Rohith kumar

this is so f*cking scary - a txn made 9 months ago to transfer just $5 ended up causing a $30K loss. TLDR: → a txn was approved 9 months ago → to interact with the ThirdWeb Universal Bridge → Infinite approval was given (just for a $5 transfer) → a vulnerability in the contract was discovered in April → but the contract remained active onchain, including the blog referencing the affected contract address → vulnerability allowed anyone to drain funds from users with infinite approval → the hacker waited 9 months for the user to deposit a substantial amount → And boom - $30K gone in a single txn → funds were sent to Railgun, so can’t be traced → thirdWeb permanently disabled the legacy affected contract after the hack was disclosed → the blog referencing the affected (now-disabled) contract address is still live I don’t even know whom to blame here. It’s honestly a shame that after all these years of building, crypto users still have to deal with stuff like this and this user is literally one of the smartest people in the industry.

As Dev pov : All you had to do was add one line post-vuln discovery: trigger a revoke by calling 'approve(delegatedAddress, 0)' Boom – allowances zeroed out before hackers pounce

Nobody had the guts. Well, we did. Let’s reclaim your dead bags! Kaching! Early Access is LIVE! And your first ticket is FREE. 🎫 Grab your first $100,000 stash! 💰 Here’s how: 1️⃣ Connect your wallet 2️⃣ Grab a ticket to enter the draw [Use your bonus CHINGS to get your first FREE ticket!] 3️⃣ Pray to your crypto gods 🙏 4️⃣ Scream “KACHINGGGG!” when you win Hurry! First draw has begun! Join here 👇

GM Xyra fam, what are we trading today? 👀