Daniel Tan

422 posts

Daniel Tan banner
Daniel Tan

Daniel Tan

@DanielSlothx

Security engineer @CertiK | on-chain hack analysis | Saved $200K tokens from a CEX hack

Blockchain Katılım Şubat 2010
572 Takip Edilen200 Takipçiler
Daniel Tan
Daniel Tan@DanielSlothx·
#KelpDAO has paused rsETH contracts across mainnet and several L2s. x.com/KelpDAO/status…
Kelp@KelpDAO

Earlier today we identified suspicious cross-chain activity involving rsETH. We have paused rsETH contracts across mainnet and several L2s while we investigate. We are working with @LayerZero_Core, @unichain, our auditors and top security experts on RCA. We will keep you posted as we learn more about this situation. Please follow only the official @KelpDAO handle for the updates.

English
0
0
0
85
Daniel Tan
Daniel Tan@DanielSlothx·
#ZKVerifierBug on March 10th, the @CertiK Sr. Staff Security Engineer, #XifengJin, will dive into the ZK verifier attack patterns targeting DSL circuits, zkVMs, and proving systems with practical mitigation insights, in the X Space. #CertiK #ZKVM #DSLCircuit #Audit
Daniel Tan tweet media
CertiK@CertiK

As ZK adoption accelerates, verifier-side security is increasingly critical. In this X Space, CertiK Sr. Staff Security Engineer Xifeng Jin examines attack patterns targeting DSL circuits, zkVMs, and proving systems with practical mitigation insights. Set a reminder below👇

English
1
0
0
240
Daniel Tan
Daniel Tan@DanielSlothx·
#TruebitProtocol exploit. The root cause of this $26M hack was that the price calculation #overflow and was manipulated. In the vulnerable smart contract, the SafeMath library is not used, and the Solidity version 0.8.0 or higher is also not used.
Daniel Tan tweet media
CertiK Alert@CertiKAlert

#CertiKInsight 🚨 On 8 January 2026, @Truebitprotocol was exploited due to an overflow issue, resulting in a loss of ~$26.6M. To learn more about what happened, read our full analysis here 👇 certik.com/resources/blog…

English
0
0
0
328
Daniel Tan
Daniel Tan@DanielSlothx·
🔟GMX Reentrancy $42M Exploit On Jul 15, 2025, #GMX V1 lost $42M to a reentrancy attack. Ironically, the vulnerability was introduced by the team's own 2022 bug fix, which lacked proper audit. The hacker exploited a time gap in price updates. Most funds were later returned.
English
1
0
0
176
Daniel Tan
Daniel Tan@DanielSlothx·
#Top10HacksIn2025 1⃣Bybit Supply Chain $1.46B Attack On Feb 21, 2025, #Bybit suffered the largest single hack in web3 history, losing $1.46B, due to the North Korean #LazarusGroup executing a supply chain attack, compromising a Safe Wallet developer's machine.
CertiK@CertiK

You’ve read the stats. Now see the scale. This video from the 2025 Skynet Hack3d Report brings Web3’s most critical security data into focus. Watch the key trends that defined the year.

English
1
0
1
391