marzelina.eth aka KahLess

1.4K posts

marzelina.eth aka KahLess banner
marzelina.eth aka KahLess

marzelina.eth aka KahLess

@Marzycha

Looking to the Future, I'm Passionate About Pushing the Boundaries of What's Possible in Tech 💥 Let's Create the Next Big Thing!

Katılım Ağustos 2021
1.3K Takip Edilen522 Takipçiler
marzelina.eth aka KahLess retweetledi
Kerberus
Kerberus@Kerberus·
🚨 MAJOR WEB3 ALERT: REVOKE ALL APPROVALS NOW! Revoke all approvals of assets (coins and NFTs) you value that you a) own, or b) plan to own (examples: it’s staked right now, someone will send it to you, you plan to buy it, etc.) Until there’s clarity on what’s happening, spend whatever gas is needed and safeguard ALL your assets.
foobar/@0xfoobar

looks like yet another exploit in the wild, 0x7E5433F02F4bf07C4f2a2D341C450E07d7531428 contract just stole 14 bored apes and 36 pudgy penguins

English
5
73
134
36.4K
marzelina.eth aka KahLess retweetledi
Kerberus
Kerberus@Kerberus·
EVERYTHING COMES TO AN END STEP 1: 🏖️ Take a 24-hour break from crypto, and the genuine version of the Ledger Connect Kit should be propagated. AFTER 24 HOURS ⬇️ STEP 2 Option 🅰️: (Desktop Chromium Browsers) Clear the cache of Web3 sites before interacting with them. Open the website you want to clear the cache for, and go into Chrome Developer Tools. CMD+Option+I on a Mac, and CTRL+Shift+I or F12 on Windows, Linux, and Chromebooks. Click the Refresh button next to the address bar (see image). Click Empty Cache and Hard Reload in the list of options, and you’re done. STEP 2 Option 🅱️: (Desktop Chromium Browsers) Clear your browser's cache. 1. Open Chrome 2. Click on the settings in the top right and go to “More Tools” 3. Click on “Clear Browsing Data” 4. The clear cache settings will pop up. 5. To clear your entire cache, select “All time” from the dropdown at the top and click the “Clear data” button.
Kerberus tweet media
Ledger@Ledger

FINAL TIMELINE AND UPDATE TO CUSTOMERS: 4:49pm CET: Ledger Connect Kit genuine version 1.1.8 is being propagated now automatically. We recommend waiting 24 hours until using the Ledger Connect Kit again. The investigation continues, here is the timeline of what we know about the exploit at this moment: - This morning CET, a former Ledger Employee fell victim to a phishing attack that gained access to their NPMJS account. - The attacker published a malicious version of the Ledger Connect Kit (affecting versions 1.1.5, 1.1.6, and 1.1.7). The malicious code used a rogue WalletConnect project to reroute funds to a hacker wallet. - Ledger’s technology and security teams were alerted and a fix was deployed within 40 minutes of Ledger becoming aware. The malicious file was live for around 5 hours, however we believe the window where funds were drained was limited to a period of less than two hours. - Ledger coordinated with @WalletConnect who quickly disabled the the rogue project. - The genuine and verified Ledger Connect Kit version 1.1.8 is now propagating and is safe to use. - For builders who are developing and interacting with the Ledger Connect Kit code: connect-kit development team on the NPM project are now read-only and can’t directly push the NPM package for safety reasons. - We have internally rotated the secrets to publish on Ledger’s GitHub. - Developers, please check again that you’re using the latest version, 1.1.8. - Ledger, along with @Walletconnect and our partners, have reported the bad actor’s wallet address. The address is now visible on @chainalysis. @tether has frozen the bad actor’s USDT. - We remind you to always Clear Sign with your Ledger. What you see on the Ledger screen is what you actually sign. If you still need to blind sign, use an additional Ledger mint wallet or parse your transaction manually. - We are actively talking with customers whose funds might have been affected, and working proactively to help those individuals at this time. - We are filing a complaint and working with law enforcement on the investigation to find the attacker. - We’re studying the exploit in order to avoid further attacks. We believe the attacker’s address where the funds were drained is here: 0x658729879fca881d9526480b82ae00efc54b5c2d Thank you to @WalletConnect, @Tether_io, @Chainalysis, @zachxbt, and the whole community that helped us and continue to help us identify and solve this attack. Security will always prevail with the help of the whole ecosystem.

English
11
108
234
31.4K
Ledger
Ledger@Ledger·
🚨We have identified and removed a malicious version of the Ledger Connect Kit. 🚨 A genuine version is being pushed to replace the malicious file now. Do not interact with any dApps for the moment. We will keep you informed as the situation evolves. Your Ledger device and Ledger Live were not compromised.
English
2K
5.8K
13.1K
5.3M
marzelina.eth aka KahLess retweetledi
Revoke.cash
Revoke.cash@RevokeCash·
⚠️⚠️⚠️⚠️⚠️⚠️ Warning: Multiple popular crypto applications that integrate with Ledger's ConnectKit library, including Revoke.cash have been compromised. We temporarily took the website offline as we're investigating further. We recommend not using *any* crypto website at all while this exploit is ongoing.
English
379
2.6K
4.5K
1.4M
marzelina.eth aka KahLess retweetledi
TFG
TFG@TFGmykL·
I joined the Creepz community last week and I must say this community is AMAZING!❤️ Just to shout out some👇 @juicetin - First person to put me on Creepz over a week ago @anidiot - i haven’t not seen this guy on a Creepz space over the last week and I’ve been on like 15 @chesus - Super knowledgeable but keeps it casual, learned a ton from him @barum_lucas - This dude is so funny, I can’t help but crack up at everything he says @kennypowerz - Been farming with him for a week and shared tips together As my time here goes on I’m sure I’ll meet even more of you. Looking forward to it, LFG 🙏🔥
TFG tweet media
Portal@Portalcoin

Portal is connecting all games on all chains, then bringing them to the mainstream. Our integrations with @Solana, @0xPolygon, @Avax, and @Klaytn are crucial steps to uniting Web3 gaming with a single cross-chain gaming platform. 🧵1/3

English
80
80
192
17.1K
Books
Books@Booksey·
There’s a project that the majority of this space has been overlooking for the last 2 years. It’s called @Overlord_xyz @Cbcreepz The founders are @jo3car @dom3xyz It is clearly linked with proof to @Portalcoin as its parent company Super Duper is responsible for development. The same people that built @apecoin are also involved. The community is the most supportive I have seen to date, they are responsible for most of my growth on this app in the last 2 years. If you go on portal coins website and type a code on the main screen that I’ve shared in previous tweet, The Overlord Creep pops up. However, the biggest influencers, founders and accounts in this space have pretended this project doesn’t exist. Well that’s too bad because I’m here to spread that word and I won’t give up. I’m extremely bullish & will continue pushing this project until EVERYONE IS TALKING ABOUT IT
Books tweet media
English
118
136
318
33.9K