SCV Security (@SCVSecurity) header
SCV Security (@SCVSecurity) profile picture

Trusted security firm providing services for projects built on Cosmos and CosmWasm. DMs are open!

mempool
Joined December 2021
Photo by SCV Security (@SCVSecurity)Photo by SCV Security (@SCVSecurity)Photo by SCV Security (@SCVSecurity)Photo by SCV Security (@SCVSecurity)Photo by SCV Security (@SCVSecurity)Photo by SCV Security (@SCVSecurity)Photo by SCV Security (@SCVSecurity)Photo by SCV Security (@SCVSecurity)Photo by SCV Security (@SCVSecurity)Photo by SCV Security (@SCVSecurity)
SCV Security retweeted
We have received reports of unauthorized transactions on some Keplr accounts created with Google or Apple login. We flagged this to the @Web3Auth team and have been working with them on the investigation since. Based on our initial assessment: if you created your Keplr wallet with a recovery phrase or a hardware wallet, you are NOT affected. If you created your Keplr account with Google or Apple login, your account may be affected. While we investigate: – Do not send new funds to that account. – Do not re-import or recreate it anywhere. – Google/Apple login is paused for now. – Trust updates only from this account. Ignore DMs or links offering “recovery”. We will share verified details and next steps here as soon as we have them.
We’re aware of a security issue affecting Web3Auth’s services used by some third parties. We have temporarily paused the embedded wallet service. After an initial investigation, we’ve found no evidence that MetaMask users are impacted.
268
229
216
653
280,145
SCV Security retweeted
We look forward to working closely with the teams at @CanaryFunds and @NasdaqExchange to bring the most innovative onchain financial infrastructure to the world. A major milestone in our journey towards mass adoption begins today with $INJC: the first official Staked $INJ ETF.
Bridging digital asset innovation and investor access. $INJC marks a milestone as the first U.S. ETF offering spot exposure to Injective $INJ alongside staking rewards. Congratulations to @CanaryFunds and @injective. #NasdaqListed
26
77
12
452
16,677
Do not wait and rotate wallets now! More to follow, Stay Connected! /end
1
1
2
726
Timeline: ⏲️ 👉 Aug 2019: weak seed generation ships in Station Desktop (remote frontend: every desktop install used it) 👉 Sep 12-29 2026: ~400 wallets compromised, ~8.28M LUNA /5
1
1
822
Creation date does not shrink the space. The PRNG is seeded from Math.random(), not the clock - verified against the shipped crypto-js source and V8 behavior. Every wallet from the window sits in the same ~2^47 space, forever. Updating the app never fixed existing seeds. /4
1
2
872
Keyspace: a 24-word phrase should carry 2^256 entropy. This path carries ~2^47. We reimplemented the exact shipped crypto-js code: the full 32-byte entropy is determined by a 32-bit seed + 16 sign bits. 1.4 quadrillion candidates - enumerable on commodity compute at scale. /3
1
2
999
What was vulnerable: Station Desktop (the 2019-2021 Electron wallet) generated BIP39 seed entropy with crypto-js 3.x WordArray.random() - a PRNG, not a secure RNG. Same class as Coinspect's 'Ill Bloom' (CVE-2026-71851). github.com/advisories/GHSA-r… /2
2
2
1
6
1,451
🚨 If you created a wallet in @terra_money Terra Station DESKTOP between Aug 2019 and Sep 4 2020, assume your seed phrase is compromised 🫥 Move funds to a NEW wallet now! 🧵 below! /1
8
19
4
82
12,127
I applied to become a $RUNNER. 333 spots. @runupdotfun Your move. ↗ runup.fun/whitelist
173
SCV Security retweeted
OFFICIAL STATEMENT FROM INJECTIVE Yesterday, Injective contributors coordinated an accelerated network upgrade that took longer than initially expected to complete across all validators and ecosystem infrastructure. The Injective blockchain and INJ remained secure throughout the process. The underlying protocol and consensus were not compromised, user and staked funds remain safe, and the chain continued processing transactions. Given the accelerated nature of the upgrade, some validators were temporarily jailed after being unable to upgrade within the required window, resulting in a temporary decline in displayed network stake. Some exchanges also temporarily disabled deposits and withdrawals while updating their nodes. No staked injective-protocol:native were lost or at risk, and we are working directly with validators and exchanges as they complete the upgrade process. The accelerated upgrade followed an exploit affecting a small number of ecosystem applications operating binary options markets. The incident was isolated to those applications and did not exploit the Injective blockchain, protocol, native assets or consensus. The relevant attack vector has since been contained and patched. Reports characterizing this as an exploit or halt of the Injective blockchain are inaccurate. The chain was upgraded, not halted, and the underlying network remained secure throughout. We are now implementing enhanced invariants, real-time monitoring systems and additional safeguards designed to identify anomalous activity earlier and help prevent similar incidents. As attack techniques become increasingly sophisticated, including through advances in AI, Injective will work closely with ecosystem developers to continually raise security standards across the network. Injective continues to operate at scale, processing billions of transactions, onboarding thousands of new onchain users and supporting billions of dollars in tokenized asset activity. That positive trajectory will only accelerate moving forward. Injective is secure, fully operational and more resilient than ever. We will continue raising the bar for security across both the protocol and the broader ecosystem. The best days for Injective are ahead. Onwards and upwards.
116
146
50
796
98,284
SCV Security retweeted
Replying to @AirdropGlideApp
We’re fine, Injective users aren’t affected and we’ve been helping the team on recovery. Always sad to see exploits happening in the ecosystem but we’re glad that the incident was contained before further harm was done.
11
22
101
3,431
SCV Security retweeted
🚨 BREAKING: Injective is now an official SEC-registered transfer agent! With this move, Injective becomes the first layer 1 blockchain to possess the RWA infrastructure and regulatory readiness needed to accelerate tokenization to new heights. Injective has rapidly expanded its tokenization efforts in recent months. Markets for digital asset treasuries, equities, and shares in pre-IPO companies such as SpaceX and OpenAI have also launched on Injective. In July, Injective expanded into enterprise trade finance. POSCO International, South Korea’s largest trading company, and LG CNS, the technology arm of LG Group, selected Injective for an exclusive live pilot that issues, transfers, administers, and settles trade receivables generated through international commerce. Institutional funds. Public equities. Private company shares. Enterprise receivables. Four different asset classes. One network. All live. The transfer agent registration now sits beneath them as the regulated recordkeeping layer that American markets require. The full stack for onchain capital markets is here. Only on Injective.
147
467
126
1,469
155,970
Strong networks are built through consistent participation. We're proud to help secure the Terra network and support its long-term growth. Thank you to everyone staking $LUNA with us.
7
10
2
38
6,580
SCV Security retweeted
Injective and Microsoft have teamed up to launch the biggest developer program in Asia that seeks to onboard new builders creating novel products in the intersection of crypto and AI 🛠️
7
52
6
331
11,407
We wish you an amazing 2026! Happy new year!
2
5
229
Dear $INJ community and ninjas! We are running a Rebates Program trial available at injective.scvsecurity.io When you stake with the SCV-Security validator (5% commission), you can earn 1–2% back in rebates. This means your effective commission will be lower to only 3–4% increasing your staking rewards! Rebates are paid directly delegators once a week, and you can join by enrolling on the website or adding a memo when staking with SCV-Security. More details: injective.scvsecurity.io Validator profile: injhub.com/validators/injval…
3
36
2,211
📢 ATTENTION 📢 To all @injective ninjas 🥷 community, please delegate or redelegate your $INJ to SCV-Security validator and receive 100% rebates (no commission) for 2 months! Best performing validator with an unbeatable uptime 🤯 👉 Campaign running between May 27 - July 27th!
1
3
8
1,412
🌟 SCV-Security is proud to help grow the @injective 🥷 community! We are thrilled to be part of the Validator Rebate Campaign !! ✅ One of the best uptimes in the set ✅ Zero commission from May 27 – July 27 ✅ Backed by white-hat security & bare-metal infra ✅ Slashing protection Join our Validator Rebate Campaign from May 27 to July 27 for zero commission on new stakes. Delegate it now! hub.injective.network/valida… Let’s secure Injective together! #SCVSecurity
Attention: $INJ Stakers 🚨 The Injective Validator Rebate Campaign launches today! The campaign is a strategic initiative that incentivizes delegators with rebates on their staked $INJ via validators who have consistently demonstrated their commitment to the Injective ecosystem. 💡Details: For the next 2 months, (May 27–July 27), new delegations to the participating validators can expect commission rebates for new delegations made during the campaign period. Participating Validators: - @zellic_io - @informalinc - @SCVSecurity - @Kiln_finance These validators have shown strength in technical infrastructure, governance, and expanding the developer ecosystem on Injective. To be considered for the rebate, delegators must fall into one of the following categories: 1. New Delegators: Stake $INJ with any participating validator between May 27-July 27, 2025 to receive commission rebates. 2. Existing Delegators: Add to your current stake with these validators during the campaign period—only new increments qualify for rebates. Join the campaign today through the Injective Hub and help secure the network and maximize your validator rewards!
3
1
26
1,279
We are proud to announce that Streamweave has now passed its security audit with @SCVSecurity and is now live on mainnet on Terra! Next up we'll begin rolling out our #airdrop points calculations for testnet and mainnet participants. 🪂
2
4
21
1,756