@pennysplayer 之前做paradigm ctf 2022的时候，vanity那题也是这样，不过题目要算的是0x1626ba7e(算了三个多小时，but python）。这里是0x00000000，那个人在petal合约部署之后的四小时就搞定了😲
中文
LEVI_104
70 posts
巧妙的ponzi hash游戏，稍微慢了2min，能躺着收米的000000邀请码被人抢先注册上了。曼巴out #code" target="_blank" rel="nofollow noopener">etherscan.io/address/0xe097…
中文
Clara is something I actually use in my daily life among numerous AI products. tbh although it may sometimes make mistakes in analysis(just for now), it still gives me a general description when an attack occurs which helps me a lot.
Liyi Zhou@lzhou1110
Nearly 300 incidents so far, including 26 in March alone, and we are only at the 18th of March. That is about 1.5 incidents per day on average, and the rate is still increasing. We are still backfilling data, and a more detailed analysis will come soon. This is a much improved version of my DeFi Attacks SoK (accepted by IEEE S&P, 320 citations), and I think I have surpassed my previous work. The scale of this is honestly quite stunning, and we believe @clara_oracle is highly useful for the entire community. Not entirely sure why Clara has not gained much much more attention yet (Clara only has 250 followers, even fewer than the number of citations I had for my academic paper), so any help in spreading this would be greatly appreciated (Retweet or spread within your network 🙏). Clara will collect more than 1000 incidents soon. Together, we are building a much safer DeFi for tomorrow. Clara will become one of the best security dataset for both academia and the industry. Clara: clarahacks.com DeFi attack SoK: arxiv.org/pdf/2208.13035
English
@lzhou1110 AI will be helpful if someone is gonna build WhereToMigrate ;D
English
The root cause of the @SynapLogic apears to be a business logic fault.
When purchasing the SYP token with ETH (or USDC), you can fill in the `address[] refBy` parameter with a list of addresses, each getting a certain percentage (10%) of the ETH/USDC user spend.
However, the attacker uses `refBy = [self, self, ...]`, setting himself as the refer 31 times (reference gets 31 * 10% = 310% of the total spending) to drain the purchasing contract. The total loss is around $88K.
---
It seems the contract has been already paused.
This is only my preliminary analysis and I may make mistakes.
English
It seems someone is building a honeypot for hackers.
15 ETH, does it look tempting? Who is the prey, who is the hunter?
Honeypot contract: #code" target="_blank" rel="nofollow noopener">etherscan.io/address/0x8326…
Actually Log contract: etherscan.io/address/0xa865…
English
thread 1) In October last year, when fourmeme was in full swing, I used my spare time to build a fourmeme sniper bot, which I am now open sourcing: github.com/chen4903/group…. It can still run stably, but whether it is profitable depends on your strategy and the market.
English
- Backend: github.com/chen4903/papri…
- Front-end: github.com/chen4903/papri…
English
thread 1) A simple tool, capable of comparing the similarity of Similar Contracts and guessing EVM contracts that are not open-source. paprika-evm.xyz
English
LEVI_104 retweetledi
🔓 99+% of Ethereum contracts are closed-source.
We built an LLM that decompiles their bytecode — and exposes what’s inside.
Readable. Auditable. Battle-tested.
Not a toy. Try it now 👉 evmdecompiler.com
📄 arxiv.org/abs/2506.19624
w/ @zaddyzaddy @lzhou1110 @dawnsongtweets @HatforceSec
#Ethereum #BSC #SmartContracts #LLM #MEV #DeFi
English
