PulseCryptoz retweeted
Windows users u must update! Bitlocker has an exploit that Microsoft has silently patched and released no notes about. That's how bad it is. I suggest you run windows update now.
P.S. They're called RedSun and YellowKey
PulseCryptoz retweeted
Code is Speech.
New report: coincenter.org/software-is-s…
PulseCryptoz retweeted
Congratulations idiots! Shout out to KelpDAO for getting hacked for $280M today. Great work with that 1/1 signature setup.
Shout out to Drift Protocol getting hacked for $285 last week.
All you idiots could stop giving your money to other idiots that don't understand security.
But you won't lol. Because you're dumb.
HEX 2,330 days flawless operation. No admin keys.
PulseChain 1,073 days flawless operation. No admin keys.
PulseX nearly the same as PulseChain. No admin keys.
ProveX, quite new and the token has no admin keys.
It's like, when will you silly billies get it? We actually do things better here, and have been doing so for over half a decade.
Reward greatness already. It's here waiting for lift off.
PulseCryptoz retweeted
“Kelp DAO: attacker exploited the LayerZero bridge to drain 116,500 rsETH ($293M), then used it as collateral on Aave to borrow ETH, leaving Aave with bad debt as $AAVE dumps.”
Kelp DAO appears to have been exploited for $293 MILLION in the last hour, making it the biggest DeFi hack of 2026.
And it's far from being the only one this month.
Over $600M stolen from DeFi in the last 2 weeks across over 10 different protocols, and AI is only making it easier for hackers.
> Kelp DAO: attacker exploited the LayerZero bridge to drain 116,500 rsETH ($293M), then used it as collateral on Aave to borrow ETH, leaving Aave with bad debt as $AAVE dumps.
> Drift Protocol: $285M drained by North Korean hackers using AI powered social engineering, they spent months building trust with insiders before executing in 12 minutes.
> Rhea Finance: $18M stolen through fake token pools that tricked the protocol's oracle into approving withdrawals.
> Grinex: $15M stolen, sanctioned Russian exchange suspended all operations and blamed "Western intelligence".
> Hyperbridge: attacker minted 1 billion fake bridged DOT with a notional value over $1B, but only extracted about $237K because liquidity was thin.
> BSC TMM pool: $1.67M drained through reserve manipulation.
> Aethir: $423K lost in an access control exploit on their GPU network.
> Dango: $410K stolen through a smart contract bug in their bridge aggregator.
> Silo Finance: $392K gone from a misconfigured oracle.
> CoW Swap: frontend hijacked through DNS attack, site redirected to a phishing page.
> Zerion: hit by North Korean social engineering, credentials stolen.
The attack surface is expanding faster than the defenses.
This is only going to get worse.
PulseCryptoz retweeted
The domain Vitalik uses for his blog, and some other dapps use I think, has been hijacked. Do not trust anything on eth dot limo till it's unhijacked. cow dot fi was recently dns hijacked as well.
Richard Heart things are superior, as usual, because the ipfs hash prevents DNS hijacks, as well as having apps you download locally. We're just better.
PulseCryptoz retweeted
Huge respect for the work of @RSGriffinFDN and the @AWildSJ team on the tablet distribution.
In a world where AI and software make everything easier to build, real human connection is what truly stands out. The people doing this work are laying the foundation for PulseChain’s long-term success.
Please come, register, volunteer, and lend a hand if you can. PulseChain is number 1 because of you!
Volunteers welcome EVERY day 8am-8pm Temecula, CA 📍DM @AWildSJ or @RSGriffinFDN for more info.
Can’t make it to CA? Find or become a PulseChain Tablet distribution hub at rsgfoundation. org!
Every single day people are showing up for HEX & PulseChain in real life.
Connecting. Working. Talking.
Taking positive action and creating awareness.
If you’ve been part of this community online…
it’s a whole different experience in person.
Come by and see it for yourself.
Food and fun included. ✅
PulseCryptoz retweeted
LibertySwap is excited to introduce StableSwap v1.
StableSwap is built to provide deep liquidity for stablecoins, enabling seamless swaps between assets like DAI, USDC, USDT, USDS, and USD1. Users can swap across blockchains or within a single chain (such as PulseChain, Ethereum, or BNB Chain) quickly and efficiently.
StableSwap is designed to be capital-efficient. Instead of locking liquidity across multiple blockchains, we primarily maintain liquidity on PulseChain and Ethereum while enabling instant movement of assets to other chains. This approach increases capacity and helps solve the liquidity constraints we previously experienced.
The rollout will happen in 3️⃣ phases:
🎯StableSwap v1
Enables USDC (PulseChain) swaps to and from supported networks.
Users can currently swap stablecoins between PulseChain and chains like Arbitrum, OP Mainnet, INK, and Unichain.
Withdrawals from PulseChain to these networks are already live.
Support for Solana and additional chains (Plume, Morph, Linea, Starknet, World Chain) is being deployed on our UI.
🎯StableSwap v2
Expands support to all major stablecoins across multiple blockchains, enabling broader cross-chain swaps for DAI, USDC, USDT, USD1, and other stablecoins.
🎯StableSwap v3
Introduces StablePool and StableSwap (DAI, USDC, USDT) within individual chains, including PulseChain, Ethereum, and BNB Chain.
PulseChain will be the first. StableSwap will help maintain more consistent pricing across stablecoins on PulseChain.
PulseCryptoz retweeted
Liberty Swap and LibertyX are not fully using Permit2.
Permit2 is a new token approval standard for Ethereum dApps that makes transfers safer, more flexible, and gas-efficient than the traditional ERC-20 approve and transferFrom.
It allows you to:
- Limit the exact amount a dApp can spend.
- Set an expiration time for approvals.
This reduces the risk of losing all your tokens if a dApp or contract is compromised.
PulseCryptoz retweeted
I Saved Injective's $500M. They Pay Me $50K.
I like hunting bugs on @immunefi . I'm decent at it.
- #1 — Attackathon | Stacks
- #2 — Attackathon | Stacks II
- #1 — Attackathon | XRPL Lending Protocol
- 1 Critical and 1 High from bug bounties (not counting this one)
Life was good. Then I found a Critical vulnerability in @injective .
This vulnerability allowed any user to directly drain any account on the chain. No special permissions needed. Over $500M in on-chain assets were at risk.
I reported it through Immunefi. The next day, a mainnet upgrade to fix the bug went to governance vote. The Injective team clearly understood the severity.
Then — silence. For 3 months. No follow up. No technical discussion. Nothing.
A few days ago, they notified me of their decision: $50K. The maximum payout for a Critical vulnerability in their bug bounty program is $500K. I disputed it. Silence again. No explanation for the reduced payout. No explanation for the 3 month ghost. No conversation at all. To be clear: the $50K has not been paid either.
I've seen others share bad experiences with bug bounty payouts recently. I never thought it would happen to me. I can't force them to do the right thing. But I won't let this be forgotten.
I will dedicate 10% of all my future bug bounty earnings to making sure this story stays visible — until Injective pays what I deserve.
Full Technical Report: github.com/injective-wall-of…
PulseCryptoz retweeted
LibertyX is here. All the core features are up and running quite well.
Within this week, we will improve the quote speed, open limit orders, and enhance the UI and UX.
The swap rate is good, with MEV protection and best-in-class execution.
PulseCryptoz retweeted
Ethereum has just released its most comprehensive and detailed upgrade roadmap in history, known as the “Strawmap.”
This draft plan, introduced by Ethereum Foundation researcher Justin Drake, outlines seven major hard forks through 2029, delivered at a roughly biannual pace to accelerate Ethereum’s evolution.
This is a blueprint for a massive rebuild of Ethereum’s base layer, transforming it into a faster, more scalable, secure, and privacy-focused foundation.
This is an article that explains the whole process in simple terms so that everyone can understand what will happen to the EVM from now until 2029.
PulseCryptoz retweeted
Also, ERC-8004 operates at the application level and can be deployed on PulseChain without any network upgrades, since it is implemented as standard smart contracts, including the Identity, Reputation, and Validation registries.
This has the potential to significantly boost activity on PulseChain by automating a large portion of trading and transaction workflows.
PulseCryptoz retweeted
Allowance approval attacks can still affect hardware wallets, so be careful with what you approve.
A malicious allowance can silently drain your wallet months after approval, even if you no longer interact with that contract.
If you review our protocol contracts on RevokeCash, you will see that we do not leave allowances open. All approvals are revoked after the transaction is completed.
This gives users greater peace of mind when using our protocol. That said, the more contracts you interact with and the more frequently you trade using a hardware wallet, the larger your overall risk surface becomes.
Best practice is to use a separate trading wallet, ideally also a hardware wallet. Send only the amount you intend to trade to that wallet, then withdraw funds back to your long term storage wallet when finished.
PulseCryptoz retweeted
Friends, to onboard users to PulseChain, please stop using @base wallet. It does not support PulseChain and does not allow users to export a private key that is compatible with non smart contract wallets.