Berkan SAL·Sep 23A Security Check Can Run and Still Protect NothingHow a variable overwrite turned a TWAP deviation guard into a comparison against itself.
William Wei Ming·Jun 23I Audited a Polymarket “Reverse Trading Bot” Before Trusting It With My Wallet**TL;DR:** A GitHub Polymarket bot looked clean in TypeScript but was hostile in the packaging. `ts-escrow` is install-time malware that…
InCoinmonksbyAbraham·Apr 10How Hackers Think in DeFi: A Deep Dive into Attacker MindsetsHow hackers think in DeFi: learn attacker mental models, exploit strategies, and how to design secure smart contracts against real world…
InWeb3Firewall BlogbyDean Nicolls·Apr 8DeFi Platforms Need a Few Extra Ounces of Prevention to Prevent Going AdriftObject Lesson: How the $285M Drift Protocol hack could have been avoided.
Sisi·Apr 6What DeFi Looks Like When the Infrastructure Gets Serious: Canton Network and OneSwapMost conversations about DeFi start with the protocol. The AMM design, the fee structure, the token mechanics. Rarely with the…
Before The Curve·Apr 4North Korea Stole $285M From Solana’s Drift With a Fake TokenThe Drift Protocol exploit combined oracle manipulation, durable nonce abuse, and social engineering into the most sophisticated DeFi…
InInfoSec Write-upsbyHacker MD·Mar 10How I Found a $1,000 Signature Replay Vulnerability in a Blockchain Bridge SDKA Step-by-Step Journey from Code Review to Bounty
InCoinsBenchbyAbraham·Mar 10If You Don’t Have a Routine, You Don’t Have a Future: Smart Contract Security ResearcherIn smart contract security, talent doesn’t protect protocols routine does.
Naman Agrawal·Feb 20When One Ticket Becomes Two: A Critical Double-Counting Bug in Jackpot Revenue AllocationIntroduction
