Feed

Re: Gnosis pay data leak and what you can do about it right now https://x.com/officer_secret/status/2118860726647276007

#privacy

🚨 WAX Bridge Exploited for ~$90.5K

The withdraw logic accepted negative fees, so the attacker set the fee to the withdrawal amount with a minus sign, and the system deducted nothing while still sending the full amount.

Repeating the trick drained the WAX Multi-Chain Bridge across multiple chains.

🔗 Details

The Contagious Interview: A Sophisticated Hacking Vector Reshaping Web3 Recruitment Risks

Link: https://medium.com/coinmonks/the-contagious-interview-a-sophisticated-hacking-vector-reshaping-web3-recruitment-risks-89a860216f4d

TLDR: hackers used fake job interview to socially engineer employee, then exploited internal wallet signing service.

Engineer A hit by tampered homebrew install, engineer B by fake interview. Binance says attacker used AI tool on engineer B’s pc to reach engineer A. Engineer A’s stolen deploy token used to launch wallet attack.

DO NOT EVER USE YOUR MAIN PC FOR JOB INTERVIEWS!!!

• https://x.com/officer_secret/status/2117632023720313314

#scam #investigation #hack

Looks like an old scam has become popular again so be careful: https://x.com/officer_secret/status/2117583825832161774

#scam

It looks like ChangeHero is being used for laundering Binance funds: https://x.com/officer_secret/status/2116187104631775369

#security #investigation

You track it live here: https://x.com/officer_secret/status/2115956461369278719

#security #alert

Account has been banned ❌
0x5227f603c1ee34ce3c06efe6477003bdfccb2f8c
Status: Executed 🔴
Time: 29.10.2026, 21:01:35 UTC
Frozen: 971,149,299.48 USDT (ERC20)
Detected: 29.10.2026, 20:59:11 UTC
Alert Balance: 971,149,299.48 USDT
Window: 2min 24sec
Rescued: -971,149,299.48 USDT

Consider this a hack confirmation: https://x.com/officer_secret/status/2115910764502667520

#security #alert

Polymarket UI compromised, so not interact for now: https://x.com/officer_secret/status/2115868911451128222

#security #alert

Yet another reminder, do not click random links in telegram!

One single click can permanently cost you your Telegram account. A dangerous link is currently circulating in chats - tapping it can lead to an instant ban for spam.

How it works: After you click the link, a pre-written message is automatically sent from your account. Telegram can treat this as spam and block your account.

• https://x.com/officer_secret/status/2114065838495969478

#telegram #security

Documenting yet another scam: https://x.com/officer_secret/status/2110069215327912091?s=46

#security #investigation

How We Claimed a Pre-Bedrock Optimism Withdrawal

• https://x.com/officer_secret/status/2109077519198462370?s=46

#development

Upgrade to 7.2.9 or later. That is the only thing that actually closes the problem. The rest reduces exposure.

• Turn on “ask where to save each file”. With that setting, automatic download does not happen at all, and the instruction file never reaches the disk. It is the most effective mitigation short of upgrading.

• Limit who can add you to groups to your contacts only. Stolen files can only be sent to a channel or a supergroup, so this takes away the place the attacker would have them delivered to.

• Set a local passcode, and choose it like a real password. It does not prevent the files from being stolen; it only makes the stolen session unusable.

• Disable automatic download:

1. Open Telegram Desktop and click the three horizontal lines (menu icon) in the top-left corner.
2. Click on Settings.
3. Select Advanced.
4. Scroll down to the Automatic Media Download section.
5. Choose the chat types to manage (Private Chats, Groups, and Channels) and toggle off photos, videos, and files as desired.

• https://x.com/officer_secret/status/2108713090783076373?s=46

#telegram #security #alert

Strongly recommend updating telegram desktop if you are using it https://x.com/officer_secret/status/2108608962614423785?s=46

#security #alert