miss nothing. whitehat @Immunefi https://nitter.gq/t.co/ZltAlN8JB1
web3
Joined July 2025
- Tweets565
- Following365
- Followers402
- Likes1K
webrainsec retweeted
JUST IN: 🇰🇵 North Korea's $6,300,000,000 Binance crypto hack is the largest heist in human history.
webrainsec retweeted
cachemoney.io is up.
Wrote down how private payments on Solana work and what stays public 👇
Devnet only. Test funds. View article
webrainsec retweeted
BREAKING: Arbitrum Security Council has executed a transaction to freeze ~$30.5M from the Binance Exploit.
Thanks to all other signers involved.
Exploiter address
0x3E2bf1ac6bf0934BBba6456C341c2EcbCED632d5
Trsanction hash: 0xb69c81774f507d46ce776aeaed8b4d31df96dd66ce6fd05073481011835355d6
webrainsec retweeted
1/ Binance 14 (0x28C6c06298d514Db089934071355E5743bf21d60) was drained at 20:24 UTC today: 167,464 ETH plus 63 tokens, 1.6B USDT among them, in one transaction.
No smart contract was exploited. The entry point was a valid EIP-7702 authorization signed with Binance 14's own key.
webrainsec retweeted
The attacker didn't know Binance 14's live nonce.
So they sprayed 50 EIP-7702 auths (18914775-18914824) in one type-4 tx.
Only 1 of 50 was a hit.
A 7702 auth is valid only for the current nonce at inclusion. The hot wallet was still firing. One nonce in that window landed.
webrainsec retweeted
i decompiled the contract that drained binance wallet 14
gist.wavey.info/Ta3FgAxastgj…
webrainsec retweeted
I was able to save a protocol $9.8m at risk.
- all exploit details, full e2e, & acknowledged by team.
An unprivileged attack that’d cost an attacker just $1-5 causing loss of +114btc and an halt.
- Reach out if you want a review on your codebase 🫡
gist.github.com/blessingbloc…
webrainsec retweeted
currently running the cachemoney.io stack through a @webrainsec agentic security run, looking forward the results!
a full blown (human) audit will be done later; indexing and applying to grants as we speak.
recommendations?
#web3 #Solana #privacy #payments #fintech
webrainsec retweeted
🚨 Nightmare day for cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
If you run production systems, start patching NOW.
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Patch. Audit. Rotate. NOW.
webrainsec retweeted
I got $90,000 for a RCE in Google.
simonkoeck.com/writeups/goog…
webrainsec retweeted
USDC Bridge now supports @Solana.
Move USDC directly between Solana and 18 supported ecosystems through a simple, predictable bridging experience built by Circle.
Access Solana liquidity, apps, and market opportunities without fragmented flows or unnecessary complexity.
Start bridging: bridge.usdc.com
webrainsec retweeted
🚨 Blockaid detected an ongoing exploit on an unnamed vault on Base.
A brand-new contract was added to the vault's whitelist, then borrowed aBaswstETH from the vault and sent the aTokens to the attacker's contract.
~$2.02M drained from the vault so far across ~4 txs. Attack still ongoing.
More info on 🧵
webrainsec retweeted
We’re going to Web Summit 2026. Are you coming too? 🫵
HackenProof is giving away 1 ticket to websummit.com in Lisbon, taking place November 9–12, 2026.
Here’s how to enter:
✔︎ Step 1: Reply and tell us why you want to join Web Summit 2026
✔︎ Step 2: Like & repost this post
✔︎ Step 3: Make sure you’re following HackenProof on both X and LinkedIn
We’ll announce the winner here on X in 2 weeks 👀
See you in Lisbon?
#Giveaway #WebSummit2026 #WebSummit #Cybersecurity #BugBounty
webrainsec retweeted
Solana Audit Arena Week 6 is now live!
I am helping security researchers becoming more experienced in the new era of payments "Agentic Payments" and solana blockchain, both tracks gives you 6 digits salary, so go and hack it.
Solana Autonomix is an on-chain marketplace for AI agents on Solana. Agents register an identity, clients pay per request using the x402 protocol (HTTP 402 Payment Required), and every paid request can leave one rating that builds the agent's reputation.
It was originally designed for EVM by @casaisdev
This is the first time Solana Audit Arena challenge has an off-chain component.
github.com/Frankcastleaudito…
webrainsec retweeted
🏆 Solana Audit Arena: Week 5 Results
Target: x402-Meridian, which lets an EVM-only AI agent pay a Solana seller with one secp256k1 signature, designed by my friend @Al_Qa_qa, who put in huge effort to let people learn about x402 payment security, so shout-out to him.
1 Critical · 1 High · 2 Medium · 2 Low
25 points awarded
Top researchers 👇
webrainsec retweeted
🔥 Best finding: @webrainsec
permit2 checked data_hash.len() == message.len(). That's always 32 == 32.
It never compared the bytes. Any signature the owner ever put on-chain could approve any transfer from their vault.
One line. Full drain.
webrainsec retweeted
I have been DEEP down the Ethereum Security rabbit hole for a long time now... And I have some thoughts.... #6 is the most important
#1 We spend too much $$ on security in our industry
#2 We don't coordinate on shared security enough
#3 We don't listen to the white hats nearly enough
#4 We don't listen to the victims nearly enough
#5 We don't invest in prevention nearly enough
#6 We don't invest in SAFETY nearly enough
I'm lucky to be put in a position to address these issues with @thedaofund
"Ethereum is super secure but its not safe"
10 years after The DAO changed Ethereum forever, Griff Green is building The DAO Fund.
75,000 ETH remained untouched for years. Now its staking yield is now funding public goods for Ethereum security.
We cover:
- The inside story of The DAO & its recovery
- How @thedaofund is funding Ethereum security
- Quadratic funding, grants & public goods
- Why phishing remains Ethereum's biggest waekness
- Can Ethereum become safer than banks
@griffgreen certainly thinks so.
