@QubitFin

@QubitFin

Most recents (2)

@CertiKCommunity

#CommunityAlert 🚨

@QubitFin's bridge contract, QBridge, has experience an exploit and minted 77,162 $qXETH worth $80M

QBridge contract on #ETH 👇
etherscan.io/address/0x9930…

Use caution if interacting!

Incident Analysis coming soon

@QubitFin

@QubitFin Incident Analysis

The hacker called `deposit()` in the QBridge #eth contract w/o really making any deposit and emitted the Deposit event

The exploit was caused by `tokenAddress.safeTransferFrom` in QBridgeHandler.sol which didn't revert the tx when the tokenAddress is the 0x0.

2. The Ethereum QBridge captured the Deposit event and minted $qXETH for the hacker on #BSC.

The QBridge treats the Deposit event as an event of depositing #ETH because the `deposit` and `depositETH` methods in the #QBridge contract emit the same event.

Read 6 tweets

CertiK Security Leaderboard

@certikorg

#CommunityAlert 🚨

#Arbix Finance has been identified as #rugpull. Privileged functionalities appear in the identified smart contracts.

The team is looking into it.

DO NOT interact with the project!

Incident Analysis👇

1. $ARBX contract has mint() with onlyOwner function

2. 10M $ARBX were minted to 8 addresses

3. ~4.5M ARBX were minted to: 0x161262d172699cf0a5e09b6cdfa5fee7f32c183d

4. The 4.5M ARBX were then dumped

The funds deposited by users ($10M) were directed to unverified pools via the depositor contract

The hacker drained all assets from the pools

Depositor address: tinyurl.com/2p983z9d

1 of the unverified pools: tinyurl.com/yp4dj38v

Hacker address: tinyurl.com/4x98ef26

Read 5 tweets

Discover and read the best of Twitter Threads about #skytrace

Most recents (2)

Related hashtags

Discover and read the best of Twitter Threads about #skytrace

Most recents (2)

Related hashtags

Did Thread Reader help you today?