
Hex
3.4K posts

Hex
@hexinshalla
hunting repos & trading perps | @creamdotrun




We're aware of a Tweet identifying a potential bug in the Pons frontend regarding token approvals when trading, but can confirm there are no Multicall3 functions on the Pons launchpad frontend where trades take place. The Multicall3 function from the Tweet is referring to our legacy bridge to Debank chain, which came before the Pons launchpad and does not effect launchpad users. As of right now, 0.60 NOXA tokens were impacted worth roughly $0.66 USD. As a precaution, those who used the legacy bridge should revoke token approvals using revoke.cash while we investigate any potential cases of affected users. We are working with auditors to ensure there are no real exploits, and will be resuming the Pons frontend shortly.



Hey @ponsdotfamily, quick heads up on an Exploit in your platform, this needs to be addressed immediately as your users are being drained in real time When users trade on your platform, they're approving their tokens to Multicall3 instead of a dedicated DEX contract Multicall3 is a public contract. anyone can call it with arbitrary calldata. that means between swaps, anyone can construct a transaction that drains every wallet that approved tokens to that address Every user who has traded through your frontend and approved tokens to Multicall3 is currently at risk. their approved balances can be taken by anyone who builds the right calldata This isn't theoretical, this is an open exploit waiting to happen. every wallet with an active approval is vulnerable right now • users: if you've traded on pons, revoke your approvals to Multicall3 immediately. use revoke.cash or etherscan's token approval checker • pons team: please fix the approval flow to route through a dedicated contract, not a public multicall. and alert your users to revoke existing approvals This isn't fud. this is a critical security issue

Built a nice little website for @Pumpfun hackaton projects: ikaxbt.com/pumpfun-hackat… Can check: - Live Price/MC + Cumulative MC over time - MC share donut: who dominates, and how each coin's slice moved - Share evolution, how dominance shifted day by day - Basket vs each token, if you put $100 in every coin, the white line is your equal-weight basket; each token's line shows whether it out- or under-performs it - Click any row to expand its live Dexscreener chart + the founder interview on @MCGlive Working on something similar but for all AI coins





this is insane in just over 24 hours, @ponsdotfamily has become the #1 launchpad that you can actively launch tokens on, on robinhood very easy to see where this goes two words: infinity flywheel higher for $pons, higher for tokens launched on pons.

Markets are volatile? Not a problem for cream vaults following smart money

Pushed a few more updates just now. Optimizing speed, and making sure things are stable. If you are running into issues pls lmk I check all parts of my DMs lol







