Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
shakedown.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A community for live music fans with roots in the jam scene. Shakedown Social is run by a team of volunteers (led by @clifff and @sethadam1) and funded by donations.

Administered by:

Server stats:

278
active users

shakedown.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#ethereum

2 posts2 participants0 posts today
Replied in thread
Public *
Kevin Karhan :verified:

@pixelschubsi @fasnix @anneroth @Ulan_KA besonders #Shitcoins wie #Bitcoin & #Ethereum welche keine Vorteile bringen!

Es fängt aber auch schon damit an dass #Beante ne #Extrawurst bekommen und damit dass Leute die von #Kapitalertrag leben keine #Sozialbeiträge zahlen!!!

Wenns nach mir ginge, wären alle Einkünfte gleichberechtigt mit #Lohnarbeit abgabenpflichtig und es gäbe keine Beitragsobergrenzen! Wenn ich ~ 20% für die GKV zahlen kann, dann ist das für Milliardäre erst recht zumutbar!

Public *
⚯ Michel de Cryptadamus ⚯

nothing to see here, just crypto hastening the collapse of global democracy, all facilitated by America's commerce secretary #HowardLutnick and the company whose money he manages, #Tether.

> "Bitcoin and crypto are now favored as a means of trade among Russia’s oil companies to the extent they would continue to be used even if sanctions were lifted and the U.S. dollar could be used again."

> "Russian oil companies have used #Tether, #bitcoin and #ethereum"

> "Russian oligarchs and billionaires hit by severe financial restrictions following the country’s invasion of Ukraine turned to bitcoin and crypto as far back as 2022."

> "Meanwhile, the Bank of Russia has stated this week it intends to allow a “limited circle of Russian investors” to buy and sell bitcoin and other cryptocurrencies."

reuters.com/business/energy/ru

#russia#putin#vladimirputin
Public *
⚯ Michel de Cryptadamus ⚯

#Bybit released the conclusions of their investigation into how they got rekt for $1.4 billion by North Korea's #LazarusGroup. Summary:

1. (background) Bybit were dumb enough to store billions of dollars in a single wallet contract using software from a company called SafeWallet (a "Gnosis Safe")

2. A dev machine of SafeWallet (name is lol) was compromised by Lazarus and used to access SafeWallet's cloud data stores (S3)

3. malicious JavaScript was pushed to the cloud drive and eventually distributed in a release (?).

4. The malicious JavaScript code targeted specifically the Bybit contract address to change the content of the transaction during the signing / approval process.

* Bybit reports: docsend.com/view/s/rmdi832mpt8
* Full Statement from SafeWallet: x.com/safe/status/189476852272

in a normal world Bybit could probably sue SafeWallet, but I'm sure SafeWallet barely exists as an entity.

1.1 KEY FINDINGS Thus far, the forensics investigation highlighted the following findings: • Forensic investigation of all hosts used to initiate and sign the transaction revealed malicious JavaScript code injected to a resource served from Safe{Wallet}'s AWS S3 bucket. • Resource modification time and publicly available web history archives suggest the injection of the malicious code was performed directly to Safe{Wallet}'s AWS S3 bucket. • Initial analysis of the injected JavaScript code suggests it's primary objective is to manipulate transactions, effectively changing the content of the transaction during the signing process. • Additionally, the analysis of the injected JavaScript code identified an activation condition designed to execute only when the transaction source matches one of two contract addresses: Bybit's contract address and a currently unidentified contract address, likely associated with a test contract controlled by the threat actor. • Two minutes after the malicious transaction was executed and published, new versions of the JavaScript resources were uploaded to Safe{Wallet}'s AWS S3 bucket. These updated versions had the malicious code removed. • The highlighted initial findings suggest the attack originated from Safe{Wallet}'s AWS infrastructure. • Thus far, the forensics investigation did not identify any compromise of Bybit's infrastructure.
#infosec#cybersecurity#safewallet
Public
Valentin B. :ferris:

Announcing lintspec, a Solidity NatSpec linter.

beeb.li/blog/announcing-lintsp

Doc-comments (NatSpec) in Solidity are extremely important, because they are often the only source of documentation related to a smart contract.

Not happy with existing solutions, I decided to create my own, which ended up being 200x faster.

beeb.li · Announcing lintspecLintspec is a command-line utility (linter) that checks the completeness and validity of NatSpec doc-comments in Solidity code. It is focused on speed and ergonomics and aims to improve the user experience over existing solutions.
#RustLang#solidity#web3
Public
Frankie ✅

Hackers steal $1.5bn from crypto exchange in ‘biggest digital heist ever’

Bybit platform appeals to ‘brightest minds’ in cybersecurity for help after attacker transfers Ethereum currency

theguardian.com/technology/202

The Guardian · Hackers steal $1.5bn from crypto exchange in ‘biggest digital heist ever’By Joanna Partridge
#news#tech#technology
Public
Flipboard Tech Desk

Ethereum prices are falling today after Bybit was hacked, with more than $1.4 billion worth being stolen. The crypto exchange's CEO Ben Zhou confirmed the attack but told customers that it will be able to manage the loss. "Bybit is solvent even if this hack loss is not recovered," he wrote on X. "All of clients' assets are 1-to-1 backed, we can cover the loss." Here's more from Decrypt.

flip.it/Ej9vuz

Decrypt · Ethereum Falls as Crypto Exchange Bybit Confirms $1.4 Billion HackBy Andrew Hayward
#Crypto#Cryptocurrency#Hacks
Public *
⚯ Michel de Cryptadamus ⚯

world's least serious #bugbounty program used to protect one of the world's largest and most easily stolen piles of assets is a great case of "show me the incentives and i'll show you the outcomes".

whoever just stole $1.4 billion in crypto could have instead collected... $4,000 for reporting a vulnerability.

for comparison Apple and Google offer bug bounties in the $1 million+ range for compromising a phone.

this is not a serious industry.

table of payouts for bug reporters at Bybit showing critical bugs pay only $2,500 to $4,000.
#infosec#cybersecurity#Bybit
ExploreLive feeds
About