PeckShield Inc. retweeted
The @raft_fi hack leads to the mint of unbacked ~$6.7m stablecoin R.
Our analysis shows the hack takes advantage of round issue and donation to (1) manipulate the collateral token's index rate of rcbETH-c to borrow/mint $6.7m R and (2) mint extra rcbETH-c so that the donation can be fully redeemed back.
Here is the related tx: etherscan.io/tx/0xfeedbf51b4…
This Post is from an account that no longer exists. Learn more
PeckShield Inc. retweeted
👀👀👀It seems promising progress in tracking @poloniex stolen funds. @justinsuntron The whitehat reward of $10m is being offered.
PeckShield Inc. retweeted
Our initial analysis indicates the suspicious $86.6m outflow from @HECO_Chain #bridge was from a compromised operator, which was operational since 2022-10-08:
Will this be connected w/ earlier $125m @Poloniex incident?
Example outflow tx: etherscan.io/tx/0xbb6fe88427…
Operator: etherscan.io/txs?a=0x3d65588…
#PeckShieldAlert Suspicious huge withdrawal of 10,145 $ETH (~$19m) from #Heco_Bridge. @justinsuntron
Note the tx is initiated by the operator. Looks like a compromised operator?
etherscan.io/tx/0xbb6fe88427…
PeckShield Inc. retweeted
#PeckShieldAlert @KyberNetwork exploiter-labeled address has transferred 1,000 $WETH ($2.06M) to 0x84e6...adb4 on #Arbitrum
The address 0x84e6...adb4 previously interacted with Indexed Finance Exploiter on #Ethereum ~705 days ago
PeckShield Inc. retweeted
👀👀👀 New development on the @KyberNetwork exploit:
etherscan.io/tx/0x0479da9d6a…
PeckShield Inc. retweeted
#PeckShieldAlert November saw a upsurge in Web3 hacks & exploits compared to the previous month, totaling ~$348.11M across 28 incidents.
-2 high-profile attacks targeted #Justinsun-linked projects, draining $236 million worth of cryptos from #Poloniex and #HECOBridge & HTX (formerly #Huobi)
-$5.4M has been returned by one groupg of #KyberSwap exploiters, with negotiations ongoing for an additional ~$47.6M.
-#dYdX responded to an alleged targeted attack on $YFI by leveraging its $9M Insurance Fund.
-The exploiter of #Raft protocol burned 1,570 $ETH
PeckShield Inc. retweeted
👀👀👀 We've observed a few in-the-wild exploitations on this exact issue.
Our analysis confirms the root cause (to be disclosed later). So do pay close attention and take necessary countermeasures. (h/t @thirdweb @OpenZeppelin)
nitter.gq/thirdweb/status/…
nitter.gq/PeckShieldAlert/…
The OpenZeppelin team was informed yesterday Monday (12/4) at 4pm ET by @thirdweb about a security vulnerability involved in but not limited to Thirdweb’s versions of DropERC20, ERC721, ERC1155 (all versions), and AirdropERC20 pre-built contracts.
As far as we know, this vulnerability has not been exploited.
Based on our investigation, the issue is inherent to a problematic integration of specific patterns, and NOT particular to the implementations contained in the OpenZeppelin Contracts library.
Nonetheless, we will lead the effort to assess who in the community is affected and provide them with mitigation strategies. At the appropriate time, we will responsibly disclose this vulnerability following best practices for the safety of the community.
For Thirdweb users, they have developed a tool to check whether contracts created through their platform are affected and perform a migration: mitigate.thirdweb.com
PeckShield Inc. retweeted
#PeckShieldAlert #MEVBoost 💸💸💸 A validator is rewarded 566.37 ETH ($1.25m) at block #18871827.
The paying #MEV bot sends a bribe of 571 ETH ($1.3m) to backrun the following liquidity-adding tx in @Uniswap UNI-WETH V3 pair. The victim user seems to be @aavebank.eth
etherscan.io/tx/0x75d0f64da7…
PeckShield Inc. retweeted
It seems @Orbit_Chain is being drained with >$62m
etherscan.io/address/0x009b6…
PeckShield Inc. retweeted
PSA: Useful Thanksgiving hotlines
1-800-BUTTERBALL - for your Turkey
1-800-662-3263 (Ocean Spray hotline) - for your cranberry sauce
1-800-CALLFBI - for your insurrectionist cousin
PeckShield Inc. retweeted
In loving memory of former First Lady Rosalynn Carter.
The thoughts and prayers of the Biden-Harris Administration are with President Carter and the entire Carter family.
PeckShield Inc. retweeted
Rosalynn Carter was the embodiment of a life lived with purpose. My and Hillary’s full statement:
PeckShield Inc. retweeted
Rosalynn Carter married Jimmy Carter in 1946, and they had a partnership unlike any other known at the time for a president and first lady.
"She gave me wise guidance and encouragement," Jimmy Carter said in a statement Sunday after her death.
PeckShield Inc. retweeted
Rosalynn Carter was a great partner to a consequential President and helped to define the modern role of First Lady. She was gracious, warm - and determined.
My thoughts are with the entire Carter family and especially with the President.
PeckShield Inc. retweeted
PeckShield Inc. retweeted
Last night, reproductive freedom was on the ballot in Ohio, Kentucky, and Virginia. It won everywhere.
Women enjoy having human rights, and we vote.
PeckShield Inc. retweeted
18 precious souls stolen in Lewiston, Maine.
13 with physical wounds.
Many more with lifelong trauma.
Jill and I traveled today on behalf of the American people to grieve with the community and to make sure they know that they're not alone.
PeckShield Inc. retweeted
.@AdyBarkan embodied the principle of doing all the good you can, in all the ways you can, to all the people you can, as long as ever you can.
His life and work will be an inspiration for generations of changemakers to come.































