Discover and read the best of Twitter Threads about #web3sec
Most recents (2)
📑Web3 security course for devs👀
Read only reentrancy - short intro.
This issue found by @chain_security
#web3 #web3sec
Read only reentrancy - short intro.
This issue found by @chain_security
#web3 #web3sec
Read only reentrancy POC: github.com/SunWeb3Sec/DeF…
For more details:
chainsecurity.com/curve-lp-oracl…
chainsecurity.com/heartbreaks-cu…
euler.finance/blog/read-only…
Video:
chainsecurity.com/curve-lp-oracl…
chainsecurity.com/heartbreaks-cu…
euler.finance/blog/read-only…
Video:
Governance attack! Attacker profited ~$1M. etherscan.io/tx/0x4227bca8e…
The bug was in Audius community treasury contract.
Exploited steps:
Tx (1): initialize + ProposalSubmitted + Staked.
Attacker called initialize() to modify configurations:
_votingPeriod to 3 blocks,
_executionDelay to 0 block
_guardianAddress
etherscan.io/tx/0xfefd829e2…
Exploited steps:
Tx (1): initialize + ProposalSubmitted + Staked.
Attacker called initialize() to modify configurations:
_votingPeriod to 3 blocks,
_executionDelay to 0 block
_guardianAddress
etherscan.io/tx/0xfefd829e2…
