DeFi e governação
ERC-4626: a vault share is not an immediately withdrawable balance
Read conversion rates, fees and withdrawal limits as separate quantities.
Investigação · História · Referências
Todas as entradas A–Z · 6 / 15
438 · Artigos e referências
Contas inteligentes e governação
ERC-6492: signatures from an account that is not deployed yet
An empty address can have a planned contract identity; verification must follow the correct model.
Contas inteligentes e governação
ERC-7579: wallet modules are part of the authority map
Validators, executors and hooks have different powers inside a modular smart account.
Métodos de investigação
eth_getProof: check the state, then check the root you trusted
Account and storage proofs can make an RPC answer verifiable, but they do not choose the canonical chain for you.
Redes e cadeias
Ethereum: applications share a settlement system
ETH, smart contracts and tokens have distinct roles and distinct risks.
História cripto
EthereumMax paid promotion
Kim Kardashian settled SEC charges over an undisclosed $250,000 payment to promote EthereumMax.
História cripto
Euler donation-to-reserves exploit
Euler was exploited in 2023 through interactions involving lending positions and its donation mechanism.
Fundamentos de blockchain
Events and transaction logs
Contracts emit indexed logs consumed by wallets and explorers.
Métodos de investigação
Evidence snapshots: make a finding reproducible
A claim needs enough context to survive a changed interface.
Fundamentos de blockchain
EVM account state
Ethereum tracks balances, nonces, code and contract storage.
Estrutura de mercado
Exchange mark-price discretion
A venue liquidates from an index or mark instead of the last trade.
Tipos de fraude
Fake airdrops and claim pages
An unexpected asset can be an advertisement for a malicious website.
Tipos de fraude
Fake bridge interfaces
A clone accepts approvals or deposits without a valid destination route.
Tipos de fraude
Fake browser extensions
A malicious extension appears beside a legitimate wallet in store or search results.
Tipos de fraude
Fake crypto recruitment tests
A supposed employer asks an applicant to install software, clone a repository or run a coding task.
Tipos de fraude
Fake exchange deposit pages
A clone shows plausible balances after funds reach attacker wallets.
Tipos de fraude
Fake exchange-listing announcements
A promoter claims a large venue will list a token at a fixed time.
Tipos de fraude
Fake law-firm recovery
A website copies lawyers, regulators or investigators and claims seized assets await release.
Tipos de fraude
Fake listings and borrowed exchange credibility
A screenshot of an announcement is easy to copy and difficult to date.
Tipos de fraude
Fake MEV-bot contracts
A supposed MEV system advertises passive sandwich or arbitrage income.
Tipos de fraude
Fake NFT mints
A promoted mint asks for broad permissions or transfers unrelated to the purchase.
Tipos de fraude
Fake partnership announcements
A token uses a recognised company's logo or a minor vendor interaction as a partnership.
Tipos de fraude
Fake proof-of-reserves claims
A provider publishes selected wallet balances without complete customer liabilities.
Tipos de fraude
Fake support screen sharing
A supposed support agent asks to watch or control the screen.
Tipos de fraude
Fake support: urgency with borrowed branding
Impersonators appear where users are already looking for help.
Tipos de fraude
Fake token presales
A project collects funds before a usable market or product exists.
Estrutura de mercado
FDV as a valuation weapon
A tiny float sets a price multiplied across the entire supply.