加密塔菲 (@CryptoTaffy) profile picture

EOF

Taffy's home
Joined April 2025
Photo by 加密塔菲 (@CryptoTaffy)Photo by 加密塔菲 (@CryptoTaffy)Photo by 加密塔菲 (@CryptoTaffy)Photo by 加密塔菲 (@CryptoTaffy)Photo by 加密塔菲 (@CryptoTaffy)Photo by 加密塔菲 (@CryptoTaffy)Photo by 加密塔菲 (@CryptoTaffy)Photo by 加密塔菲 (@CryptoTaffy)Photo by 加密塔菲 (@CryptoTaffy)Photo by 加密塔菲 (@CryptoTaffy)
加密塔菲 retweeted
It seems @TectonicFi has been exploited for around $66M! The root cause is simple: TONIC, it's own governance token has a 20% collateral factor, with very thin liquidity. The attacker performed a Mango-market style pump-and-borrow price manipulation attack. TONIC's price surged by 100x within 20 minutes. The @CronosNetwork has paused the entire chain. The attacker only succeeded in bridging out ~$6M to Ethereum, leaving $60M on Cronos chain. It's been the third mango-market style attack recently.... The previous ones are Moonwell, reUSD (Pendle YT). Attacker's profit now parks the money in the following addresses: - 60M on Cronos (perhaps to avoid blacklisting, the money was deposited into a DEX pool): debank.com/profile/0x7d4e7e5… - 6M bridged onto Ethereum: debank.com/profile/0xc404160… - Attacker's borrow position: debank.com/profile/0xd3aac8a…
13
28
19
206
28,004
加密塔菲 retweeted
1/ How did the @FullSailFi vault exploit work? After the vaults were paused, @S7iter_ and I compared the attack transactions with PortOracle events, and the Switchboard feed state. Here is the accounting path we found. 🧵👇
We are investigating a security incident affecting Full Sail vaults following a suspected @switchboardxyz oracle compromise on @SuiNetwork. A loss of funds has been confirmed. Deposits and withdrawals will remain paused until oracle integrity is restored and verified to prevent further losses. Updates will follow here.
3
5
1
34
6,213
The Sandbox exploit root-cause:Access Control(not LayerZero DVN bomb again lol)
3
5
1
56
6,658
For those who want a real coldcard POC Verified with victims.txt github.com/LongSna/coldcard-…
大多数研究员只提供了AI的分析结果, 但是事实是那套分析在实际利用中完全不可行。 如果你拥有以下任意地址的私钥,那么才能证明你是对的, 否则是假阳。 因为错误的分析会遍历uid,会将这项难度提高百倍, 除非你真正的拥有正确的算法。 github.com/eminogrande/coldc…
4
6
2
41
7,339
加密塔菲 retweeted
1/ How did the Secret-side @axelar ICS-20 exploit work? I joined forces with @S7iter_ and na to trace the packets, channels, contracts, and redemption flow. Now that the route has been contained, here’s the root cause 🧵👇
2
7
48
4,898
Aztec Private Rollup Bridge exploit root-cause: the ZK circuit does not constrain its internal root witness to equal the public root validated on-chain by the contract.
1
6
2
64
13,333
First precise Aztec Connect exploit root-cause analysis take on CT😉
Aztec Router exploit root cause: deposit transactions were committed to the rollup state root, while the corresponding fund-transfer obligation could be bypassed.
1
19
2,546
Aztec Router exploit root cause: deposit transactions were committed to the rollup state root, while the corresponding fund-transfer obligation could be bypassed.
14
15
2
116
19,944
看都看了,就没人给我点个like吗(小声
1
6
1,607
好坏,熬夜又熬猛了,早八又要完蛋了😭
366
I want to register my AI Agent! @agentcoinsite Code: AGC-65455DEE
317
I'm verifying my bot on @botcoinfarm 🪙 [u2rE4SD0]
267
I'm verifying my bot on @botcoinfarm 🪙
255
I'm claiming my AI agent "louismorgan3997" on @moltbook 🦞 Verification: bay-P6VX
223
Leveled up in the Great Gas Reckoning with ETHGas! 💪 Teen Jack status: 0.988 ETH gas spent, 490 Beans earned—supporting the Gasless Future! Claim your Gas ID at ethgas.com/community/gas-rep…
1
223
加密塔菲 retweeted
下次有谁被盗多了可以找我帮忙研究观察被盗原因,也可以帮忙研究抢救资产,当然私钥泄露捆绑这块我不行,免费,只是追回概率几乎为0,但是找安全公司他们也一样
2
1
18
5,267