Check out this fantastic local JSON-RPC load-balancer with opt-in anonymizer via Tor!

What an awesome RPC solution: github.com/emilianobonassi/loadbalanceeeer

More info: twitter.com/officer_cia/status/1596189188059467778

#blockchain #privacy

FYI

Awesome RPC project!

github.com/shark0der/rpc-proxy

#blockchain #security #privacy

I'd also like to attach this image to this post because I completely agree with what is written here and, in case you're wondering, this is not a Zencash shill but a copyright.😅

(Full here: officercia.mirror.xyz/p1ieZdxQWH4yHCNOXNPHyT8So1cY0X_wMGKwdmavi7s)

Btw, gonna post a new article in 3 hours! 🫡

#security #blockchain

Gm! Visit my blog:

https://officercia.mirror.xyz

Lots of great articles waiting for you!

Now they only come out in one place and that's Mirror! 🫡

Just in case there are any issues, I'll also upload them to IPFS and my GitHub a little later today!

#announcement

Another malicious contract involved:

0x732e9b5f59c9a442db18f7d57dd2bbfc804281cb

Basically the attacker creates a vanity address very similar to your own, and send you very small amounts of USDT or something in the hope that you'll check balance on blockscan, and one day copy and paste their address and send to it by mistake!

slowmist.medium.com/slowmist-another-airdrop-scam-but-with-a-twist-1666e01b6a6c

#blockchain #security

DeFi RoadMap now has a Spanish translation! 🔥

github.com/OffcierCia/DeFi-Developer-Road-Map/blob/main/translations/README_es.md

There are 5 languages already!

• French
• Korean
• Italiano
• Spanish
• Chinese

Please support me via GitCoin 🙏:

gitcoin.co/grants/3150/defi-web3-developer-roadmap

#blockchain #DeFi

medium.com/etherscan-blog/spoof-tokens-on-ethereum-c2ad882d9cf6

#security #attack

👀 t.me/officer_cia/90

#blockchain #education

Check this out 👀

https://theauditorbook.com/

#blockchain #audit

Working-in-web3:

Jobs:

| Read: web3.smsunarto.com

twitter.com/jobsincrypto
twitter.com/CryptoJobsList
t.me/dailyapehr
t.me/lobsters_hr
t.me/solidity_learning
t.me/dev_solidity

Grants & DAOs:

twitter.com/developer_dao
twitter.com/LidoGrants
twitter.com/gitcoin
twitter.com/web3grants
questbook.xyz
wiki.defillama.com/wiki/LlamaoGrants

Bounties:

github.com/sw33tLie/bbscope
immunefi.com
code4rena.com
hackenproof.com
sherlock.xyz
github.com/blockthreat/blocksec-ctfs
t.me/hackathonslive

More info here (specially, auditing topic) and in my blog & GitHub RoadMap.

#blockchain #work

Questions began to be raised over the discovery of mysterious outgoing zero transactions with supposed approve signatures…

At the same time, all of the customers reported that no one had signed such approves! In a nutshell, it's the identical spam attack as in the previous example:

t.me/officer_cia/694

My colleagues explained it in greater detail: t.me/gfischannel/505

The transferFrom function was called, not transfer, which means that the From address was supposed to give that address who signed the transaction, but since the sum is zero and all new contract memory cells are initialized with zeros, everything runs smoothly (since there is a 0 for any address) (deepl.com) 🤔

TLDR: You must just ignore these transactions!

#blockchain #security

KeePassX is better and that’s why:

"We have determined that an unauthorized party, using information obtained in the August 2022 incident, was able to gain access to certain elements of our customers’ information.”

#privacy #security

Check out! 2/2

https://officercia.mirror.xyz/_nD1Rtxe1PplK-NQzIq9sl-KNtajQG0aKqYsV36RTjA

More at: officercia.mirror.xyz & my GitHub: github.com/OffcierCia !

#security

Ankr aBNBc contract just got hacked!

Tx on bscscan :

www.bscscan.com/tx/0xe367d05e7ff37eb6d0b7d763495f218740c979348d7a3b6d8e72d3b947c86e33

Source 1: twitter.com/AnciliaInc/status/1598481530447228933

Source 2: twitter.com/Web3MakerEth/status/1598480557066838016

Source 3: twitter.com/officer_cia/status/1598491817334476800

#blockchain #security

+1 hack 😭

telegra.ph/Retrospective-hacks-in-web3-10-24

#blockchain #security

Hacker got away with ~$5.5m in visible assets, plus whatever he's dumped into Tornado!

Source: twitter.com/bowtiedpickle/status/1598505917556957184

Hacker Addresses: https://portfolio.nansen.ai/dashboard/0xf3a465C9fA6663fF50794C698F600Faa4b05c777?tab=transactions

#blockchain #security

Special Notes for this month:

• Retrospective of the hacks in web3: graph.org/Retrospective-hacks-in-web3-10-24

• Is it possible to deduct the transaction fee from the sent amount when using USDT ERC20: graph.org/Is-it-possible-to-deduct-the-txn-fee-from-the-sent-amount-when-using-USDT-ERC20-11-19

• How one can deanonymize Monero to a certain degree of probability: graph.org/How-one-can-deanonymize-Monero-to-a-certain-degree-of-probability-11-19

• All resources to become a smart contract auditor: graph.org/All-resources-to-become-a-smart-contract-auditor-09-11

Check out my blog: officercia.mirror.xyz or officercia.medium.com !

#blockchain #offtopic

Simple OpSec tips for y’all:

10-part-thread 🫡

twitter.com/officer_cia/status/1598374413661048837

#blockchain #security

We'll need a financial connection between Mars and Earth at some time, won't we?

A list of scientific literature and resources on this issue is provided below! I hope you enjoy my new short note format!

graph.org/Blockchain-in-Space-12-02

#blockchain #offtopic