Jeff Security

🚨 Binance suspected hack: $5.5B+ drained, the largest crypto theft ever (Bybit was $1.5B) What we know: • 20:24 UTC: Binance 14 hot wallet sends 167K ETH, 1.6B USDT and 60+ tokens to a fresh address in one tx • 3 min earlier: a Tornado Cash funded address installed an EIP-7702 delegation on the hot wallet • Total outflows: ~$3.5B on Ethereum, ~$1.44B in BTC, ~$630M on Tron • Tether froze 1.57B USDT, Circle froze 823M USDC (~$2.4B total) • Binance: investigating, says user funds are SAFU. CZ: “it does look like a hack” The real concern: ETH, BTC and TRX can’t be frozen. Watch for laundering via DEXs and mixers. The 7702 detail is the one for devs to study. A delegation persists and can authorize later transfers without another signature. Not confirmed by Binance yet. Follow official channels only and beware of scams. Track the hacker wallets: arkm.com/explorer/entity/21a…

Groth16 verifier bug: gamma and delta in the verification key were set to the same G2 point 🙃 They must be independent. When they match, the pairing equation collapses and valid-looking proofs can be forged with no deposit and no witness That is how Foom Cash lost $2.26M in March. The cause: one snarkjs Phase 2 setup step was never run Math was fine. Setup was not rekt.news/the-unfinished-pro…

The next bull run will test every protocol with real volume and real attackers. Fuzz it, formally verify the invariants that hold your funds and get it audited. Launch like you expect to be attacked, because you will be 🫡

New shieldify.org is live 😱 Request an audit in a few clicks, and browse 170+ security reviews filtered by chain, language and status. shieldify.org/audits 🫡🫡

Solid resource 😱 This is one of the most structured open-source prompt packs I’ve seen for bug bounty hunting! @mdp_sec broke down their entire workflow into 10+ reusable phases: → Recon & surface mapping → Authenticated access setup → Endpoint & vuln-class sweeping → Browser-based walkthrough → Critical-impact hunting → Triage, dedup & validation → Independent verification gates It’s Web2 focused, but the methodology is gold for anyone building AI-assisted security workflows. The evidence-first, phase-by-phase structure is exactly how you avoid hallucinated findings and actually produce reliable results: github.com/mdpsec/bug-bounty…

Another audit report for @pear_protocol is live ❇️ We reviewed their PEAR → PEAR migration to HyperEVM: a one-way LayerZero bridge, rate-limited minting, staking migration with preserved timestamps, and the HyperCore spot listing. Read the full report 👇 github.com/shieldify-securit…

Hash-perfect decompilation of a Solana program is now a thing. @osec_io went from a 220KB .so blob to byte-identical Rust source for GoonFi V2, using agents scored on how closely each function matched the original bytecode. The bug they found once the code was readable? The AMM priced assets off its own vault balance. Donate tokens, skew the price, drain the other side. $6.1M at risk. If your program is live, assume your source is public. osec.io/blog/goonfi-decompil…