Building Trust & Ensuring Web3 Security ⛨
Smart Contract Audit
Joined October 2022
- Tweets145
- Following22
- Followers1.5K
- Likes36
Pinned Tweet
😱Millions lost to crypto hacks in 2023 alone:
💥Safemoon- $8.9m hacked
💥Sushiswap- $3.3m exploited
💥Yearn- $10m lost
💥Hundred Finance- $7.4m compromised
Stay ahead of the game. Follow @scrutify🛡 for the latest crypto hack insights, analysis, and security best practices🤝.
Scrutify retweeted
Gm!
@EncoreDefi is fast becoming the talk of town to revolutionize your #crypto experience through multi-functionioary #DeFi platforms.
🚨It's official token $ENC pre-sale is now live at $0.02.
#ENCOREDEFi is @scrutify audited.✅
Don't fade
t.me/encore_defi_official
Forget crypto, secure your tweets!
No 2FA = SEC hacking & fake Bitcoin ETF approvals.
#2factorauthetification #SECGOV
We can confirm that the account @SECGov was compromised and we have completed a preliminary investigation. Based on our investigation, the compromise was not due to any breach of X’s systems, but rather due to an unidentified individual obtaining control over a phone number associated with the @SECGov account through a third party. We can also confirm that the account did not have two-factor authentication enabled at the time the account was compromised. We encourage all users to enable this extra layer of security. More information and tips on how to keep your account secure can be found in our Help Center: help.x.com/en/safety-and-sec…
🚨 Crypto 2023 Hacklights 🚨
2023 witnessed a crypto resurgence, yet challenges persisted with $2.4 billion lost to hacks. Key moments:
Q3 Hack Surge: $700 million in losses across 184 hacks.
Top Hacks of 2023:
- Kyber Network: $54.7M - The attacker demanded control; Kyber stood firm.
- Curve: $73.5M - Whitehat bounty led to partial recovery.
- Euler Finance: $197M - Bizarre flash loan attack; swift fund return.
- Mixin Network: $200M - Catastrophic cloud attack; 50% refund pledge.
- Multichain Bridge: $126M - Suspicion of an inside job; caution urged.
- Atomic Wallet: $100M+ - Lazarus group breach; lawsuits in progress.
- Stake: $41M - Sophisticated breach; customer funds unaffected.
Despite challenges, the crypto community's resilience and innovation point towards a robust decentralized future.
Stay safe as we head into 2024!
Scrutify retweeted
🚨 Urgent Security Alert 🚨
We've identified a critical issue the ledger connector has been compromised, potentially allowing the injection of malicious code affecting various dApps.
🔴 If you have the Sushi page open and see an unexpected 'Connect Wallet' pop-up, DO NOT interact or connect your wallet.
We're actively working to remove the ledger wallet connector. For your safety, please refrain from engaging with any dApps until further notice. Stay tuned for updates.
Scrutify retweeted
⚠️ Phishing Alert ⚠️
Beware of job scams on freelance platforms...
Be cautious if someone invites you to apply for a job on platforms like Upwork, Fiverr, or Freelancer.
The scammer may ask job-related questions to gain your trust.
They might appreciate your experience and offer a job with a higher payout than your bid.
Stay alert if they share a link asking you to connect your MetaMask wallet to access their portal.
Connecting the wallet may lead to an attempt to wipe out your funds.
Verify the shared link, check their social media handles, and compare with official sources to spot phishing attempts.
Today, we encountered a similar incident with someone pretending to be Gamma Strategies, offering a $60/hour job. They shared a link, gammastrategies.eu/, which appears identical to their official website, gamma.xyz/. Upon wallet connection, they attempted to drain funds.
Your attentiveness and awareness can prevent falling victim to phishing attacks.
Stay Vigilant and Stay Safe!
#phishing #cryptocurency @GammaStrategies
🚨 $320M Lost to Hacks in November only!
Did you know? A staggering $240M of this total loss resulted from compromised private keys. 😱
Here are some common ways private keys are compromised:
1/ Phishing Attacks: Malicious actors often use deceptive emails or websites to trick individuals into revealing their private keys.
2/ Insider Threats: A developer with access to private keys may intentionally misuse or leak them.
3/ Insecure Development Environments: If development environments are not adequately secured, they can become targets for attackers seeking to obtain private keys.
4/ Code Vulnerabilities: Bugs or vulnerabilities in the code, especially in smart contracts, can expose private keys if not properly addressed during development.
5/ Mismanagement of Keys: Developers might inadvertently expose private keys in code repositories, configuration files, or other insecure locations.
6/ Lack of Access Controls: Insufficient access controls can lead to unauthorized personnel gaining access to sensitive information, including private keys.
To mitigate these risks, developers should follow best practices for secure coding, implement proper access controls, use secure development environments, and undergo regular security training. Additionally, employing processes like code reviews and audits can help identify and rectify potential vulnerabilities.
At @Scrutify, we understand the value of security. Don't be the next victim. Click the link below to Request an Audit from Scrutify.
scrutify.io/smart-contract-a…
#PriceManipulation exploits are a type of attack that can be used to steal funds from #DeFi protocols. In these attacks, the attacker artificially #inflates or #deflates the price of an asset in order to gain an advantage.
Another method of price manipulation is to use #WashTrading. Wash trading is the practice of buying and selling an asset to create the illusion of high trading volume. This can be used to artificially inflate the price of an asset.