unSafe.sh - 不安全
我的收藏
今日热榜
公众号文章
导航
Github CVE
Github Tools
编码/解码
文件传输
Twitter Bot
Telegram Bot
Search
Rss
黑夜模式
SQ Token Staking Drain via Hardcoded Owner Backdoor
2026-05-12 · Loss: ~346,137.03 USDT (~$346.1K) · Access ControlOn May 12, 2026 at 10:11:11 UTC, the...
2026-5-12 00:0:17 | 阅读: 12 |
收藏
|
0day Fans - www.darknavy.org
sqi
attacker
staking
usdt
unstake
BoostHook Leveraged Long Drain via Spot-Priced `openLong()` and Capped Same-Block Liquidations
2026-05-12 · Loss: ~20.9329 WETH profit; 38.3274 ETH realized bad debt · Price ManipulationBoostHook...
2026-5-12 00:0:17 | 阅读: 12 |
收藏
|
0day Fans - www.darknavy.org
attacker
positions
weth
debt
boosthook
INK Finance Treasury Drain via Address-Only Payroll Claimer Authorization
INK Finance’s Workspace Treasury on Polygon was exploited on 2026-05-11 at block 86711192. The attac...
2026-5-11 00:0:40 | 阅读: 15 |
收藏
|
0day Fans - www.darknavy.org
treasury
usdt
claimer
proxy
attacker
Huma Finance V1 Deprecated Pools Requested-to-GoodStanding Credit Lifecycle Drain
On May 11, 2026 at 14:19:25 UTC, three deprecated Huma Finance V1 BaseCreditPool proxy deployments o...
2026-5-11 00:0:40 | 阅读: 18 |
收藏
|
0day Fans - www.darknavy.org
cr
borrower
usdc
drawdown
0x44d4
Renegade Dark Pool Proxy Unprotected Initializer Delegatecall Drain
On May 10, 2026 at 08:27:23 UTC, Renegade Dark Pool Proxy 1 on Arbitrum (0x30bd8eab29181f790d7e49578...
2026-5-10 00:1:4 | 阅读: 12 |
收藏
|
0day Fans - www.darknavy.org
proxy
attacker
selector
White Eagle Withdraw Drain
2026-05-07 · Loss: 65,645.94 USDT · Price ManipulationOn 2026-05-07 08:14:47 UTC, the White Eagle wi...
2026-5-7 00:0:4 | 阅读: 11 |
收藏
|
0day Fans - www.darknavy.org
wegl
withdrawal
usdt
withdraw
pancakeswap
TrustedVolumes RFQ Proxy Drain
On Ethereum at 2026-05-07 00:47:35 UTC, the attacker exploited an authorization design flaw in Trust...
2026-5-7 00:0:4 | 阅读: 13 |
收藏
|
0day Fans - www.darknavy.org
signer
resolver
maker
attacker
usdc
WBTC Approval Drain via Ekubo Flash Accounting
2026-05-05 · Loss: 17 WBTC (~$1.4M) · Approval DrainOn Ethereum mainnet, transaction 0x770bc9a1f7c32...
2026-5-5 00:0:51 | 阅读: 13 |
收藏
|
0day Fans - www.darknavy.org
wbtc
ekubo
eoa
attacker
victim
Syndicate Commons Bridge Upgrade Compromise
On Base at 2026-04-29 02:22:41 UTC, the Syndicate Commons bridge proxy at 0x64d426e64b7191a1fcf48c89...
2026-4-29 00:1:1 | 阅读: 12 |
收藏
|
0day Fans - www.darknavy.org
proxy
attacker
proxyadmin
synd
AftermathFi Perpetuals Negative Integrator Fee Collateral Inflation
On Sui mainnet on April 29, 2026, attacker 0x1a65086c85114c1a3f8dc74140115c6e18438d48d33a21fd1123115...
2026-4-29 00:1:1 | 阅读: 11 |
收藏
|
0day Fans - www.darknavy.org
fee
taker
integrator
usdc
collateral
JUDAO Sell-Burn Reserve Manipulation
On April 28, 2026 at 00:00:00 UTC, the T3 JUDAO token on BNB Chain was exploited through a reserve-m...
2026-4-27 23:59:13 | 阅读: 22 |
收藏
|
0day Fans - www.darknavy.org
judao
usdt
attacker
sell
executor
YieldCore RWAVault Unauthorized Withdrawal
2026-04-28 · Loss: 398,655.47 USDC · Missing ERC4626 Allowance CheckOn Ethereum mainnet, transaction...
2026-4-27 23:59:13 | 阅读: 16 |
收藏
|
0day Fans - www.darknavy.org
usdc
attacker
withdraw
receiver
erc4626
yvWETH Approval Arbitrary Command Drain
On Ethereum mainnet, transaction 0xebaaab69baa3cd2543eb80ecfb8e3ed226b9e5a6f5694891a8adf4edbcbd8107...
2026-4-27 23:59:13 | 阅读: 12 |
收藏
|
0day Fans - www.darknavy.org
yvweth
weth
victim
0x143a
attacker
QNT Pool Drain via EIP-7702 Admin EOA Delegation
On Ethereum mainnet, transaction 0xef9994ac862318ccf3ebdb66c181bb159651373b945aea59a966608d7b98684f...
2026-4-27 23:59:13 | 阅读: 13 |
收藏
|
0day Fans - www.darknavy.org
qnt
7702
0xc6ddf907
Executor Missing Access Control USDC/USDT Drain
On Ethereum mainnet, transaction 0x81f9aeaa697e4a389e7ce442a357e162ada24049c27cb1439f69d2f4fee720f1...
2026-4-26 23:59:37 | 阅读: 15 |
收藏
|
0day Fans - www.darknavy.org
executor
attacker
funds
usdc
usdt
Singularity_Fi dynBaseUSDCv3 Oracle Share Inflation
Singularity_Fi’s dynBaseUSDCv3 vault on Base was exploited in transaction 0x00b949bc3ed3edb58b04faed...
2026-4-25 00:0:24 | 阅读: 13 |
收藏
|
0day Fans - www.darknavy.org
usdc
fee
quote
receiver
weth
GiddyVaultV3 Signature Replay
GiddyVaultV3 was exploited on Ethereum in transaction 0x5edb66a4c2ea55bba95d36d27713e3bb1c67c3c4199a...
2026-4-22 23:59:0 | 阅读: 11 |
收藏
|
0day Fans - www.darknavy.org
attacker
aggregator
indices
yb
compound
Securing Embodied AI: A Technical White Paper on Humanoid Robots
Redirecting to https://geekcon.top/whitepaper/Embodied-AI-Security-Humanoid-Robots-2604.pdf....
2026-4-20 02:33:6 | 阅读: 35 |
收藏
|
0day Fans - www.darknavy.org
geekcon
whitepaper
embodied
security
humanoid
KelpDAO rsETH LayerZero Packet Drain
On Ethereum at 2026-04-18T17:35:35Z, transaction 0x1ae232da212c45f35c1525f851e4c41d529bf18af862d9ce9...
2026-4-18 00:0:58 | 阅读: 15 |
收藏
|
0day Fans - www.darknavy.org
adapter
bytes32
lzreceive
srceid
endpointv2
Hyperbridge ISMP Forged Proof DOT Mint
嗯,用户让我帮忙总结一下这篇文章的内容,控制在100个字以内。首先,我需要理解文章的主要内容。看起来这篇文章是关于一次区块链的安全漏洞事件,涉及到Hyperbridge协议和TokenGateway合约。 文章详细描述了攻击者如何利用MMR验证器中的一个漏洞,伪造了一个治理请求,从而获得了DOT代币的管理权限。攻击者通过这个权限 mint 了大量DOT代币,并通过Odos和Uniswap v4进行交易,最终获利。 接下来,我需要将这些关键点浓缩到100字以内。主要信息包括:时间、攻击方式、漏洞位置、攻击结果以及损失情况。我应该避免使用复杂的术语,保持简洁明了。 可能的结构是:时间+攻击者利用漏洞+具体操作+结果+损失金额。这样可以确保在有限的字数内涵盖所有重要信息。 最后,检查一下是否符合用户的要求:中文总结,不使用特定开头,控制在100字以内。确保没有遗漏关键点,并且表达清晰。 </think> 2026年4月13日,攻击者利用Hyperbridge协议中的MMR验证器漏洞伪造治理请求,篡改TokenGateway合约的管理权限并mint 10亿DOT代币,在Odos/Uniswap v4上兑换为约108.2 ETH(约合23.7万美元),暴露了协议的信任边界和治理流程缺陷。...
2026-4-13 00:0:45 | 阅读: 24 |
收藏
|
0day Fans - www.darknavy.org
leaf
forged
attacker
hyperbridge
Previous
2
3
4
5
6
7
8
9
Next