Proxy implementation changes
A proxy delegates to replaceable implementation code.
MASTR
Support the work
MASTR CRYPTO WIKI
All entries · 10 / 13
Research articles and reference entries are published in English. Navigation is available in seven languages.
Research articles and reference entries are published in English. Navigation is available in seven languages.
Proxy-upgrade rugs
A proxy delegates calls to implementation code replaceable by an administrator.
PSBT: moving an unsigned Bitcoin transaction between devices
An offline signer still needs to verify the outputs and fee of the transaction it signs.
Public mempools
A public mempool exposes pending transaction data before inclusion.
QR-code substitution
A payment or connection QR code is replaced on a page, document or physical surface.
QuadrigaCX and the missing custody record
QuadrigaCX entered creditor protection after founder Gerald Cotten died and customer assets could not be reconciled.
Rebate-driven fake activity
Fee rebates or token rewards make circular trading profitable.
Recovery scams: the second loss
A promise to retrieve stolen crypto can become another request for money or keys.
Recovery-phrase verification scams
A form claims recovery words must be validated, synchronised or upgraded.
Reentrancy
An external call transfers control before the caller finishes state updates.
Referral conflicts
A promoter earns when followers trade, borrow or pay spreads.
Referral income: a promoter can profit when you overtrade
The event that triggers payment explains more than the enthusiasm of the recommendation.
Related-party lending
A platform extends favourable credit to an affiliated firm.
Relationship investment fraud
A long conversation builds trust before a controlled crypto platform is introduced.
Relationship-based investment fraud
Trust can be built for weeks before the fake trading platform appears.
Remote-access tool abuse
A victim installs legitimate remote-control software at a scammer's direction.
Replace-by-fee: an unconfirmed payment is not final settlement
Mempool replacement policy and blockchain consensus are different things.
Reserve assets and liabilities: the missing half of a solvency claim
Showing controlled assets cannot establish which customers and creditors have competing claims on them.
Restaking and correlated risk
Restaking reuses stake across additional services.
Role-based access control
Named roles divide administrative powers.
Ronin validator compromise
The 2022 Ronin theft followed compromise of enough validator keys to authorise bridge withdrawals.
Ronin: bridge theft and attribution
A documented attribution should identify the authority making it and the incident it covers.
Rug pulls: identify which control caused the loss
Liquidity removal, insider selling and abusive contract permissions are different mechanisms.
SafeMoon: the liquidity claim, conviction and 2026 sentence
The legal record concerns access to supposedly locked liquidity and diversion of investor assets.
SAFT discounts and public-market asymmetry
Private token agreements grant prices and information unavailable to public buyers.
Same-origin policy: the browser's boundary between sites
Scheme, host and port determine which documents share an origin.
Sandwich attacks
An attacker trades before and after a visible swap.
Search-ad poisoning
A paid search result places a clone above the real exchange or protocol.
SecondFi: wallet reputation and incident communication
The archived analysis and today's official guidance answer different questions.
Seed-phrase harvesting
A website, chat or fake recovery tool asks for the words that derive every wallet key.