7928
Tech tricks, news, hacking tutorials and dark web guides. Admin : @anonyguy
On April 21, 2023, Adidas launched a new line of NFTs called "Into the Metaverse." The NFTs were sold on the Ethereum blockchain and were priced at 0.2 ETH each. Within minutes of the launch, the NFTs were sold out. However, it soon became clear that something was wrong. A single user had managed to purchase 165 times more NFTs than allowed.
The user had found an exploit in the smart contract which allowed them to scoop up NFTs at a much lower price than everyone else. The smart contract used in the auction had a block of code that checked the wallet to see if they had purchased any tokens before. The exploiter realized that they could create a new wallet for each purchase, and the smart contract would not be able to detect it.
As a result of the exploit, the user was able to purchase NFTs worth over $3 million for just $300. Adidas has since apologized for the exploit and has promised to refund the user's money. However, the incident has raised concerns about the security of NFTs and the need for better regulation in the NFT space.
Here are some of the key takeaways from the Adidas NFT exploitation:
NFTs are still a new technology and there are security risks associated with them.
It is important to do your research before buying an NFT and to make sure that you are buying from a reputable source.
If you are considering buying an NFT, it is important to understand the risks involved and to take steps to mitigate those risks.
https://www.youtube.com/watch?v=Xvx4fN5bv-Q
awesome hands-on reentrancy exercise.
"I'm so tired bros: I'm 22 and I have $160k to my name. I grew up pretty poor and did a gamble on crypto a few years ago. The only problem is that everything has skyrocketed in price. I'm spending $1500 a month on rent. I'm graduating with an English degree in August. I don't want to work. I wish I had ambition early on and had gone the comp sci route. I don't know what to do anymore. I live in the USA and I don't know if there is any place worth living here. Should I just move abroad and teach English? I guess I could learn coding on the side or something. I'm very depressed and have self esteem issues. I've been thinking about ending it all for a while now, but I guess I may as well give life a shot. I've only ever had retail experience and I thought about being a wagie for Starbucks or Costco, but then reality set in and I realized yet again that I would rather die than work at those places. My ultimate goal is to just work from home if I have to work. That's all I need. I wish I would've just dropped out of school and I've still debated it. Growing up poor really does fuck you up, boys. I've thought about getting a therapist and psychiatrist, but I don't wanna waste thousands of money on what could be used towards my future home. Does anyone have any advice? I mean I do acknowledge that $160k is a good chunk of change, and I guess plenty of other people have gotten worthless degrees too. I wanna get back into exercising and eating healthy because I feel like that'd be a mood booster. I kind of just wish I had never been born a lot because all life is, is a boring rat race. I want a nice home, but it just takes so much god damn money. And healthcare is absurdly expensive in the US. Should I just get my passport and leave? Are they really gonna take a 22 yr old with no meaningful skills?"
From 4chan
https://insiderpaper.com/us-offers-10-million-for-mastermind-of-2019-kenya-hotel-siege/
Читать полностью…
https://dev.to/rushanksavant/delegate-call-order-of-variables-4k3
Interesting.
https://chat.openai.com/
It's the cool gift that 2021 have gave us ,when we were about to leave the year behind.
2021, rest in the almighty peace.
chatgpt helps on explaining questions on simple terms with examples.
it should help on your learning curve!
This poll is closed.
Which web3 project's vulnerable code was this?...
1. Cosmos (0 / 1) – 0.00%
2. Bored Ape (0 / 1) – 0.00%
3. Reimagined Finance (0 / 1) – 0.00%
4. Olympus DAO (1 / 1) – 100.00%
Retro099
Last updated: 2023-01-04 10:01:58 EET
Hello is there anyone has writerbay, writershark account?
Or any other writer accounts?
Please inbox me @intelon
update any Chromium browsers (Chrome, Brave, etc) NOW https://www.forbes.com/sites/daveywinder/2022/03/26/google-confirms-emergency-security-update-for-32-billion-chrome-users-attacks-underway
Old but important info
New opera mini trick for mtn-Sa
1:Tick: ☑️Remove Port
2:back Query:apps.mtnplay.mobi
3:Proxy type:(Real Host or Dual real host)
4:Proxy server:mtnplay.mobi
5:Username:D-k free net
Password:1234567890
6:Child protection:www.nextwap.net
Enjoy free browsing
COTI - Currency Of The Internet Telegram! - COTI Is the only digital currency to offer a compelling alternative to existing payments systems and built for everyone.
It will combine the best of traditional payments systems with the best of DLT technologies to offer the fastest, easiest, most cost-effective and most trusted way to pay.
Please stay tuned for our newsletter coming out this week, Thursday, January 25, 2018. We’ll officially be announcing all final dates related to the COTI token economy, team, technology and more.
If you haven't registered for updates through our website yet, please visit https://coti.io/ and enter your email address to stay in the loop. Thank you for your patience!
Join our Telegram channel @cotichannel and leave feedback in our chat @cotinetwork
COTI - Currency of the Internet
A digital currency built for payments
••5 THINGS YOU PROBABLY NEVER KNEW YOUR MOBILE PHONE COULD DO !!!
Very useful 👍👍👍
In grave emergencies, your mobile phone can actually be a life saver or an emergency tool for survival.
1. Emergency Services
🚑🚑🚑
The Emergency No. worldwide for all Mobile Phones is 112.
If you find yourself out of the coverage area of your mobile network and there is an emergency, dial 112 and your mobile will search any existing network in your area to establish the emergency number for you, and interestingly this number 112 can be dialed even if the keypad is locked. This works on all phones worldwide and is free.
2. Locked your keys in the car?
🚙🚙🚗🚕🚗🚕🚙🚗
If you lock your remote keyless car keys in the car and the spare keys are at home, call someone at home on their mobile phone from your cell phone.
Hold your cell phone about a foot from your car door and have the person at your home press the unlock button on the spare key, holding it near the mobile phone on their end. Your car will unlock. Saves someone from having to drive your keys to you.
Distance is no object. You could be thousands of miles away.
Editor's Note: I didn’t believe this when I heard about it! I rang my daughter in Sydney from Perth when we went on holiday. She had the spare car key. We tried it out and it unlocked our car over a mobile phone!
3. Is your mobile phone battery flat ? All handphone have Hidden Battery Power.
📲📱📱📱📱📱📈📈
To activate, press the keys *3370# (remember the asterisk). Do this when the phone is almost dead. Your mobile will restart in a special way with this new reserve and the instrument will show a 50% increase in battery life. This reserve will be recharged when you charge your handphone next time.
This secret is in the fine print in most phone manuals which we skip without realizing.
4. Disabling a STOLEN mobile.
📱❌📱❌📱❌📱
To check your handphone's serial number, key in following digits on your phone:
* # 0 6 #
Ensure you put an asterisk BEFORE the #06# sequence.
A 15 digits code will appear on the screen that is unique to your handset. Write it down and keep it somewhere safe. If your handphone is ever stolen, phone your service provider and give them this code.
They will then be able to block your handset so even if the SIM is changed, your handphone will be totally useless. And even if you don't get your phone back, at least it can't use/resold either. If everybody did this, there would be no point in people stealing mobile phones.
This secret is also in the fine print of most mobile phone manuals. It was created for the very purpose of trying to prevent phones from being stolen.
5. ATM PIN Number Reversal - Good to Know !!!
❌💰💵❌💰💵
If you should ever be forced by a robber to withdraw money from an ATM machine, you can notify the police by entering your PIN # in reverse. For example, if your pin number is 1234, then you would put in 4321. The ATM system recognizes that your PIN number is backwards from the ATM card you placed in the machine. The machine will still give you the money you requested but unknown to the robber, the police will be immediately dispatched to the location. All ATM’s carry this emergency sequencer by law.
This information was recently broadcast by Crime Stoppers. It is, however, seldom used as people just don't know about it.
@TechByte
This is funny! It's like "Now I got you" moment for the Bitcoiners.
Silicon Valley bank filed for bankruptcy protection today.
Hey ,I'm recruiting good hackers.
Good opportunity. Inbox me @aelpa
Need only two ,good hackers.
friendly_/bypassing-cloudflares-waf-b1b83a50fb2f?source=social.tw" rel="nofollow">https://medium.com/@friendly_/bypassing-cloudflares-waf-b1b83a50fb2f?source=social.tw
Читать полностью…
https://github.com/DeFiFoFum/ApetasticERC20Factory/blob/main/contracts/ApetasticERC20Factory.sol
Read this smart contract code and try to understand.
https://eip2535diamonds.substack.com/p/understanding-delegatecall-and-how?s=r
Helpful article about delegatecall in solidity.
The Dedaub team has disclosed a Critical vulnerability to the Uniswap team!
Funds are safe - Uniswap addressed the issue and redeployed the Universal Router smart contracts on all its chains 👏
The vulnerability allows re-entertrancy to drain the user's funds, mid-tx.
#Uniswap recently introduced the Universal Router. It unifies ERC20 and NFT swapping into a single swap router. Users can perform heterogenous actions, e.g., swapping multiple tokens and NFTs in one tx.
This router embeds a scripting language for all sorts of token actions.
Such commands could include transfers to third party (potentially untrusted) recipients. In a correct implementation, such a transfer should send to the recipient only what the call parameters specify.
And nothing more.
However, if third-party code is invoked at any point in the transfer (which manifests itself due to composition of protocols), the code can reenter the UniversalRouter and claim any tokens temporarily in the contract.
·
One part of the PoC was implemented below.
The attacker also needs to implement code to reenter the router (calling execute) and sweep all token amounts.
The router may contain funds mid-transaction due to other actions and transfers in a complex swap...
Image
E.g.,
1) transfer an NFT
2) transfer the remaining funds.
The receipient of the NFT can easily reenter UniversalRouter (between steps 1 & 2) by calling transfer or sweep inside its onERC721Received handler and drain the entire amount!
We advised the Uniswap team to add a reentrancy lock to the core execution of the new router, and redeploy.
This modification was swiftly implemented, fixing the issue before the router gaining mass adoption: https://library.dedaub.com/contracts/Ethereum/0xef1c6e67703c7bd7107eed8303fbe6ec2554bf6b/source?line=2787
Dedaub
@dedaub
·
Jan 2
We thank the @Uniswap
team for awarding a bug bounty.
Further reading:
media.dedaub.com
Uniswap Bug Bounty
By the Dedaub team
source : Dedaub
መገናኛ ቀናችን ቅዳሜ ይሁን ወይስ እሁድ?
1. ቅዳሜ (1 / 5) – 20.00%
nige24
2. እሁድ (4 / 5) – 80.00%
Selam, usra4ever, Anonyguy, Birtukahn Jesus
Last updated: 2023-01-04 09:45:39 EET
Summary: Jabber/ XMPP Is a secure messaging protocol
with many advantages in addition to many features
in the cryptography domain. Although it's not as
popular, it's still being actively maintained and utilized.
Cryptography: It uses End-to-End signing to ensure that both parties receive
the validated message sent/ recv. to ensure it hasn't been compromised
through various interception techniques such as over-the-wire packet interception
or other attacks such as SSL stripping, etc. A massive feature is OTR (Off-the-Record)
protocol. It's data is hashed with a combination of encryption such as the Diffie-Hellman
and SHA-1 hash. In addition, it requires both parties to utilize at once instead of the basic
XMPP/ Jabber client. Highly advised in sensitive situations.
Resources:
- (1) https://www.jabber.de/was-ist-jabber/ -- "What is Jabber/ XMPP"
- (2) https://xmpp.org/getting-started/ -- "How to setup Jabber/ XMPP"
- (3) https://wiki.xmpp.org/web/OTR#:~:text=Off%2Dthe%2DRecord%20Messaging%2C,the%20SHA%2D1%20hash%20function.
Notes:
- There isn't just one server to utilize. There are plenty out there. Lastly, it's
not up to the server but to you to secure your communications as the client.
If you need assistance, feel free to tag or PM me.
author:cosmo
🚨 Grayscale and parent company Digital Currency Group, which owns 633,000 BTC, seem to be in big trouble: - The discount of GBTC to Grayscale Bitcoin Trust net asset value hits a record 42.7%. - It is reported that the Digital Currency Group must begin to liquidate part of the fund in 633,000 BTC in order to restore the situation. Grayscale declined to provide proof of reserves, citing "security concerns" and also indicated that all funds are held by Coinbase. - Removed page with team members on Digital Currency Group website (archived). - Grayscale's problems began during the collapse of Luna and Three Arrows Capital, and FTX finished them off (the relationship of Grayscale and DCG with other companies in the picture below). All Grayscale coins belong to them, not to clients. The role of the company was to provide 1 share of GBTC with storage of 1 BTC.
Source:Daniil
Want to buy Hacked paypal account with 787Eur or 977USD by Only 200usd?
Then inbox me @zainpro
Unicc account is for sale
High transferd account
70k$ transferd
Loaded (1.5$)
Selling for $100
No reduction of price
Jstash invite code-35$
Validcc invite code-10$
Validcc account -65$
Luxscoks account-70$
Vlt.bz invite code-10$
Jshop-net-25$
Inbox me @zainpro
Hello everyone. I was browsing the deep web and i came across several sites selling paypal accounts with balance in them for a low price. Along with several tutorials about cashing out methods. I was wondering if anybody has done this before?
Then contact me please
@zainpro
