Copy-trading execution gaps
Followers receive later fills, different sizes, fees and liquidity than the displayed leader.
MASTR
Support the work
MASTR CRYPTO WIKI
All entries · 4 / 13
Research articles and reference entries are published in English. Navigation is available in seven languages.
Research articles and reference entries are published in English. Navigation is available in seven languages.
Cosmos: a framework is not one shared security guarantee
Independent chains can communicate while retaining different validator and governance risks.
Counterfeit DEX frontends
A copied exchange routes swaps through a malicious router.
Counterfeit NFT listings
Copied media is listed under a different token contract.
Counterfeit stablecoins
A token copies a major stablecoin name without the issuer's contract or redemption claim.
Cream Finance lending exploits
Cream Finance experienced several exploits involving lending markets and integrated assets.
Creator-wallet mapping
Deployer, treasury, fee and liquidity wallets can be separate addresses under related control.
Cross-chain message execution
Destination effects depend on messages accepted from another system.
Crypto pig-butchering operations
Organised groups combine social engineering with controlled investment interfaces.
Crypto-ATM impersonation scams
A caller claiming to be a bank or authority orders cash deposited into a crypto ATM.
Cryptopia exchange liquidation
New Zealand exchange Cryptopia suffered a 2019 security breach and later entered liquidation.
Curve Vyper reentrancy incident
Several Curve pools were exploited in 2023 after a compiler issue affected protections in specific Vyper versions.
Custody: what you control and what you depend on
Keys, devices, recovery and withdrawal rights belong in the same decision.
Customer-asset rehypothecation
A custodian lends, pledges or invests assets customers expect to withdraw.
DAO governance: transparent votes can still concentrate power
Proposal rights, quorum, delegation and execution determine who can direct the assets.
Data availability
Participants need transaction data to reconstruct state and exit.
Data availability: can the state be independently reconstructed?
A commitment identifies data; availability determines whether the required data can be obtained.
Deepfake executive livestreams
Generated video or copied broadcasts impersonate a public figure.
Delegatecall authority
Delegatecall runs another contract's code in the caller's storage context.
Discord account takeovers
A compromised team or moderator account publishes an emergency link.
Discounted OTC tokens promoted at market price
An influencer buys below market and promotes into public demand.
Divergence loss: what a liquidity position gives up relative to holding
Fee income and inventory changes must be evaluated together.
DMM Bitcoin, 2024: a recruitment lure reached a custody workflow
The official attribution follows a fake coding test through session impersonation to a manipulated transaction request.
DNS hijacking
Domain records are changed so a real name resolves to attacker infrastructure.
DNS: the name is part of the security boundary
A familiar domain must still resolve to the intended service.
Dust-token message scams
A token name, NFT description or tiny transfer contains a malicious URL.
Economic and protocol finality
Finality defines when reversal becomes impossible or economically exceptional.
EIP-1559 base fees
Ethereum burns a protocol base fee that adjusts with block utilisation.
EIP-712 domains: what stops a signature travelling to another application?
Readable fields help, but the signed domain and replay controls still matter.
EIP-7702: delegation deserves its own review
An account upgrade can change the code used when your address is called.