DeFi und Governance
ERC-4626: a vault share is not an immediately withdrawable balance
Read conversion rates, fees and withdrawal limits as separate quantities.
Recherche · Geschichte · Wissen
Alle Einträge A–Z · 6 / 15
438 · Artikel und Referenzen
Smart Accounts und Governance
ERC-6492: signatures from an account that is not deployed yet
An empty address can have a planned contract identity; verification must follow the correct model.
Smart Accounts und Governance
ERC-7579: wallet modules are part of the authority map
Validators, executors and hooks have different powers inside a modular smart account.
Recherchemethoden
eth_getProof: check the state, then check the root you trusted
Account and storage proofs can make an RPC answer verifiable, but they do not choose the canonical chain for you.
Chains und Netzwerke
Ethereum: applications share a settlement system
ETH, smart contracts and tokens have distinct roles and distinct risks.
Krypto-Geschichte
EthereumMax paid promotion
Kim Kardashian settled SEC charges over an undisclosed $250,000 payment to promote EthereumMax.
Krypto-Geschichte
Euler donation-to-reserves exploit
Euler was exploited in 2023 through interactions involving lending positions and its donation mechanism.
Blockchain-Grundlagen
Events and transaction logs
Contracts emit indexed logs consumed by wallets and explorers.
Recherchemethoden
Evidence snapshots: make a finding reproducible
A claim needs enough context to survive a changed interface.
Marktstruktur
Exchange mark-price discretion
A venue liquidates from an index or mark instead of the last trade.
Betrugsmaschen
Fake airdrops and claim pages
An unexpected asset can be an advertisement for a malicious website.
Betrugsmaschen
Fake bridge interfaces
A clone accepts approvals or deposits without a valid destination route.
Betrugsmaschen
Fake browser extensions
A malicious extension appears beside a legitimate wallet in store or search results.
Betrugsmaschen
Fake crypto recruitment tests
A supposed employer asks an applicant to install software, clone a repository or run a coding task.
Betrugsmaschen
Fake exchange deposit pages
A clone shows plausible balances after funds reach attacker wallets.
Betrugsmaschen
Fake exchange-listing announcements
A promoter claims a large venue will list a token at a fixed time.
Betrugsmaschen
Fake law-firm recovery
A website copies lawyers, regulators or investigators and claims seized assets await release.
Betrugsmaschen
Fake listings and borrowed exchange credibility
A screenshot of an announcement is easy to copy and difficult to date.
Betrugsmaschen
Fake MEV-bot contracts
A supposed MEV system advertises passive sandwich or arbitrage income.
Betrugsmaschen
Fake NFT mints
A promoted mint asks for broad permissions or transfers unrelated to the purchase.
Betrugsmaschen
Fake partnership announcements
A token uses a recognised company's logo or a minor vendor interaction as a partnership.
Betrugsmaschen
Fake proof-of-reserves claims
A provider publishes selected wallet balances without complete customer liabilities.
Betrugsmaschen
Fake support screen sharing
A supposed support agent asks to watch or control the screen.
Betrugsmaschen
Fake support: urgency with borrowed branding
Impersonators appear where users are already looking for help.
Marktstruktur
FDV as a valuation weapon
A tiny float sets a price multiplied across the entire supply.