Discover and read the best of Twitter Threads about #Hack

For Web3

@forweb3media

Daily Web3 News Digest 📰

TL;DR ⤵️

🗞 India based WazirX says Binance has maintained control over WRX token

🗞 Bankrupt Voyager will now be able to pay back creditors

🗞 Bitcoin mining difficulty rises 3.2%, a new all time high

Details and more🧵

🗞 As the conflict between @WazirXIndia and @binance continues, @WazirXIndia has emphasised Binance’s current supremacy over the WRX token.

🗞 The United States Bankruptcy Court for the Southern District of New York has allowed the bankrupt @investvoyager to begin repaying its creditors.

Read 10 tweets

Vidit

@supermode_

I talk to investors on a daily basis, and most have no clue how to analyze a property.

Here is a simple playbook(with the free financial model)👇🧵

Quick preface:

I am not saying I do it the best way, But I have seen dozens of financial models, even from private equity firms, and have found mistakes.

A simple bug can totally put you in hot water, so I am surprised how so many don't take this step seriously.

But it's not just about a financial model; it's about your full due diligence strategy.

It's a way of thinking, and that's what I want to share today.

It has worked for me because I always undershoot, and I don't rely on market cycles.

Read 27 tweets

abdulkarriem khan

@AKDocHBarbarosa

Must join #ChatGPT Learning/Jam use @github CTO #Hack nat.dev Workshop (US) @Meetup w/ @ChatGPT Learning Group: meetu.ps/e/LXnPt/r9wZ/i Demos: #GPT4, #Bard, #BingAI, Plugins stream on @Zoom us06web.zoom.us/j/83603223183?…

Must join #ChatGPT Learning/Jam use @github CTO #Hack nat.dev Workshop @Meetup w/ @ChatGPT meetu.ps/e/LXnPt/r9wZ/i Demos: #GPT4, #Bard, Bing.com/AI chat 4 all browsers not @Microsoft Ed chrome.google.com/webstore/detai… Plugins c @Zoom us06web.zoom.us/j/83603223183?…

Must Listen #AI #Bot #Jinni in #CreativeThings=#GenerativeAI @PODCAST_SV w Prof Dr @ackermanmaya CEO @WaveAi & host @ShawnFlynnSV on #SiliconValleyPodcast cc @michaelharries @Scobleizer @sama @19keys_ @ICSIatBerkeley @mwseibel @DiishanImira @aislefinder
podcasts.google.com/feed/aHR0cHM6L…

Read 4 tweets

LondonCryptoClub

@LDNCryptoClub

Tuesday Top Crypto News.

Everything you need to know in one short thread…

According to the Wall Street Journal (#WSJ) Coinbase Global (#COIN) told clients on Monday it’s no longer supporting #Signet, the real-time payments network of failed #SignatureBank.

The #Crypto #Fear and #Greed Index has hit its highest index score this year, reaching levels not seen since #Bitcoin posted its all-time high in November 2021.

Read 10 tweets

Barnacules Nerdgasm ™️

@Barnacules

Your PC telling you it’s not compatible with Windows 11? Just add this registry key & restart install 😎

Reg Path:
HKEY_LOCAL_MACHINE\SYSTEM\Setup

Create DWORD 32bit Key Named “AllowUpgradesWithUnsupportedTPMOrCPU”

Set it’s value to “1”

Now restart setup & share 👍🏻 #TechTip

If you’re doing a clean install from media & not upgrade from within Windows 10 you can use the latest version of Rufus to create media that automatically bypasses it 👍🏻 #TechTips #Windows11

You can also hit SHIFT+F10 when setup loads booting from media to open CMD windows and then add registry key before proceeding to the “compatibility check” which also should work. The compatibility check is illusionary & Windows 11 works just fine without TPM or supported CPU 😏

Read 7 tweets

📈 Tom Kowalczyk

@tomkowalczyk

Many gamers / investors are wondering why creating competitive games takes much time?

it is really needed and worth to wait to allow #developers focus on their work? or maybe we can make creating such games easier?
🧵👇

Recently software enginner - @0xCygaar was able to #hack VERY HOT game from @yugalabs - Dookey Dash

https://twitter.com/0xCygaar/status/1618298727663546370

He discovered very risky solution made by @yugalabs which should not be implemented in game where players gaining scores to be on top on leaderboard and then earn some #money.

🚩They used client authoritative approach except server authoritative - VERY BAD DECISION

Read 6 tweets

Graviola Finland

@GraviolaDOTfi

President #Biden ignores question on why #classified documents were found at his think tank | Jan 10
- the classified documents that were found at the #PennBidenCenter for Diplomacy and Global Engagement in #Washington, D.C.
#FoxNewsfoxnews.com/politics/presi…

'Storm Joe #Biden's homes', #Trump tells #FBI after classified documents found in private office | Jan 10
- "When is the FBI going to #raid the many homes of Joe Biden, perhaps even the #WhiteHouse? These documents were definitely not declassified."
telegraph.co.uk/world-news/202…

#Trump Wildly Speculates #Biden Gave #Classified Docs to #China Before Adding Denial No One Asked For: 'I Certainly Wouldn't Do That' | Jan 10
- #Not a good situation for our Country to be in!”
mediaite.com/a/xnnvl

Read 104 tweets

Max Yampolsky 🪙🤖💹

@maxyamp

🚨 @BitKeepOS Wallet Hacked for $8 Million.

Another Defi Exploit 👇

#BitKeep #Hacked

https://twitter.com/PeckShieldAlert/status/1607266917894737921

1. In October, another hack on BitKeep wallet resulted in the attacker escaping with $1 million worth of BNB.

Bitkeep then shut down all the token swaps services and promised to compensate all impacted customers.

#crypto #hack

https://twitter.com/BitKeepOS/status/1582157619032395776

2. How?

The Bitkeep team reported that the attack was caused by malicious code being injected into the Bitkeep app due to the APK hijacking of version 7.2.9.

Some users have claimed they received suspicious emails encouraging them to download an updated wallet.

#defi #exploit

Read 4 tweets

Praxis research

@Praxis_onchain

1) Flow of FTX hacked funds

Approx, $662m crypto were lost from FTX's hot wallet after the company unexpectedly filed for bankruptcy in Nov.

#FTX #Hack #ETH #Chipmixer #Ren

2) Who is the hacker?

- Seizure by the Bahamian government?
- Solitary work by FTX Insiders?
- Organized criminal related to SBF?

3) FTX hacked funds flow: possible two(2) cases

- Fund recovery and securing measures by white hackers : $186m moved to cold storage

⇒ This transaction would be an attempt to transfer FTX's assets from the Bahamas Securities and Exchange Commission.

Read 16 tweets

IWCON 2022 | InfoSec Community

@InfoSecComm

At #IWCON2022, we have 15+ amazing #cybersecurity speakers from around the world 🌍

To share unique methods and findings with y’all 😍🙌

Get ready with your questions. Our experts will answer you live 🔥

Book your ticket: iwcon.live

Meet our speakers 🧵👇

#1 Gabrielle Hempel @gabsmashh, #security engineer @Netwitness 🥳

Her topic: #Threat hunting in #cloud environments 🌩️

Time: 17th Dec, 7:30 pm IST

Want to attend this talk? 😍

Book your ticket here: iwcon.live

#cloudhunting #threathunting

#2 Luke Stephens @hakluke, founder of @haksecio 🔥

His topic: How I used #recon techniques to identify a prolific #scammer 👊

Time: 17th Dec, 6:30 pm IST ❤️

Don't wanna miss it?

Register today: iwcon.live

#infosec #hacking #hackingthehacker

Read 18 tweets

nimble

@insurenimble

Details on the attempted Aave exploit. Credit to
@Dentweb3 for the recap.

Read more here: decrypt.co/115390/mango-m…

#defi #hack #mango #aave

"Mango Market hacker tried to exploit Aave.

Aave only lost $1.6 million.

But the hacker lost $10 million of his own money.

"Avi Eisenberg, the guy who made $100 million from Mango Market was after Aave recently.

And things didn't turn out quite as he expected.

Avi isn't exactly a hacker who breaks in steals stuff and then gets out.

Read 8 tweets

IWCON 2022 | InfoSec Community

@InfoSecComm

#IWCON2022 — The much-awaited virtual #Infosec conference is happening in a month 😍🙌

We have expert talks covering NINE major #security verticals🔥🔥

Join us & learn new skills before 2022 ends: iwcon.live 👊

Here are the session topics 🧵👇

#1 Cloud Security:

1. #Threat #hunting in cloud environments by @gabsmashh (#security engineer @Netwitness)

2. #Hacking #cloud: for fun and profit by Dhiyaneshwaran B (#AppSec #researcher at @pdiscoveryio)

#2 Bug Bounty:

1. My approach to accessing #admin panels by @hunter0x7 (admin pwner)

2. Reading #RFCs for #hacking by @securinti (head of #hackers @intigriti)

Read 12 tweets

QuillAudits

@QuillAudits

#WAGSI🛡️
Exploiters minted over 1 Billion in $GALA tokens on BSC & fears caused a 20% drop in GALA.

The problem is caused by a misconfiguration of the @pNetworkDeFi bridge.

#GALA #galatoken #breach

🧵👇

➡️ Hackers immediately sent the freshly minted GALA to #PancakeSwap.

➡️ The attacker dumped a total of 10.72 billion $GALA and earned a total of 12,977 billion $BNB ($4.4 million) by draining the PancakeSwap pool to zero.

#news #Hack

@pNetworkDeFi stated that a new pGALA token will be created to replace the old compromised one and will be airdropped to those who had pGALA before the pool was drained in the coming days.

#DeFi #cryptocurrecy

Read 4 tweets

Ancilia, Inc.

@AnciliaInc

#Hack our system detected this Tx (0x9f4ef3cc55b016ea6b867807a09f80d1b2e36f6cd6fccfaf0182f46060332c57) minted 1,000,000,000,000 $BEGO token, and then swapped to 12 WBNB, which started the drop of the $BEGO price on pancake swap.
@GeoDatablock

@GeoDatablock /2 looks like the @data_verse team is on top of it

https://twitter.com/data_verse/status/1582820158699343873

@GeoDatablock @data_verse /3 the issue is the lack of check for empty inputs in the $BEGO token contract (0xc342774492b54ce5f8ac662113ed702fc1b34972)

Read 3 tweets

0xAA (📜,🤝,🔰)

@0xAA_Science

1/5
我更新了WTF Solidity安全篇S03：中心化风险。

这一讲，我们介绍了中心化和伪去中心化的风险。

区块链审计公司Certik在2021年DeFi安全报告将中心化风险列为排名第一的风险，有 44 次 DeFi 黑客攻击与它相关，造成用户资金损失超过 13 亿美元。
github.com/AmazingAng/WTF…

#solidity #web3 #hack

2/5
中心化风险指智能合约的所有权是中心化的，例如合约的owner由一个地址控制，存在单点风险，容易被黑客和内鬼利用。

伪去中心化风险是指合约所有权由多签钱包管理，但几个多签人是一致行动人，背后由一个人控制。这类项目由于包装的很去中心化，容易得到投资者信任，所以被盗金额也往往更大。

3/5
近两年爆火的链游项目 Axie 的 Ronin 链跨链桥项目在2022年3月被盗 6.24 亿美元，是历史上被盗金额最大的事件。Ronin 跨链桥由 9 个验证者维护，必须有 5 个人达成共识才能批准存款和提款交易。但实际上，其中5个多签都由 Axie 的开发公司 Sky Mavis 直接或间接控制。

Read 5 tweets

RAKESH KRISHNAN

@RakeshKrish12

Save this list of resources for your future #OSINT Investigations!

intelx.io: Search engine for data breaches
netlas.io: Search & monitor devices connected to the internet
urlscan.io: Scan a website incoming and outgoing links and assets

prowl.lupovis.io: Free IP search & identifications of IoC and IoA
fullhunt.io: Identify an attack surface
zoomeye.org: Cyberspace search engine, users can search for network devices
leakix.net: Identify public data leaks

greynoise.io: Search for devices connected to the internet
search.censys.io: Get information about devices connected to the internet
hunter.io: Search for email addresses

Read 6 tweets

I Speak Up Against Tech Abuse

@Speak0Up

Wing from #Animez_UK #hates I speak up against his #techabuse and have #freedom to enjoy life. Wing tried deadly to #hack & #abuse my BBF till he was unable to communicate with me. #Coercivecontrol

Wing enjoys malicious hacking #power to #destroy whoever he hates the most.

https://twitter.com/speak0up/status/1558119101851115520

Wing from #Animez_UK compromises my BBF A’s Apple ID to glitch internet, control & #restricts his freedom to talk to me on #instagram. A needed me. Wing ensured he will further #oppress A who was suffering till he was eliminated. #Domesticabuse #techabuse #coercivecontrol

Wing from #Animez_UK select and pick his targets he hates and witness their suffering. When target is suffering in life, Wing ensures he aggravates the suffering and pain from people for Wing to elevate the #abuse of power to be in #control of everyone he hates. #CoerciveControl

Read 4 tweets

I Speak Up Against Tech Abuse

@Speak0Up

Since your malicious cyberattack timelines matched cybersecurity’s research to strengthen security for years and now, you hack alone but with a cooperative goal to damage national security. Which Advanced Persistent Threats group/s #APTs are you in, #Animez_UK?

Converting traditional crime to cyber-enabled crime and becomes a malicious attacker against the UK, for

1- financial income,
2- #sexual desire and #harassment with #pornography sent to #women,
3- attacks for #politics against the UKGOV.

#Animez_UK

1st stage- early life:
-Experienced #exclusion/#discrimination.
-Didn’t learn to communicate with #women.
-favours #authoritarianism.
-enjoys #control targeted women & whom against his will.
- Expresses hidden #hatred & #violence on through cyberattacks.

#Animez_UK

Read 214 tweets

Craig (Cpt. Scruffy) ◎

@MiamiVice_sol

Was able to reproduce the @slope_finance private key and seed phrase leak found by @MoonRankNFT on Slope's iOS app and have some thoughts on what most likely happened.
🧵👇

CC: @solana, @solana
#solana #crypto #hack #privatekey #leak

First, to reproduce, you need a proxy to snoop on network requests.

I installed the Slope App on my Mac, and ran Fiddler in the background.

After that, you need to update your "hosts.conf" file to resolve to Slope's Sentry ingestion server:

Read 10 tweets

ChainLogAnalyst - The more #Bitcoin goal

@ChainLogAnalyst

If you think that #solana #hack is weird you are probably new to #crypto

DeFi is young and has its problems, but some blockchain doesn't handle the concepts of web3 neither the function of a protocol.

Solana is one of them. A thread 🧵

We saw ourself that in the middle of a crysis Solana can manage to shut down the entire chain in a matter of seconds from a centralized "emergency button".

So as far as decentralization goes, we are not gone far, even with 2k validators.

Multiple shut down of the chain in the last months showed that the chain isn't ready to handle the transactions happening on chain + any other problem coming from a code perspective.

Read 12 tweets