Forwarded from infinityhedge
Ledger Library Exploit Explainer for Average Folks:
Hudson Jameson
What is going on with the recent alerts not to use dapps?
A library that is used by many dapps that is maintained by Ledger was compromised and a wallet drainer was added.
What do I do as a normal user?
Do not interact with any dapp front ends on websites for now. This is an ongoing situation and it is risky to use dapps currently if you don't understand what backend libraries they use.
How does this drain your money?
If you visit the website you won't get automatically drained or your funds. However, prompts from your browser wallet (like MM) will display that give your assets to the malicious actors.
Does Ledger know about this?
Yes they do and are working on it.
Note: Even after Ledger corrects the bad code in their library, projects using and deploying that library will need to update things before it is safe to use dapps that use Ledger's web3 libraries.
Hudson Jameson
What is going on with the recent alerts not to use dapps?
A library that is used by many dapps that is maintained by Ledger was compromised and a wallet drainer was added.
What do I do as a normal user?
Do not interact with any dapp front ends on websites for now. This is an ongoing situation and it is risky to use dapps currently if you don't understand what backend libraries they use.
How does this drain your money?
If you visit the website you won't get automatically drained or your funds. However, prompts from your browser wallet (like MM) will display that give your assets to the malicious actors.
Does Ledger know about this?
Yes they do and are working on it.
Note: Even after Ledger corrects the bad code in their library, projects using and deploying that library will need to update things before it is safe to use dapps that use Ledger's web3 libraries.
❤3🙏2
The first connect-kit version with the drainer (1.1.6) was added to the npm registry at 9:44am UTC. Check that you have not interacted with any UIs starting this time — FrankResearcher
X (formerly Twitter)
Igor Igamberdiev (@FrankResearcher) on X
1/2
Ok, the first connect-kit version with the drainer (1.1.6) was added to the npm registry at 9:44am UTC
Better to check that you have not interacted with any UIs starting this time
Ok, the first connect-kit version with the drainer (1.1.6) was added to the npm registry at 9:44am UTC
Better to check that you have not interacted with any UIs starting this time
👍1
Polygon proposes Apechain to be built using Polygon CDK, purchases $10m+ APE to show alignment — Source
X (formerly Twitter)
Marc Boiron (@0xMarcB) on X
🚨 TLDR:
Today, the @apecoin community will vote on AIP-368, a @0xPolygonLabs proposal for the ApeChain to be built using Polygon CDK.
🏆 We bought $10M+ of APE to show our alignment.
⚠️ We care about the ApeCoin community, so properly managing conflicts of…
Today, the @apecoin community will vote on AIP-368, a @0xPolygonLabs proposal for the ApeChain to be built using Polygon CDK.
🏆 We bought $10M+ of APE to show our alignment.
⚠️ We care about the ApeCoin community, so properly managing conflicts of…
Forwarded from Binance Announcements
Binance Will List Bonk (BONK) with Seed Tag Applied
https://www.binance.com/en/support/announcement/1592b7a6ec9a408daf4b778f50ab1ca6
https://www.binance.com/en/support/announcement/1592b7a6ec9a408daf4b778f50ab1ca6
Forwarded from Bybit Announcements
📣 New Trading Pair: SEI/USDC is Live on Bybit Spot!
💥 What's more, you can now enjoy zero-fee Spot trading on SEI/USDC until further notice!
🤖 You can also trade $SEI with Bybit Grid Bots
💥 What's more, you can now enjoy zero-fee Spot trading on SEI/USDC until further notice!
🤖 You can also trade $SEI with Bybit Grid Bots
❤1
Forwarded from infinityhedge
RED ALERT 🚨: dingaling
If you've ever used NFT Trader [nft Marketplace] in the past, revoke approval to their contract ASAP (0x13d8faF4A690f5AE52E2D2C52938d1167057B9af)
*So far already 37 BAYC and 13 MAYC have already been drained to this address.
Boring Security: if you have any apes in lending protocols and have ever used NFTTrader, revoke approvals to NFTTrader before withdrawing.
It is most important to get folks who have deposits in BendDAO and Paraspace to revoke! For as soon as they withdraw they will be drained!
If you've ever used NFT Trader [nft Marketplace] in the past, revoke approval to their contract ASAP (0x13d8faF4A690f5AE52E2D2C52938d1167057B9af)
*So far already 37 BAYC and 13 MAYC have already been drained to this address.
Boring Security: if you have any apes in lending protocols and have ever used NFTTrader, revoke approvals to NFTTrader before withdrawing.
It is most important to get folks who have deposits in BendDAO and Paraspace to revoke! For as soon as they withdraw they will be drained!
Forwarded from Kirby Crypto
🚨🚨🚨 Flooring Protocol 🚨🚨🚨
There seems to be an exploit with flooring protocol.
If you've ever interacted with it please revoke these contracts ASAP.
Looking at you, NFT bois
Use revoke.cash or etherscan to revoke approvals.
Revoke these two contracts:
0x49AD262C49C7aA708Cc2DF262eD53B64A17Dd5EE
0x3eb879cc9a0Ef4C6f1d870A40ae187768c278Da2
Sauce: https://vxtwitter.com/0xfoobar/status/1736193090405167536?s=20
🫡 Follow for curated alpha → https://t.me/kirbycrypto
There seems to be an exploit with flooring protocol.
If you've ever interacted with it please revoke these contracts ASAP.
Looking at you, NFT bois
Use revoke.cash or etherscan to revoke approvals.
Revoke these two contracts:
0x49AD262C49C7aA708Cc2DF262eD53B64A17Dd5EE
0x3eb879cc9a0Ef4C6f1d870A40ae187768c278Da2
Sauce: https://vxtwitter.com/0xfoobar/status/1736193090405167536?s=20
🫡 Follow for curated alpha → https://t.me/kirbycrypto
vxTwitter / fixvx
💖 382 🔁 110
💖 382 🔁 110
foobar/ (@0xfoobar)
this is not nfttrader, common approvals among the victims seems to be flooring protocol this time
revoke these two addresses:
0x49AD262C49C7aA708Cc2DF262eD53B64A17Dd5EE
0x3eb879cc9a0Ef4C6f1d870A40ae187768c278Da2
exact cause unclear but better safe than…
revoke these two addresses:
0x49AD262C49C7aA708Cc2DF262eD53B64A17Dd5EE
0x3eb879cc9a0Ef4C6f1d870A40ae187768c278Da2
exact cause unclear but better safe than…
#AirdropAlpha
Parcl: Real Estate Index Perps on Solana — h/t 0xjaypeg
(nfa,dyor)
- https://app.parcl.co/
- Backed by DragonFly & Coinbase Ventures
- Earn points for depositing liquidity, trading positions, referring friends
- Use my referral "iansintel" for a 5% boost in points
- Owning a Homewners Association NFT grants 20% boost in points
Parcl: Real Estate Index Perps on Solana — h/t 0xjaypeg
(nfa,dyor)
- https://app.parcl.co/
- Backed by DragonFly & Coinbase Ventures
- Earn points for depositing liquidity, trading positions, referring friends
- Use my referral "iansintel" for a 5% boost in points
- Owning a Homewners Association NFT grants 20% boost in points
Summary of what "cash only" means in the context of ETFs — 6_Figure_Invest
X (formerly Twitter)
Vance Harwood (@6_Figure_Invest) on X
Cash only" means that the authorized participants (APs), the entities that directly interact with the Exchange Traded Funds (ETF), will only be able to obtain more shares (this is called share creations) of the ETF by bringing the appropriate amount of cash…
👍1
#AirdropAlpha
Meteora on Solana*
DYOR
- Twitter
- Website
- Airdrop Announcement
Details
- Team behind Jupiter Exchange (JUP)
- Main product: DLMM, similar to Trader Joe's liquidity book model
- 10% of supply set aside for liquidity incentives
- ALL liquidity will earn points at a rate of 1 point per $1 of TVL per day (active liquidity in range earn points on a multiplier)
- distribution rate of 1% per month
- TGE to be confirmed, points accrue until launch
Timeline
- Incentives begin mid-Jan 2024 (LPs before program starts might be rewarded with a multiplier on points)
*note that the incentives proposal is still undergoing discussion, changes likely
Meteora on Solana*
DYOR
- Website
- Airdrop Announcement
Details
- Team behind Jupiter Exchange (JUP)
- Main product: DLMM, similar to Trader Joe's liquidity book model
- 10% of supply set aside for liquidity incentives
- ALL liquidity will earn points at a rate of 1 point per $1 of TVL per day (active liquidity in range earn points on a multiplier)
- distribution rate of 1% per month
- TGE to be confirmed, points accrue until launch
Timeline
- Incentives begin mid-Jan 2024 (LPs before program starts might be rewarded with a multiplier on points)
*note that the incentives proposal is still undergoing discussion, changes likely
Opsec PSA from a friend who's a security specialist.
COMMON issues which have caused people to lose money:
1) Account hacked online 💻
2) Phishing Email/SMS link 📩
3) Copy/Paste Malware 🦠
It is quite sad to see it happen but here are some important cyber security habits to practice to combat against each one:
1. Yubikey/Hardware key 🔐
- If you attach a hardware key to your accounts and devices it becomes almost impossible for an online hacker to gain access because you need to touch the physical device to login
- If you can do this you will eliminate basically 99% of any online hacking attempts on your account because every time to sign in you need the physical key and you must touch it with your finger
- Please note that NOT ALL exchanges/platforms offer this security feature.
2. Anti-Phishing code 🎣
- Many people get scammed because they receive an email or SMS that LOOKS legitimate but is actually sent by a scammer and when you click any links or download the document it will steal your information and compromise your accounts
- Please note that even if the email sender's address LOOKS legitimate it could still be FAKE because scammers have ways to fake it and trick you
- To prevent this some exchanges/platforms have an Anti-Phishing code feature where you can set up a secret code only you know and every email you receive MUST contain that code if it is a legitimate email
- This is one of the fastest ways to differentiate between real and scam emails.
3. Whitelisted Addresses ✅
There is a type of malware/virus on the internet that can cause your crypto wallet addresses to change suddenly without you realizing it
These malware can infect your device and when you copy a wallet address, it will take notice and the moment you click PASTE the malware will insert another wallet address instead so you will end up sending your funds to the WRONG address
Most of us do not properly and fully check wallet addresses and sometimes even if you check it can still be an issue because the address changes later
To solve this please use your exchange/platforms Whitelisting address option so that once you have confirmed an address, it is saved and will not change due to malware/virus
As a general rule, if you are involved in crypto please make sure you DO NOT have a single point of failure.🚨 Have a few different secured places for your crypto.
Disclaimer: The information in this post is meant to be helpful info to raise awareness and help everyone become more safe and secured in our crypto journey together. Not financial advice. Stay safe.
COMMON issues which have caused people to lose money:
1) Account hacked online 💻
2) Phishing Email/SMS link 📩
3) Copy/Paste Malware 🦠
It is quite sad to see it happen but here are some important cyber security habits to practice to combat against each one:
1. Yubikey/Hardware key 🔐
- If you attach a hardware key to your accounts and devices it becomes almost impossible for an online hacker to gain access because you need to touch the physical device to login
- If you can do this you will eliminate basically 99% of any online hacking attempts on your account because every time to sign in you need the physical key and you must touch it with your finger
- Please note that NOT ALL exchanges/platforms offer this security feature.
2. Anti-Phishing code 🎣
- Many people get scammed because they receive an email or SMS that LOOKS legitimate but is actually sent by a scammer and when you click any links or download the document it will steal your information and compromise your accounts
- Please note that even if the email sender's address LOOKS legitimate it could still be FAKE because scammers have ways to fake it and trick you
- To prevent this some exchanges/platforms have an Anti-Phishing code feature where you can set up a secret code only you know and every email you receive MUST contain that code if it is a legitimate email
- This is one of the fastest ways to differentiate between real and scam emails.
3. Whitelisted Addresses ✅
There is a type of malware/virus on the internet that can cause your crypto wallet addresses to change suddenly without you realizing it
These malware can infect your device and when you copy a wallet address, it will take notice and the moment you click PASTE the malware will insert another wallet address instead so you will end up sending your funds to the WRONG address
Most of us do not properly and fully check wallet addresses and sometimes even if you check it can still be an issue because the address changes later
To solve this please use your exchange/platforms Whitelisting address option so that once you have confirmed an address, it is saved and will not change due to malware/virus
As a general rule, if you are involved in crypto please make sure you DO NOT have a single point of failure.🚨 Have a few different secured places for your crypto.
Disclaimer: The information in this post is meant to be helpful info to raise awareness and help everyone become more safe and secured in our crypto journey together. Not financial advice. Stay safe.
❤4
