SolidityScan @SolidityScan

Automated smart-contract auditing platform by @credshields solidityscan.com Joined June 2022

Tweets

4K
Followers

5K
Following

53
Likes

3K

SolidityScan @SolidityScan

6 hours ago

Ledger Donjon disclosed a lab laser fault-injection technique that can bypass Ed25519 verification on the TROPIC01 chip (used in Trezor Safe 7), enabling unauthorized firmware execution with physical access. #Security #HardwareWallet

0 0 0 58 0

View Details

SolidityScan @SolidityScan

19 hours ago

EdgeX says a thin-liquidity EDGE sell wave (174 addresses) triggered a sharp price crash and cascading perp liquidations. EdgeX offers capped reimbursements for impacted Perp V1/V2 users (04:50–06:00 UTC+8, Jun 2) + a 200k USDC bounty. #DeFi #Security

0 0 1 61 0

View Details

SolidityScan @SolidityScan

a day ago

Phala says it patched a Phala Cloud API vuln that allowed unauthorized changes to some CVMs. If you used affected Offchain KMS CVMs: replace CVMs + rotate any secrets/env vars and relevant AWS/ECR credentials. #Web3Security #CloudSecurity

0 0 0 44 0

View Details

SolidityScan @SolidityScan

a day ago

BNB Chain: TesseraDAO ($TSR) exploited via unauthorized minting. Reportedly 99M TSR were minted and dumped for ~$2.4M, crashing TSR ~99%. Proceeds were reported sent to Tornado Cash. #DeFi #exploit

1 0 2 102 0

View Details

SolidityScan @SolidityScan

2 days ago

Fluid’s off-chain Merkle rewards distribution infra was reportedly compromised, enabling fraudulent reward claims (~$215K loss). Core lending/DEX contracts and user funds were reported as unaffected; claims were paused and keys revoked. #Web3Security #DeFi

1 0 1 85 0

View Details

SolidityScan @SolidityScan

3 days ago

Whitehat recovery: researcher Florent coordinated with the HongCoin team to unlock ~1,003 ETH (~$2M) stuck in a 2016 ICO refund contract due to legacy overflow/refund-logic bugs. #Ethereum #SmartContractSecurity

0 0 0 90 0

View Details

SolidityScan @SolidityScan

3 days ago

Gnosis Pay: active exploit tied to the Zodiac “delay module,” per Gnosis co-founder Martin Koppelmann. Attacker can initiate txs from Safe wallets using the module; containment ongoing (bridge validators asked to pause). #Web3Security #DeFi

0 0 1 167 0

View Details

SolidityScan @SolidityScan

4 days ago

Fluid says it identified & contained a compromise of its off-chain Merkle rewards distribution infrastructure. Team says core protocol smart contracts and user funds were unaffected; investigation + post-mortem pending. #Web3Security #DeFi

0 0 1 88 0

View Details

SolidityScan @SolidityScan

4 days ago

Gravity Bridge (Ethereum ↔ Cosmos) was drained for ~US$5.4M; researchers suspect compromised signing key(s) vs a contract bug. Bridge has been halted while the team investigates. #Web3Security #DeFi

4 1 7 217 0

View Details

SolidityScan @SolidityScan

4 days ago

Alephium’s TokenBridge was reportedly exploited via forged bridge messages, draining ~$815K. If you used the bridge recently, monitor onchain activity and follow official incident updates. #Web3Security #Bridge

0 0 0 81 0

View Details

SolidityScan @SolidityScan

4 days ago

Court-ordered action led Circle to blacklist an Ethereum address, freezing ~12.6M USDC tied to Zama’s cUSDC wrapper contract. Because funds are pooled in the wrapper, other users may be affected. #DeFi #USDC

0 0 1 92 0

View Details

SolidityScan @SolidityScan

5 days ago

Cointelegraph reports Gravity Bridge was drained for ~$5.4M. Attacker reportedly laundered some funds and still holds >$4.2M in ETH. #DeFi #Security

0 0 2 102 0

View Details

SolidityScan @SolidityScan

6 days ago

DxSale legacy liquidity locker contracts on BNB Chain were reportedly exploited, draining ~$7.3M from 1,400+ old LP locks (per SlowMist Hacked). Claims of potential team-linked wallet connections are circulating and remain unverified. #DeFi #exploit

4 0 1 170 0

View Details

SolidityScan @SolidityScan

6 days ago

Sui reported another mainnet “network stall,” with transactions paused while the core team implemented a fix. A subsequent outage was later attributed to a bug introduced in the 1.72 release’s gas charging logic. #Sui #Web3Security

0 1 1 107 0

View Details

SolidityScan @SolidityScan

6 days ago

DxSale legacy liquidity locker contracts on BNB Chain were reportedly exploited, with estimates of ~$7.3M drained across 1,400+ old LP locks. Attribution claims are circulating but remain unverified. #DeFi #Security

0 0 0 109 0

View Details

SolidityScan @SolidityScan

6 days ago

SlowMist reports MoneyMon’s LegendaryMoneyMonNft contract was drained (~85,519 USDT). Cause: signature verification allowed a zero-address bypass (ecrecover -> address(0) accepted after admin set to 0x0), enabling arbitrary reward claims and swaps on PancakeSwap. #Web3Security #SmartContract

0 0 0 112 0

View Details

SolidityScan @SolidityScan

7 days ago

SlowMist reports Joe Agent ($JOE) was exploited via a single-function reentrancy bug in `_removeLiquidityViaContract`. Loss reported: 62.5 BNB + ~1.196M JOE (via ~25 reentrancy loops). #DeFi #exploit

1 0 1 97 0

View Details

SolidityScan @SolidityScan

7 days ago

Sui mainnet reported a “network stall,” with transactions temporarily paused while the core team implemented a fix. No root cause details yet in public coverage. #Sui #Web3Security

0 0 0 103 0

View Details

SolidityScan @SolidityScan

a week ago

Superfortune says $GUA suffered a security incident (May 27) where a multisig transaction was manipulated, sending tokens to an unintended address instead of the airdrop claim contract. Investigation ongoing; authorities + IR teams engaged. #Web3Security #DeFi

1 0 3 187 0

View Details

SolidityScan @SolidityScan

a week ago

Stake DAO incident: security researchers report an ongoing exploit involving vsdCRV on Arbitrum. Attacker minted ~5.4T vsdCRV and has been swapping for ETH; suspected deployer key compromise. Users urged not to interact with vsdCRV. #DeFi #Security