非常高興能在 COSCUP 上面分享 unphishable 但還有很多社群@DefiHackLabs 的白帽分享，大家都可以看看喔

51% Attack on Monero: Qubic Appears to Have Seized Control of the Network According to the, Cos(余弦)😶‍🌫️, founder of SlowMist, the mining pool Qubic has gained control over the majority of Monero's hash rate, enabling a large-scale blockchain reorganization. This kind of control

I've been in crypto for over 10 years and I’ve Never been hacked. Perfect OpSec record. Yesterday, my wallet was drained by a malicious Cursor extension for the first time. If it can happen to me, it can happen to you. Here’s a full breakdown. 🧵👇

🚨 49 mins ago, a victim lost $165K worth of $BLOCK and $DOLO after signing malicious "approve" and "increaseAllowance" signatures.💸

Protect yourself from phishing: 🛡️ • Double-check all signature requests • Never rush into signing transactions • Use ScamSniffer extension 🔒 • Educate yourself with unphishable.io x.com/realScamSniffe…

🥲

The white hats had a successful presentation at COSCUP 2025. DeFiHackLabs also welcomed many new members at this event. Stay tuned for upcoming activities, we'll see you all soon!

作為開發者真的要看看

我们 AML 追踪团队发布了「区块链加密资产追踪手册 Crypto Asset Tracing Handbook」Beta 版本，如果你想成为我们这样的链上侦探、链上调查员，可以阅读本追踪手册😊 😈与其成为千奇百怪的猎物，不如成为特立独行的猎人。 完整版本，欢迎阅读并分享 :) github.com/slowmist/Crypt… 或 PDF 版本：

wow , AI is Sherlock Holmes 🧐

Protect yourself from phishing: 🛡️ • Double-check all signature requests • Never rush into signing transactions • Use ScamSniffer extension 🔒 • Educate yourself with unphishable.io x.com/realScamSniffe…

Google Gemini 现在强无敌啊！！！图像 + 视频直接到位了！而且全程支持中文交互/文字/汉语语音输出 Nano-banana（2.5 Flash Img Veo3 2.5 Pro Deep Thinking 一张人物 + CCS logo 直接变可爱视频！！！！！！！！！！Comfy Community Summit

😺 Bastet Weekly Update 😺 This week we tagged a bunch of governance-related vulnerabilities. 😼😼 We highlighted the 5 most interesting attack vectors. 👇👇👇 Keep them in mind when you dev or audit.🫰🫰

3分钟搞懂 Google公链：GCUL “Google Cloud Universal Ledger 可以说是迄今为止最具雄心的 Layer-1 区块链项目，正在重新定义机构金融的基础设施。” “任何金融机构都可以基于 GCUL 构建……Tether 不会用 Circle 的区块链，Adyen 也可能不会用 Stripe 的区块链。”

DeFiHackLabs POC Summer 2025 results are out! 🔥 This year we received 88 PoCs, surpassing last year’s 73. 🏆 Winners: 🥇TracExp207 - 900 USDT 🥈Z-Bra0 - 600 USDT 🥉islu - 300 USDT Huge thanks to all participants for your contributions!

x.com/i/article/1963…

DeFiHackLabs's white hats shared their latest research and enjoyed a wonderful lunch together.

技术营销的核心是首先你得懂技术，你他妈不懂，你营销个蛋？我流量大，不是只靠营销或谈点装逼技术，是我在帮许多人解决安全问题，不仅新手小白用户，许多新型手法及漏洞都是从这些奇怪场景里提炼出来。 如果非说有没有技术沉淀，眼不瞎的都可以看到我简介里有我的 GitHub

关于这次 npm 供应链投毒： npm 维护者 qix 被精准社工，点了伪造的 2fa 重置邮件导致权限泄露。攻击者随后用他的账号发了带后门的新版本，中招的包括 chalk、debug 这种顶级基础库。 这次攻击影响面很大。 首先隐蔽性强。前半段保留正常功能，不会立即报错。payload

以太坊创始人 Vitalik ，今天在日本开发者大会，发表了以太坊当前及未来的路线目标。 短期实现：扩容，提高以太坊 L1 的 Gas 限额。 中期目标：跨 L2 互操作性，与更快相应速度。 长期愿景：安全、简洁、抗量子、经过形式化验证的精简版以太坊。 以下是现场全程梳理 ⬇️