Community

Contribute by sharing insights and tips to strengthen the community.

All203
search
homageeth
homageeth

July 16, 2025

General Discussion
#giveaway #Airdrop #Pool #Sol #Solana #BnB #USDT

#giveaway #Airdrop #Pool #Sol #Solana #BnB #USDT ๐Ÿ† Prize Pool 1000 $TRN๐Ÿ”˜ Open Distribution link๐Ÿ”˜ https://wn.nr/pj6nFHm๐Ÿ”˜ Join our Telegram Channel๐Ÿ”˜ Join our Telegram Group๐Ÿ”˜ Follow our Twitter page & Retweet pinned post๐Ÿ”˜ Send your address BNB/Ber-20 Wallet๐Ÿ”˜ Done3435

1 likesใƒป16 reads
UppSecEcho
UppSecEcho

July 16, 2025

Blockchain Insights
๐Ÿ’ฅ Arcadia Finance Exploited: $3.5M Stolen in Rebalancer Contract Hack

On July 15, 2025, Arcadia Finance became the latest DeFi project to fall victim to a smart contract exploit, resulting in the loss of $3.5 million in user funds. Hereโ€™s what happened, how the attacker executed the hack, and what it means for the DeFi space going forward.๐Ÿšจ What Happened?In the early hours of July 15, an attacker exploited a critical vulnerability in Arcadia Financeโ€™s Rebalancer contract, a tool that allows users to manage asset allocations across their portfolio.Within minutes, the attacker drained approximately $2.5 million in stablecoins and other assets from Arcadiaโ€™s Base protocol vaults. Shortly after, a second attack followed, stealing an additional $1 million, bringing the total losses to over $3.5 million.๐Ÿง  How the Exploit WorkedThe exploit originated from a flaw in the swapData parameter of the Rebalancer contract.The attacker passed arbitrary and malicious data into swapData.This allowed the attacker to bypass validation checks and trigger unauthorized fund movements.A custom malicious contract executed the swap, draining user vaults in under one minute.๐Ÿฆน Attacker Wallets & Fund MovementsThe key wallet involved in the exploit:0x0fa54E967a9CC5DF2af38BAbC376c91a29878615Image 1 Source from EtherscanFunds were bridged from Base Mainnet to ETH MainnetAs of today, ETH remains at this wallet and no further movement initiated. โœ… Final ThoughtsThe Arcadia hack underscores a painful truth: DeFi remains vulnerable without robust testing, on-chain monitoring, and swift incident response. As attackers grow more sophisticated, protocols must prioritize security as a feature, not an afterthought.Stay safe. Revoke unnecessary permissions. And keep your eyes on the chain.

๐Ÿ’ฅ Arcadia Finance Exploited: $3.5M Stolen in Rebalancer Contract Hack
0 likesใƒป27 reads
salaryman
salaryman

July 15, 2025

General Discussion
A lovely chainbounty arrived

it's been while since i can't login talken app, when i saw there has some lovely chainbounty in my wallet. Pretty cool keep it up!

2 likesใƒป24 reads
Nomnom
Nomnom

July 09, 2025

General Discussion
Wonderfull

What is join chainbounty and earn reward

1 likesใƒป31 reads
UppSecEcho
UppSecEcho

July 09, 2025

Cybersecurity Tips
๐Ÿšจ A Silent Heist: Fake Crypto Wallets Flood Firefox Add-Ons Store

The crypto world just got hit with another stealthy threatโ€”this time targeting unsuspecting Firefox users through malicious wallet extensions.More than 40 fake Firefox extensions mimicking popular crypto wallets have been discovered since April 2025. These fraudulent add-ons, found directly on the Firefox Add-ons store, arenโ€™t just phishing scams, theyโ€™re sophisticated clones capable of stealing private keys and draining entire wallets.๐Ÿ” The Deception: Looks Real, Acts EvilThe attackers didnโ€™t build these fake extensions from scratch. Instead, they forked open-source code from legitimate wallets, like MetaMask, Phantom, Trust Wallet, OKX, Bitget, and Coinbase Wallet, and injected malicious scripts designed to silently steal user data.To make things worse, the extensions:โ€ข Used identical names and logosโ€ข Were stuffed with fake 5-star reviewsโ€ข In some cases, were signed with valid Mozilla developer accountsThese wallet clones were nearly indistinguishable from the real thing. And once installed, they watched for one thing: your seed phrase.๐Ÿง  How the Attack WorksOnce a victim pastes a seed phrase or private key into the fake extension interface, itโ€™s game over.These fake extensions:โ€ข Monitor inputs over 30 characters (typical of seed phrases)โ€ข Immediately exfiltrate them to attacker-controlled serversโ€ข Also log the userโ€™s IP address, likely for geographic targeting๐Ÿ‡ท๐Ÿ‡บ Whoโ€™s Behind It?Investigators found Russian-language comments in the code and metadata tied to Russian-speaking actors, although attribution is not conclusive.The infrastructure behind the scam was impressively organized:โ€ข Hosting on bulletproof VPS providersโ€ข Constantly rotating domain namesโ€ข Multiple versions pushed across dozens of wallets and language localizationsThis wasnโ€™t a quick smash-and-grab. It was an industrial-scale operation.๐Ÿงฏ Mozillaโ€™s ResponseMozilla has begun purging these fake extensions, but new ones keep popping up. As of July 2025, many remain live on the Add-ons store, making this a whack-a-mole nightmare for security teams.Mozilla stated that it is:โ€ข Using automated scanning toolsโ€ข Relying on user reportsโ€ข Tightening vetting procedures for crypto-related extensionsBut clearly, more must be done.๐Ÿ›ก๏ธ What You Can Do NowIf you use Firefox for crypto-related activity, pause and reassess your security posture. Here's what I recommend:๐Ÿ” Action Why It MattersAvoid browser wallet extensions Especially on Firefox, until the dust settles. Use mobile apps or official websites.Install only from verified sources Check the publisher name and history. Don't trust reviews alone.Enable 2FA everywhere Adds a critical second layer to access.Use cold storage for large holdings If itโ€™s not online, it canโ€™t be drained.Report suspicious extensions Help Mozilla remove threats faster.๐Ÿงฐ Free Tool to Check for Scam WalletsAt scamhunter.ai, weโ€™re fighting crypto scams head-on. Uppsala Security offers a free tool to:โ€ข Scan suspicious wallet addressesโ€ข View scam reportsโ€ข Flag stolen assetsYou can try it free twice a day. Just paste in a wallet address and weโ€™ll show you what we know.๐Ÿšจ Final ThoughtsThis latest wave of wallet-cloning extensions on Firefox is a wake-up call for the crypto industry. Browser-based wallets are convenient, but they also open up new attack surfaces.As always in crypto, convenience must be balanced with paranoia. Double-check everything. Trust no extension blindly. And if youโ€™ve ever typed a seed phrase into an extension, you should migrate your funds now.The attackers are evolving. So must our defenses.Stay safe, stay skeptical.

1 likesใƒป41 reads
Nomnom
Nomnom

July 08, 2025

General Discussion
Chainbounty

Close or ongoing bounty point.

0 likesใƒป24 reads
jxsh3907
jxsh3907

July 08, 2025

General Discussion
์ฒด์ธ๋ฐ”์šดํ‹ฐ ์™œ ์ž…๊ธˆ ์•ˆ๋ผ์ฃ ?

CBP ๋ชจ์€๊ฑฐ ์ „ํ™˜ํ•˜์ง€ ํ•˜๋ฃจ๊ฐ€ ๋‹ค ๋˜์–ด๊ฐ€๋Š”๋ฐ์™œ ์•„์ง๋„ ์ง€๊ฐ‘์— ์ฒด์ธ๋ฐ”์šดํ‹ฐ ์ž…๊ธˆ ์•ˆ๋ผ์ฃ ?

์ฒด์ธ๋ฐ”์šดํ‹ฐ ์™œ ์ž…๊ธˆ ์•ˆ๋ผ์ฃ ?
1 likesใƒป78 reads
Firzapennn
Firzapennn

July 07, 2025

General Discussion
AMA ECLIPSE

๐Ÿ•บ [AMA] 10๋ถ„ ๋’ค : ํ•œ๊ตญ์— ์–ด์„œ์˜ค๋„ˆ๋ผ ECLIPSE- ์ผ์‹œ: ์˜ค๋Š˜๋ฐค 11์‹œ- ์žฅ์†Œ: ์ฝ”์ธ๊ฐ™์ดํˆฌ์ž ์ŠคํŽ˜์ด์Šค- ์†๋‹˜: Nate, CMO of Eclipse์ด์ œ ์ฒด์ปค๋„ ๋‚˜์˜ค๊ณ  ์žฌ๋‹จ๋„ ์„ค๋ฆฝํ•œ ์ดํด๋ฆฝ์Šค๊ฐ€ ๊ณง ํ•œ๊ตญ์„ ์˜จ๋‹ค๊ธธ๋ž˜ AMA ์Šค์ผ€์ฅด์„ ์žก์•˜์Šต๋‹ˆ๋‹ค. ์—ฌ๋Ÿฌ๊ฐ€์ง€ ๊ถ๊ธˆํ•ด ํ•  ์‚ฌ์•ˆ๋“ค๊ณผ ์ดํด๋ฆฝ์Šค๊ฐ€ ๊ทธ๋™์•ˆ ์–ด๋–ค ๊ฒƒ์„ ํ•ด์™”๋Š”์ง€์— ๋Œ€ํ•ด ๋ฌป๋Š” ์‹œ๊ฐ„์„ ๊ฐ€์งˆ ์˜ˆ์ •์ด๋‹ˆ ์ดํด๋ฆฝ์Šค ์›๋ น๋“ค์€ ๋งŽ์€ ์ฐธ์—ฌ ๋ถ€ํƒ๋“œ๋ฆฝ๋‹ˆ๋‹ค!๐Ÿ“‚ ์ด๋ฒคํŠธ: ์ŠคํŽ˜์ด์Šค ๊ณต์ง€ ์›๋ฌธ Like RT: ์ธ์ฆ์ƒท ๋ฐฉ์— ์ŠคํŽ˜์ด์Šค ์ฐธ์—ฌ ์ธ์ฆ์ƒท ์ œ์ถœ: ๊ตฌ๊ธ€ํผ ์ž‘์„ฑ์ƒํ’ˆ: ์ปคํ”ผ 100์ž” + ํ˜น์‹œ ๋ชจ๋ฅผ ์ŠคํŽ˜์…œ ๋ฆฌ์›Œ๋“œ๋‚˜์ค‘์— ๋งŒ๋‚˜์š”~

0 likesใƒป18 reads
Nomnom
Nomnom

July 06, 2025

Blockchain Insights
Btc

BTC up to $150000 or not

2 likesใƒป24 reads
jxsh3907
jxsh3907

July 06, 2025

General Discussion
ํ†กํฐ ์ฒด์ธ๋ฐ”์šดํ‹ฐ ๋ธŒ๋ฆฟ์ง€ ๊ตํ™˜ ์„ฑ๊ณต

์•„๋น„ํŠธ๋Ÿผ ์ด๋”๋ฆฌ์›€๋งŒ ์ถฉ๋ถ„ํžˆ๋ณด์œ ํ•˜๊ณ  ์žˆ์œผ๋ฉด ๋˜๋„ค์š”

ํ†กํฐ ์ฒด์ธ๋ฐ”์šดํ‹ฐ ๋ธŒ๋ฆฟ์ง€ ๊ตํ™˜ ์„ฑ๊ณต
2 likesใƒป37 reads