Founder of Hacking Group、White Hat Cybersecurity Group Limited
Joined May 2016
- Tweets226
- Following74
- Followers306
- Likes382
We just published HGCP — a grassroots community cert, partner intake open worldwide. If you hire security people or run a community, start on the website.
Most certs start with a class. Then they try to get companies to care.
We did it backwards.
HGCP is a grassroots community cert. Partner intake is open worldwide.
What you can do — not what you can buy.
hgcp.hackinggroup.org/
#HGCP #HackingGroup #cybersecurity #whitehat
TNT retweeted
XCon2026 × Hacking Group 圆满收官。连续三年，越来越扎实。感谢所有到场的朋友，明年见。
XCon2026 × Hacking Group wrapped. Three years in, and it keeps getting better. Thanks to everyone who made it. See you next year.
#hackinggroup #whitehat #cybersecurity #xcon
欢迎在现场的朋友们来打卡🦾
It's Day 1 of DEFCON! 🦾
Our Hong Kong Group HG852 has set up our own dedicated village on site — covering drone security, satellite security, hardware security, and featuring the latest Hacking Group merch.
If you're at the conference, come by and say hi! 👋
#DEFCON #HackingGroup #HG852 #cybersecurity #whitehat
TNT retweeted
Deadline August 28| XCon2026 x HackingGroup Security Technology Summit: AI Empowerment of Offensive and Defense Evolution and Paradigm Change
hackinggroup.org
#xcon #hackinggroup #cybersecurity #ai
TNT retweeted
🌍 Global Vendor Heatmap: Who's leading security investment?
We mapped active bug bounty programs across 105 countries.
North America leads, Asia-Pacific rises
Tech dominates, finance & education follow
Security demand is global – connectors are scarce
#WhiteHat #BugBounty
TNT retweeted
We’re thrilled to join Wiki Finance Expo Hong Kong 2026 as an Official Partner!
One of Asia’s biggest events for Fintech, Crypto, RWAs, Forex, Liquidity & AI.
📅Date: July 23–24, 2026
📍Location: Hopewell Hotel, Hong Kong
Get your FREE ticket here: wikiexpo.com/HongKong/2026/e…
TNT retweeted
🚨 @syscoin 跨链桥验证漏洞事件 | Arisk 安全警报
📌 #Syscoin 桥接发生验证机制利用事件，导致 #UTXO 侧创建约 50 亿枚未经授权的
输出。
🔍 事件原因
🛠️ 攻击者利用桥接中继路径在处理交易证明时的验证缺陷，提交了伪造/无效的交易证明。
❌ 桥接系统错误地接受并将其视为有效交易。
📈 从而在 UTXO 侧创建了约 50 亿枚原本不该存在的 SYS 输出。
⚠️ 这并非直接窃取用户已锁定的桥接资产，而是验证环节被绕过导致的异常增发。
#CryptoSecurity #BlockchainSecurity #CrossChain #DeFiRisk #CryptoAlert
Preliminary Postmortem: Syscoin Bridge Incident
We want to provide the community with a preliminary update regarding the recent Syscoin bridge incident involving approximately 5B SYS.
The Syscoin bridge is currently paused while the team investigates, finalizes the fix, and works on rectifying the unauthorized SYS output created through the affected bridge path.
Summary
An attacker exploited a validation issue in the bridge flow that resulted in an unauthorized SYS output being created on the UTXO side.
The affected funds were moved and split after reaching the UTXO chain. We are actively tracing those funds and coordinating with exchanges and ecosystem partners to prevent the tainted outputs from being deposited, traded, or further distributed.
What happened
Based on our current investigation, the incident involved the bridge relay path incorrectly accepting or interpreting a transaction proof.
This caused the bridge system to treat the transaction as valid and create an unauthorized SYS output of approximately 5B SYS through the UTXO bridge path.
The funds were first sent to:
sys1qgaelv690g7wwp2xchfdh0enf5uewzq5sm9wvcw
They were then spent and split into additional outputs. The current large tainted balances appear to be associated with:
sys1q2k482wnachkgky4lw60973p4vcf7xlh9kzpv33 — approximately 4B SYS
sys1qx6jjkq89sdaxftfgre3m0nv7vjfd4jeakg5t38 — approximately 1B SYS
Relevant transactions
Initial UTXO transaction:
explorer-blockbook.syscoin.o…
Subsequent spend:
explorer-blockbook.syscoin.o…
Split transaction:
explorer-blockbook.syscoin.o…
Actions taken
- The bridge has been paused.
- We have contacted exchanges and relevant partners and asked them to blacklist, freeze, or closely monitor any SYS deposits connected to the tainted UTXO trail and all descendant spends.
- We are continuing to trace the affected funds and coordinate with infrastructure providers and ecosystem partners.
Remediation
The team has identified the affected validation path and has a fix in place.
Our priority now is to complete implementation and review of the fix, while also determining the correct process to rectify the unauthorized SYS output and neutralize its impact on the network.
We will provide further updates once the remediation path has been finalized.
User Guidance
Users should not interact with the bridge while it remains paused.
We understand the seriousness of this incident and are treating it as the highest priority. We will continue to share updates as the investigation and remediation progress.
TNT retweeted
【开源】PrivacyHound（哮天犬）：Android 隐私实时监控工具
实时记录 App 调用摄像头、麦克风、GPS 的行为。所有日志本地存储，零网络权限，完全可审计。
Open-sourced: PrivacyHound – Android privacy monitor
Logs camera, microphone, and GPS access in real time. All logs stay local, zero network permission, fully auditable.
🔗 Apache 2.0
github.com/iHackingGroup/Pri…
#AndroidSecurity #OpenSource #PrivacyMatters #HackingGroup
TNT retweeted
12 new rewards just dropped in the WhiteHat points store!
From hacker tools to custom merch – your contributions now get you even more.
Check them out and redeem your points today 👉 whitehat.hk
#WhiteHat #BugBounty #PointsStore #CommunityDriven
TNT retweeted
📢 Call for Papers is OPEN
XCon 2026 × Hacking Group joint forum returns!
Theme: “Offensive & Defensive Evolution Under AI Empowerment – A Paradigm Shift”
We’re looking for hardcore, original, non-commercial security research.
🔗 More details & submission: [email protected]
#XCon2026 #HackingGroup #InfoSec #AIsecurity #CallForPapers
TNT retweeted
🧠 Topics of interest include but not limited to:
• AI native security, RAG/vector DB attacks, deepfake defense
• Red team engineering, C2 stealth, physical / close‑in penetration
• Data privacy, leak detection, digital forensics
• Satellite / IoT / automotive / critical infrastructure security
• AI‑driven threat hunting & automated defense
Submit your proposal to [email protected] by May 31, 2026.
#XCon #HackingGroup #CyberSecurity #RedTeam #AI
TNT retweeted
🎙️ This is the 3rd consecutive year for Hacking Group at XCon – a pure, grassroots, community‑driven stage.
No commercial KPI, no BS – just real techniques, real passion.
Join us and define the undefined.
#InfoSecCommunity #Hackers #XCon2026
TNT retweeted
🚨 Ekubo Protocol EVM Swap Router 安全事件提醒
@EkuboProtocol 官方确认：本次安全事件主要影响 EVM 链上的 Swap Router 合约，Starknet 主协议及流动性提供者暂未受影响。
⚠️攻击机制简述：
攻击者利用 Router 合约在 forward() 调用失败但未正确 revert 的情况下，通过 pay() 函数的 payCallback 机制，滥用用户此前授予的历史 ERC-20 Approval，直接执行 transferFrom 提取资金。
📍关键地址：
风险 Router 合约（建议立即撤销授权）：
• Ethereum V2：0x8ccb1ffd5c2aa6bd926473425dea4c8c15de60fd
• Ethereum V3：0x4f168f17923435c999f5c8565acab52c2218edf2
• Arbitrum V3：0xc93c4ad185ca48d66fefe80f906a67ef859fc47d
攻击者地址：0xA911Ff351B143634Dbc5aF3E204EA074583A83e3
攻击合约地址：0x61b0dAD9628D3e644eB560a5c9B0F960430E3A75
本次事件已确认造成约 17 WBTC（价值约 140 万美元）损失。
攻击交易：
etherscan.io/tx/0x770bc9a1f7…
Arisk 建议：
请所有 DeFi 用户立即检查并撤销对以上 Router 合约的老旧及无限授权。
#Ekubo #DeFiSecurity #CryptoSecurity #SmartContractAudit #WalletSecurity #AML #Arisk
There is an active security incident on Ekubo swap router contract on EVM chains only. Liquidity providers are not affected. Starknet is not affected.
We are investigating the scope of the issue, but to be safe revoke all outstanding approvals: revoke.cash
吉隆坡见
WhiteHat in Kuala Lumpur – A Deep “Co-Building” Session
🚀 Quick Announcement
WhiteHat’s second batch of closed-beta invite codes will be released tomorrow, April 17 at 10:00 AM (UTC+8).
How to get it: Follow our WeChat public account and reply “内测” (first come, first served, limited quantity).
Beta portal: whitehat.hk
Set your alarm if you haven’t joined yet.
A Journey Across Borders
Remember our promise from March?
We were a month late, but on April 7 we launched WhiteHat’s closed beta as promised.
During this month, while refining rules, we asked ourselves: besides code and vulnerabilities, what does a truly community-driven platform need?
The answer: human connections.
For that answer, we set out from Hong Kong and traveled across borders to Kuala Lumpur.
This is not just a geographical move – it’s WhiteHat’s determination to go from an online product to an offline community.
Why Kuala Lumpur?
On April 20, 2026, in Kuala Lumpur.
We chose not a grand launch event, but a quiet meeting room.
With security researchers from Southeast Asia. Unlimited conversation.
This is WhiteHat’s first offline closed-door gathering.
No one‑way presentations. Just a deep “co‑building” session.
No KPIs, no corporate speak. We’re bringing feedback from the closed beta, and our latest thoughts on rating disputes and process transparency.
What we look forward to most is hearing your real voice – the people who actually find vulnerabilities.
What will we talk about behind closed doors?
Three core dimensions:
Rule Co‑governance: Does the current vulnerability rating system feel “out of place” in Southeast Asia?
Process Transparency: How to eliminate the “black box” from submission to fix, so every report gets a response?
Capability Galaxy: Beyond bug hunting, how can WhiteHat become your career accelerator?
Our Vision
WhiteHat is not just a platform. It’s a proposition.
A proposition that values depth over breadth, collaboration over transaction, long‑term growth over short‑term gains.
This Kuala Lumpur gathering is our first step from a Hong Kong base toward a global community.
We hope WhiteHat’s footprint will reach more cities, connecting more white‑hat hackers like you.
Limited Seats – First Come, First Served
To ensure deep conversation, seats are limited.
If you are in Kuala Lumpur, and you have thoughts to share –
Let’s talk on April 22.
Deadline: April 20, 2026, 19:00 (UTC+8)
How to apply: Send your WhiteHat platform ID or a brief self‑introduction to [email protected] or DM @0_TNT on Discord
Selected participants will receive the exact location via email/DM.
The WhiteHat Team
Community‑Driven. Capability‑Centric. Global by Nature.
Discord: discord.gg/3nuybAG7m
X (Twitter): @WhiteHatHK
LinkedIn: @WhiteHatHK
#whitehat #bughunter #bugbounty #cybersecurity
TNT retweeted
🚨 Arisk 风险情报 | Inferno Drainer 恶意授权钓鱼再现！
近日，又有一用户因签署恶意 #Permit2 交易，被钓鱼者转走约 31.6万美元 USDC。
涉案核心钓鱼地址包括： 0xAfb2423F447D3e16931164C9970B9741aAb1723E
这正是我们3月25日深度链上追踪分析中重点标记的 Inferno Drainer 团伙核心授权地址！
Arisk 团队持续对该团伙保持动态监测。
2026年至今，Inferno Drainer 通过新建地址+恶意授权/离线签名手法，已造成数百万美元损失，资金路径多为 Swap 兑换 → 跨链桥洗钱 → 交易所变现。
⚠️ 安全提醒（必看）：
🔍 签名前用 Arisk AML 工具检测 spender 地址风险
♻️ 定期批量检查并撤销可疑 Approve/Permit 授权
🚫 避免点击不明链接、不签不明交易
有类似授权/钓鱼线索？欢迎评论区交流
立即访问👉 arisk.io 体验更多内容
#InfernoDrainer #恶意授权 #Permit2钓鱼 #Web3安全 #加密货币风险 #Arisk #链上追踪
