A #flashloan attack on @UpswingFinance resulted in the loss of ~22 ETH (~$35.5K)

The project has appeared inactive since Oct. 2020 and was attacked using price manipulation.

A thread👇 It was a price manipulation attack caused due to the design flaw of the $UPStkn token - the _transfer function of the token.

The attack occurred in three key steps👇

⚠️⚠️

$625 million worth of cryptocurrencies were stolen from the Ronin Bridge protocol in March 2022 as a result of an attack by hackers.

In June, Harmony One’s Horizon Bridge lost over $100 million in an attack.

🧵👇.. In August, the Nomad Bridge lost another $200 million as a result of an exploited vulnerability in its smart contracts.

Hackers exploited the BSC Token Hub, a cross-chain bridge, on October 6 and drain $570 million.

⬇️⬇️

#WAGSI🛡️
Exploiters minted over 1 Billion in $GALA tokens on BSC & fears caused a 20% drop in GALA.

The problem is caused by a misconfiguration of the @pNetworkDeFi bridge.

#GALA #galatoken #breach

🧵👇 ➡️ Hackers immediately sent the freshly minted GALA to #PancakeSwap.

➡️ The attacker dumped a total of 10.72 billion $GALA and earned a total of 12,977 billion $BNB ($4.4 million) by draining the PancakeSwap pool to zero.

#news #Hack

#WAGSI🛡
A new exploit on the old Opensea contract is being used to steal your NFTs.

⚠ Signing this seemingly innocent transaction could drain your wallet.

Here's a simple breakdown. ⬇⬇ This new exploit dupes the user into signing a transaction, granting the attacker control over the user's proxy contract.

#NFTs #opeansea #artwork

⚠️⚠️

On July 28, Solana-based DeFi protocol @nirvana_fi lost $3.5M to a Flash Loan attack.

After the attack, Nirvana’s native token $ANA lost 85% of its value.

Its #stablecoin $NIRV lost 90% of its US dollar value in the process

👇👇 This hack was similar to previous flash loan attacks, such as one on @Crema_Finance ($6M loss).

#Nirvana | #Crypto

https://twitter.com/Crema_Finance/status/1543638844410499073?s=20&t=EaFN_PVjtUeim6SO-c5Vtg

📌📌

Decoding #Ethereum Rollups: zk, zkVM, zkEVM

Last week, a trio of @Scroll_ZKP, @0xPolygon, and @zksync announcements had something in common:

Each company implied it would be the “first” to bring a zkEVM to market.

🔽MEGA...🧵👇 TL; DR

➚➚There are several applications for zero-knowledge proof in blockchain scaling and privacy since it can ensure computational integrity, accuracy, and privacy.

➚➚Both zk-SNARK and zk-STARK have advantages, but their combination offers more possibilities.

#ETH

🥷

This Blog Covers—

✔️What Are #NFT Phishing Scam And Their Types?

✔️How Do NFT Phishing Scams Take Place?

✔️5 Most Infamous Phishing Attacks On #NFTs In 2022

✔️Preventive Measures For NFT Security Issues

🔽MORE↓ ↓ 🪡Security threats surfacing the #Web3 ecosystem are throwing off challenges at the monetary level to the crypto and NFT community.

Among all, the phishing link scam is the most well-known and that almost anyone would have faced.

#Ethereum | #Crypto

SEVEN Questions Blockchain developers and security professionals must ask in advance—🧵

↓ 1/ What are the highest impacted areas of code?

2/ How could incident response protocols be affected?

3/ How will vulnerabilities be reported?

4/ How will users be supported to elevate risks?

↓

#cryptocurrecy

🧵

The #DAO concept has introduced a new paradigm of business organisation.
SEVEN steps to secure your DAO— Corporations have previously been restricted to some degree by their borders and corporate governance laws.

DAOs propose the notion of a genuinely global and completely decentralised organisation.

#ETH | #crypto

⚠️⚠️

$Teddy Doge developers pull out $4.5M in alleged ‘soft rug pull.’

What is the difference between—

‘Soft Rug Pull’ and ‘Hard Rug Pull’

🔽👇🔽 1/🧵

Rug pulls come in two forms: hard and soft.

Malicious code and liquidity stealing are hard pulls, whereas,

soft pulls refer to dumping an asset.

#cryptocurrecy | #Web3