A leading finance security firm, trusted by top clients such as Binance, Bullish, Bybit, Galaxy Digital, BNB, Polygon, SUI, Aptos and many banks.
Joined March 2018
- Tweets318
- Following119
- Followers5.5K
- Likes260
Pinned Tweet
Verichains is glad to have helped unveil the root cause behind the largest Web3 hack—$1.4 billion on @Bybit_Official’s Multisig @Safe Wallet!
This hack is a strong wake-up call as Web3 security isn’t just about on-chain transactions or smart contracts — it also relies on traditional Web2 components like private keys, frontends, backends, oracle data, etc — which are prone to exploitation & manipulation.
Bybit Hack Forensics Report
As promised, here are the preliminary reports of the hack conducted by @sygnia_labs and @Verichains
Screenshotted the conclusion and here is the link to the full report: docsend.com/view/s/rmdi832mp…
Two bytes to RCE: chaining rift + PoolSlip into an ASLR-independent Nginx 1.30.0 exploit! blog.verichains.io/p/two-byt…
Verichains retweeted
lmao it's been literally 1000 days since TSSHOCK was disclosed publicly.
even more since THORChain was alerted and given a working PoC on their implementation.
there have been many adjacent issues with tss libs before and since.
fools.
verichains.io/tsshock/
🔍 Our investigation using our Revela-next uncovered the same math flaw from the $260M Cetus exploit in @KriyaDEX, @FlowX_finance, and @Turbos_finance on @SuiNetwork.
🛠️ All projects have already fixed & upgraded their contracts.
Read more: blog.verichains.io/p/multipl…
The successful use of our Revela tool to analyze the exploit and scan for similar vulnerabilities across the Sui ecosystem demonstrates the power of advanced decompilation tools in post-incident analysis and vulnerability detection. By enabling rapid identification of issues, even in contracts without accessible source code, tools like Revela play a critical role in strengthening security of blockchain ecosystems.
revela.verichains.io/
We applaud the @SuiNetwork team for their swift action in leveraging our Revela tool to identify and alert affected projects. Their fast response not only mitigated immediate risks but also set a strong example of responsible security coordination for the broader ecosystem.
⚠️ Note: All mentioned projects have since upgraded to fix the issue. This post is intended as a transparency measure and public awareness effort.
⚠️ Turbo Finance is a special case. While the vulnerable function was not actively used, it was present in the deployed contract, posing a latent risk. Any future code changes or integrations could have unknowingly activated this function. This incident is a reminder that dead code is not safe code.
🚨 URGENT: The $260M Cetus Protocol hack exposed a vulnerability in math library which could be used by other projects. We've already identified a few projects likely also vulnerable. Make sure to review your code NOW to prevent similar exploits happen. Details: blog.verichains.io/p/cetus-p…
#Sui #DeFi #Cetus #SecurityBreach
🚨 Just released: Our analysis of the $260M exploit targeting @CetusProtocol on the @SuiNetwork! Using our Revela-next AI-assisted Move Decompiler, we uncovered how attackers exploited a flaw in liquidity math to drain funds.
Learn the details and key takeaways to secure your DeFi projects. Read now: blog.verichains.io/p/cetus-p…
#defi #Security #Blockchain #sui #Cetus
The root cause is a wrong constant in the overflow check of checked_shlw(u256) math function, which was meant to prevent 256-bit values from wrapping when shifted left by 64 bits. Because that constant is too large, sufficiently big shifts silently wrap modulo 2²⁵⁶, collapsing a huge intermediate into a tiny residue. An attacker can thus deposit a single token, mint the entire pool liquidity, and then withdraw it to drain the funds.
We have updated our blog with more details of the exploited venerability. Note that this vulnerability may affect other projects that use the same vulnerable math function.
youtube.com/watch?v=_CNwSche…
Watch Revela-next, our AI-assisted Move decompiler, in action as it dissects the Cetus Protocol and demonstrates how Revela helps identify critical flaws in smart contract logic!
Verichains retweeted
OP_NET 🤝 VERICHAINS
We’re proud to partner with @Verichains, a proven leader in blockchain security 🛡
Security isn't optional for Bitcoin’s future. It’s the foundation everything is built on.
Together, we are making OP_NET’s Bitcoin-native smart contracts and DeFi safe and reliable.
This is how the next era of Bitcoin begins - with security at the core 🍊💊
We have just published an analysis on the technique currently exploited by certain Mobile Banking Apps on the Apple App Store to scan installed applications on users’ iOS devices without their consent. Works on all/latest iOS versions.
blog.verichains.io/p/technic…
Verichains retweeted
During our investigation of the Bybit incident involving the Safe{Wallet} UI backdoor, we quickly developed a minimal interface for interacting with Safe smart contract wallets.
This lightweight tool offers essential functionality for Safe Protocol interactions via a simple interface, enabling Safe users to execute multi-sig transactions locally on their own machines without depending on the safe.global UI.
🔗 github.com/verichains/safe-p…
⚠️ Use at your own risk and always verify what you sign.
Verichains retweeted
Amid the $1.5B Bybit hack, secure crypto management is vital. Our lightweight interface lets you easily interact with Safe smart wallets without the official UI.
github.com/verichains/safe-p…
#SafeProtocol #Crypto
