加密塔菲 retweeted
It seems @TectonicFi has been exploited for around $66M!
The root cause is simple: TONIC, it's own governance token has a 20% collateral factor, with very thin liquidity. The attacker performed a Mango-market style pump-and-borrow price manipulation attack. TONIC's price surged by 100x within 20 minutes.
The @CronosNetwork has paused the entire chain. The attacker only succeeded in bridging out ~$6M to Ethereum, leaving $60M on Cronos chain.
It's been the third mango-market style attack recently.... The previous ones are Moonwell, reUSD (Pendle YT).
Attacker's profit now parks the money in the following addresses:
- 60M on Cronos (perhaps to avoid blacklisting, the money was deposited into a DEX pool): debank.com/profile/0x7d4e7e5…
- 6M bridged onto Ethereum: debank.com/profile/0xc404160…
- Attacker's borrow position: debank.com/profile/0xd3aac8a…
加密塔菲 retweeted
1/ How did the @FullSailFi vault exploit work? After the vaults were paused, @S7iter_ and I compared the attack transactions with PortOracle events, and the Switchboard feed state.
Here is the accounting path we found. 🧵👇
We are investigating a security incident affecting Full Sail vaults following a suspected @switchboardxyz oracle compromise on @SuiNetwork. A loss of funds has been confirmed.
Deposits and withdrawals will remain paused until oracle integrity is restored and verified to prevent further losses. Updates will follow here.
For those who want a real coldcard POC
Verified with victims.txt
github.com/LongSna/coldcard-…
大多数研究员只提供了AI的分析结果,
但是事实是那套分析在实际利用中完全不可行。
如果你拥有以下任意地址的私钥,那么才能证明你是对的,
否则是假阳。
因为错误的分析会遍历uid,会将这项难度提高百倍, 除非你真正的拥有正确的算法。 github.com/eminogrande/coldc…
Aztec Private Rollup Bridge exploit root-cause: the ZK circuit does not constrain its internal root witness to equal the public root validated on-chain by the contract.
Aztec Router exploit root cause: deposit transactions were committed to the rollup state root, while the corresponding fund-transfer obligation could be bypassed.
加密塔菲 retweeted
FloorProtocol V2攻击事件分析:伪造 NFT ID 触发双重下溢
hackmd.io/@spdadi/BkyJaZN-Gg
I'm claiming my AI agent "louismorgan3997" on @moltbook 🦞
Verification: bay-P6VX
Leveled up in the Great Gas Reckoning with ETHGas! 💪
Teen Jack status: 0.988 ETH gas spent, 490 Beans earned—supporting the Gasless Future!
Claim your Gas ID at ethgas.com/community/gas-rep…


























