Sabitlenmiş Tweet
feeling grateful for the recognition 🙏
we’re working on more specialized and more focused ways to secure onchain interactions
onwards 🚀
English
OKcontract Labs | Chainwall Protocol
626 posts
OKcontract Labs | Chainwall Protocol
@okcontract
Making onchain flows and vaults more secure 📖 https://t.co/ZnDJGnKeiH
Katılım Aralık 2020
30 Takip Edilen1.6K Takipçiler
🥷 The attack surface has moved to vault infrastructure
The $6M Summer.fi hack exposed vault NAV accounting and strategy adapter risk
💡 One possible solution:
local vaults should not treat passive adapter balances as always-valid NAV components.
Replace passive adapters with policy-gated execution.
Read our analysis: @okcontract/summer-fi-hack-the-attack-surface-has-moved-to-vault-infrastructure-9f27fa62763b" target="_blank" rel="nofollow noopener">medium.com/@okcontract/su…
The Block@TheBlockCo
THE BLOCK: Summerfi says the $6M exploit came from manipulating the NAV/share price of two USDC vaults — not from hacked keys. The attacker prepped for at least 3 months. The Lazy Summer DAO will now discuss next steps, including user compensation.
English
A manipulable ERC-4626 exchange rate was accepted as collateral pricing, giving an attacker the ability to inflate collateral value and drain the lending market.
Read the full analysis and how it could have been prevented:
@okcontract/can-erc-4626-exploits-be-prevented-b8e56e2af7c8?postPublishedType=repub" target="_blank" rel="nofollow noopener">medium.com/@okcontract/ca…
Defimon Alerts@DefimonAlerts
🚨 @edeldotfinance - Loss ~$403K (2026-07-01) Network: Ethereum Type: Oracle Manipulation (ERC-4626 exchange-rate) Edel Finance is an Aave-fork lending market that accepts wrapped xStock tokens (e.g. wGOOGLx) as collateral. Its price oracle for wGOOGLx derives the collateral value from the wrapper's ERC-4626 share-to-asset rate (convertToAssets = underlying balance / totalSupply), which is manipulable. The attacker flash-loaned 180K USDC and ran a 41x supply/borrow loop that skewed the vault's share ratio, inflating the reported wGOOGLx price (now ~$28k vs ~$180 real). With hugely over-valued collateral, they borrowed out the pool's assets — 204K USDC plus tokenized stocks wSPYx/wQQQx/wMSTRx/wNVDAx/wTSLAx — netting ~$403K and draining most of the ~$602K pool TVL. TX: etherscan.io/tx/0xe2320086b… Attacker: etherscan.io/address/0x5842… Victim: etherscan.io/address/0x3eee… t.me/defimon_subscr…
English
Attackers have moved past smart contracts.
The soft targets now are frontends, cloud, and developer machines, the layer between what a user intends and what gets signed, and attacks will become more sophisticated with the rise of AI.
@OKcontract co-founder and CEO @hbbiok was on @NFTmorning on Friday, digging in French into the most common attack vectors in our industry in 2026.
The podcast breaks down where wallet risk really lives, and how #Chainwall protects self-custody with no central point of failure.
NFT MORNING is back! ☕👾@NFTmorning
NFT Morning 944 | Cybersécurité & protection des cryptoassets avec Henri d'OKcontract x.com/i/broadcasts/1…
English
OKcontract Labs | Chainwall Protocol retweetledi
NFT Morning 944 | Cybersécurité & protection des cryptoassets avec Henri d'OKcontract x.com/i/broadcasts/1…
Français
People worry about signing transactions.
Over the past week and a half, our team was on the road:
🔹first at @proofoftalk in Paris, meeting with institutions shaping the next phase of digital asset adoption
🔹then at the @waibsummit in Monaco our co-founder @hbbiok joined a panel on risk management.
The discussion kept returning to a central theme:
Securing keys is necessary, but far from sufficient. The next frontier is securing what a signed transaction actually does.
That is the problem Chainwall is building for.
English
🎟️ Ticket: app.moongate.id/e/waibsummitmo…
English
Attending @waibsummit 🇲🇨 today?
When digital assets enter institutional strategies, risk management becomes central to how capital moves confidently into the space.
🎤 Our cofounder @hbbiok will moderate a panel on Risk Management for Digital Assets, bringing together leaders across security, custody, legal structuring, operations, and market exposure.
📅 June 9, 2026
🕰️ 12:00 PM – 12:40 PM
Panelists:
Mitchell Amador, @immunefi
Dominic Longman, @ZodiaCustody
Pascal Tallarida, @Jarvis_Network
Rob D., AlphapartyCapital
Alina Maria Serban, Serban & Serban Law Firm
English
We’re heading to @proofoftalk in Paris!
Our team will be on the ground, meeting builders, partners, investors, and teams shaping what’s next.
If you’re attending, let’s connect.
Great time to catch up, swap ideas, and talk about where the market is moving.
Proof of Talk@proofoftalk
2024: Sold out. 2025: Sold out. 2,500 leaders representing $18T in AUM don't gather by accident. They come because the room matters as much as the stage. June 2 & 3, 2026. Louvre Palace, Paris. Passes are now live. This is your window. tickets.proofoftalk.io
English
We’re excited to share that our cofounder @hbbiok will be speaking at WAIB Summit Monaco 2026 — the world’s most exclusive summit for #Web3, #AI, and #Digital Assets.
Meet our team @waibsummit in Monaco !
📅 June 9–10, 2026
📍One Monte-Carlo
English
Our takeaways:
👉
@okcontract/valid-signatures-are-not-enough-ad9b7c48257b" target="_blank" rel="nofollow noopener">medium.com/@okcontract/va…
English
Last month was one of the worst months crypto for security losses:
40 major hacks totaling about $647M in losses were reported by @PeckShieldAlert
If we had to sum up what happened in one sentence:
Valid signatures are not enough.
A transaction can be signed by the right key, routed through the right contract, or approved by the right governance module, and still be the wrong transaction.
Attackers exploited gaps in governance compromise, cross-chain verification failures, oracle or routing manipulation, and privileged-key theft.
English
OKcontract Labs | Chainwall Protocol retweetledi
Proud to be an ETHSecurity Badge holder!
The current quadratic funding round closes in 2 days, and anyone can help decide what gets funded
Browse the projects, back the work you think matters, and signal where more support should go:
qf.giveth.io
thedao.fund@thedaofund
@bl4ckb1rd71 @simonmasson2 @wavey0x @Toki_Ell @0x310f1sh @adria0 @adrianhetman @hbbiok Dominic Brütsch @eternauta1337 @p0wn4j @code2042 @simon_perriard @DrasticWM @josepbove @vali_dyor @0xEV_om @bernd_eth @martinetlee @nxt3d @ma1fan @drdr_zz @KrlsMata @kelsiemvn @rappie_eth
English
OKcontract Labs | Chainwall Protocol retweetledi
OKcontract Labs | Chainwall Protocol retweetledi
👉 @okcontract/cryptos-biggest-security-failures-in-early-2026-weren-t-smart-contract-hacks-0eebff733e0a" target="_blank" rel="nofollow noopener">medium.com/@okcontract/cr…
QME
Early 2026 crypto attacks weren’t just about smart-contract bugs.
The biggest failures came from compromised permissions, social engineering, fragile price feeds, and broken release pipelines.
Our team unpacked the patterns behind the biggest incidents
English
OKcontract Labs | Chainwall Protocol retweetledi
Thanks for fighting for this
I know a good decentralized protocol launching soon that will benefit from this… @okcontract
Hayden Adams 🦄@haydenzadams
🦄 Uniswap wins another case that sets a new legal prescendent TLDR: If you write open source smart contract code, and the code is used by scammers, the scammers are liable, not the open source devs Good, sensible outcome
English
building on top of the blockchain that Just Works
Ethereum@ethereum
After 10 years of 100% Ethereum uptime, we're excited for 11.
English