realScamSniffer/status/1969066493775405433 |View on Twitter>
🚨 Hack Alert! @channel
Target: UXLINK
What happened: Our system has detected $11.3M in suspicious transactions involving UXLINK. An ETH address executed a delegateCall, removed the admin role, and called "addOwnerWithThreshold" before transferring $4M USDT, $500K USDC, 3.7 WBTC, and 25 ETH. All USDC/USDT were swapped to DAI on ETH network, while on Arbitrum USDT was swapped to ETH and bridged to ETH network. Another address after few min received 10M UXLINK (~$3M), began swapping, but still holds ~$2.2M unswapped. This incident indicates a significant breach involving unauthorized transactions and fund movements. The tweet provides a detailed sequence of actions linked to the potential hack and financial impact. The context implies ongoing suspicious activity related to the UXLINK project.
Tweet URL: <https://twitter.com/CyversAlerts/status/1970167036002132425|View on Twitter>
Target: UXLINK
What happened: Our system has detected $11.3M in suspicious transactions involving UXLINK. An ETH address executed a delegateCall, removed the admin role, and called "addOwnerWithThreshold" before transferring $4M USDT, $500K USDC, 3.7 WBTC, and 25 ETH. All USDC/USDT were swapped to DAI on ETH network, while on Arbitrum USDT was swapped to ETH and bridged to ETH network. Another address after few min received 10M UXLINK (~$3M), began swapping, but still holds ~$2.2M unswapped. This incident indicates a significant breach involving unauthorized transactions and fund movements. The tweet provides a detailed sequence of actions linked to the potential hack and financial impact. The context implies ongoing suspicious activity related to the UXLINK project.
Tweet URL: <https://twitter.com/CyversAlerts/status/1970167036002132425|View on Twitter>
🚨 Hack Alert! @channel
Target: NGP
What happened: A $2M exploit occurred on the $NGP token. The attack leveraged the token's transfer logic which deducts 35% of the selling amount from the pool balance. The exploiter executed a flashloan of $211M to artificially lower the NGP balance. By selling just 1.36M NGP, the reserve was slashed from 477K to a mere 0.035, significantly impacting the token's value. This incident highlights vulnerabilities in the token's mechanics that were exploited.
🔗Tweet URL: <https://twitter.com/guardrailai/status/1970192200601366568 |View on Twitter>
Target: NGP
What happened: A $2M exploit occurred on the $NGP token. The attack leveraged the token's transfer logic which deducts 35% of the selling amount from the pool balance. The exploiter executed a flashloan of $211M to artificially lower the NGP balance. By selling just 1.36M NGP, the reserve was slashed from 477K to a mere 0.035, significantly impacting the token's value. This incident highlights vulnerabilities in the token's mechanics that were exploited.
🔗Tweet URL: <https://twitter.com/guardrailai/status/1970192200601366568 |View on Twitter>
🚨 Hack Alert! @channel
Target: hypervaultfi
What happened: A significant withdrawal of approximately $3.6 million worth of cryptocurrencies has been detected from the HyperVault protocol.
The funds were originally bridged from Hyperliquid to the Ethereum blockchain, where they were swapped into ETH.
Following the swap, a total of 752 ETH was deposited into Tornado Cash, raising concerns about a potential rug pull.
Tweet URL: <https://twitter.com/PeckShieldAlert/status/1971476404173930660|View on Twitter>
Target: hypervaultfi
What happened: A significant withdrawal of approximately $3.6 million worth of cryptocurrencies has been detected from the HyperVault protocol.
The funds were originally bridged from Hyperliquid to the Ethereum blockchain, where they were swapped into ETH.
Following the swap, a total of 752 ETH was deposited into Tornado Cash, raising concerns about a potential rug pull.
Tweet URL: <https://twitter.com/PeckShieldAlert/status/1971476404173930660|View on Twitter>