Proxy implementation changes
A proxy delegates to replaceable implementation code.
MASTR
Apoiar o trabalho
MASTR CRYPTO WIKI
Todas as entradas · 10 / 13
Os artigos de investigação e as referências são publicados em inglês. A navegação está disponível em sete idiomas.
Os artigos de investigação e as referências são publicados em inglês. A navegação está disponível em sete idiomas.
Proxy-upgrade rugs
A proxy delegates calls to implementation code replaceable by an administrator.
PSBT: moving an unsigned Bitcoin transaction between devices
An offline signer still needs to verify the outputs and fee of the transaction it signs.
Public mempools
A public mempool exposes pending transaction data before inclusion.
QR-code substitution
A payment or connection QR code is replaced on a page, document or physical surface.
QuadrigaCX and the missing custody record
QuadrigaCX entered creditor protection after founder Gerald Cotten died and customer assets could not be reconciled.
Rebate-driven fake activity
Fee rebates or token rewards make circular trading profitable.
Recovery scams: the second loss
A promise to retrieve stolen crypto can become another request for money or keys.
Recovery-phrase verification scams
A form claims recovery words must be validated, synchronised or upgraded.
Reentrancy
An external call transfers control before the caller finishes state updates.
Referral conflicts
A promoter earns when followers trade, borrow or pay spreads.
Referral income: a promoter can profit when you overtrade
The event that triggers payment explains more than the enthusiasm of the recommendation.
Related-party lending
A platform extends favourable credit to an affiliated firm.
Relationship investment fraud
A long conversation builds trust before a controlled crypto platform is introduced.
Relationship-based investment fraud
Trust can be built for weeks before the fake trading platform appears.
Remote-access tool abuse
A victim installs legitimate remote-control software at a scammer's direction.
Replace-by-fee: an unconfirmed payment is not final settlement
Mempool replacement policy and blockchain consensus are different things.
Reserve assets and liabilities: the missing half of a solvency claim
Showing controlled assets cannot establish which customers and creditors have competing claims on them.
Restaking and correlated risk
Restaking reuses stake across additional services.
Role-based access control
Named roles divide administrative powers.
Ronin validator compromise
The 2022 Ronin theft followed compromise of enough validator keys to authorise bridge withdrawals.
Ronin: bridge theft and attribution
A documented attribution should identify the authority making it and the incident it covers.
Rug pulls: identify which control caused the loss
Liquidity removal, insider selling and abusive contract permissions are different mechanisms.
SafeMoon: the liquidity claim, conviction and 2026 sentence
The legal record concerns access to supposedly locked liquidity and diversion of investor assets.
SAFT discounts and public-market asymmetry
Private token agreements grant prices and information unavailable to public buyers.
Same-origin policy: the browser's boundary between sites
Scheme, host and port determine which documents share an origin.
Sandwich attacks
An attacker trades before and after a visible swap.
Search-ad poisoning
A paid search result places a clone above the real exchange or protocol.
SecondFi: wallet reputation and incident communication
The archived analysis and today's official guidance answer different questions.
Seed-phrase harvesting
A website, chat or fake recovery tool asks for the words that derive every wallet key.