Sep 1 On 1 Sept 2022, @KyberNetwork faced a breach, compromising UI due to an ex-employee’s compromised Cloudflare account. Attackers …
-
-
Crypto Hacks & ExploitsNFTWeb3 Security
API Exploits: A Common Attack in NFT Marketplaces
by ImmuneBytesby ImmuneBytesOverview In the context of NFTs, an API is defined as a set of rules and protocols that allow software …
-
CryptoCrypto Hacks & ExploitsNFTWeb3 Security
Token ID Spoofing Attack on NFTs
by ImmuneBytesby ImmuneBytesIntroduction Non-fungible tokens (NFTs) have exploded in popularity, offering unique digital ownership on blockchain platforms. While NFTs introduce a revolutionary …
-
Smart Contract AuditWeb3 Security
Zero-Value Token Transfer Phishing Attack
by ImmuneBytesby ImmuneBytesIntroduction In the evolving landscape of blockchain and cryptocurrency, new attack vectors and scams continue to emerge, targeting unaware users. …
-
BlockchainSmart Contract AuditWeb3 Security
DoS with Unexpected Revert
by ImmuneBytesby ImmuneBytesIntroduction Denial of Service (DoS) attacks are not just limited to conventional web servers; they can also be executed against …
-
Smart Contract AuditWeb3 Security
Time-Dependent Function Manipulation in Solidity Smart Contracts
by ImmuneBytesby ImmuneBytesThe Vulnerability Smart contracts on Ethereum often have time-sensitive logic, whether it’s for auctions, lotteries, or token vesting. These time-sensitive …
-
Overview Time jacking exploits a theoretical vulnerability in Bitcoin timestamp handling. During a time-jacking attack, a hacker alters the network …
-
Smart Contract AuditWeb3 Security
Arithmetic Issues in Solidity Smart Contracts
by ImmuneBytesby ImmuneBytesIntroduction Arithmetic issues, specifically integer overflow and underflow, are common vulnerabilities in Solidity smart contracts. These issues occur when unsigned …
-
Smart Contract AuditWeb3 Security
Self-Destruct Exploit: Forced Ether Injection in Solidity Contracts
by ImmuneBytesby ImmuneBytesIntroduction The selfdestruct function in Solidity provides a mechanism for contract termination and balance transfer, but it comes with inherent …
-
Smart Contract AuditWeb3 Security
Bad Randomness in Solidity Smart Contracts
by ImmuneBytesby ImmuneBytesIntroduction Bad randomness, often referred to as the “nothing is secret” attack, is a vulnerability in Solidity smart contracts deployed …