Today's RTFKT drop checked balanceOf(msg.sender) instead of an internal mapping of claims. As a result, simply transferring the NFT out of a wallet effectively reset the claim status, allowing that wallet to claim again. This could be repeated ad infinitum (while supplies last)

Following a serious vulnerability disclosed by our team, Uniswap redeployed one of the main contracts on Ethereum at Block 16075466 The contract, UniversalRouter, was also redeployed on all chains ↻ The vulnerability could drain user's funds between actions & led to a bounty!

💣 💥 TMZ Crypto #31 💰 ☠️ Your weekly newsletter of the biggest scams, rug pulls, and the general drama of Crypto-Twitter! ⤵️ Delivered to your feed in a single thread.

sid

IBC has a "hidden" trust assumption that you may not know: >the destination chain must trust that a packet it receives was generated on the source chain following the mutually agreed upon protocol

Looks like Pauly's dev used Solady's MockERC20, a token designed for internal testing, to build their token. github.com/Vectorized/sol…

iMessage group chat TL;DR

PSA: Vyper versions 0.2.15, 0.2.16 and 0.3.0 are vulnerable to malfunctioning reentrancy locks. The investigation is ongoing but any project relying on these versions should immediately reach out to us.

Here is the write up on the recent UniswapX bug I found! “This was a high risk vulnerability that put any user creating an order on UniswapX at risk. The early disclosure of the bug prevented it ever being exploited.” RT if you enjoyed reading :3 kebabsec.xyz/posts/critical…

Bro got destroyed by his dad 🗿

The PoC of the KyberSwap Elastic Pools vulnerability is now available: github.com/one-hundred-pr… It contains the original exploit and a new test showing that the updated pools are no longer vulnerable. Thanks for waiting so long.

Bridge Hack List I will spend some time tomorrow reviewing them approximately ~$2,000M loss gist.github.com/cwhinfrey/9fd1…

My first audit Cyfrin Audits thrown into the deep end on a project with 100% test coverage & 2 prev audits. So far I've found 2 absolutely SICK criticals + many H/M & my teammate also has a bunch of findings. Looking forward to sharing this STACKED report full of SICK exploits!

Someone just exploited github.com/stripe-samples… with a Pwn Request and added their payloads to the main branch… Stripe

Many may not know that creating a new pool on Pendle is permissionless. Penpie was hacked by passing a fake pool to their `batchHarvestMarketRewards` function

Its official! MakewebAI got acquired for $60k 😇🥳 It's been around ~50 days since launch, 30+ paid users, & 1k+ net revenue. Listed this on acquire.com for only $18k & got around 60 NDAs, 6 offers, 3 LOIs with competing offers around $50k+ Had to sell since the growth

You have to do this process. -Open Zoom settings in your browser (you cannot do this through desktop app) -Click on "Settings" -Choose the "Meeting" column -Select "In Meeting (Basic)"