官方的 MASTR 标志 MASTR
菜单
阅读文章

钓鱼攻击、漏洞与隐私

Security and verification · 19 Aug 2026

I’m being paid to perform full security assessments on 2 of them, while I gave another 5 only a rough 30-minute pass. Even at that depth, some of the vulnerabilities and basic security failures I found are frankly alarming.

原文为英语,导航提供七种语言。

01

查看 X 原帖 ↗

You all know how many breaches, exploits and hacks we’ve seen lately.

I’m currently reviewing and assessing several Web3 platforms.

I’m being paid to perform full security assessments on 2 of them, while I gave another 5 only a rough 30-minute pass. Even at that depth, some of the vulnerabilities and basic security failures I found are frankly alarming.

It’s not difficult to understand why this industry keeps getting exploited when platforms go live with weak architecture, poor access controls, insecure implementations and obvious attack surfaces that should have been addressed long before users put money at risk.

Btw:
If you run a platform and want a proper security assessment, you can contact me. These assessments are neither free nor cheap because a serious review requires many hours of work. I don’t just identify weaknesses.

I document findings, assess severity, explain the underlying risk and provide concrete remediation recommendations based on established security and computer science best practices.

You receive a professional report your technical team can actually work with.

相关研究

钓鱼攻击、漏洞与隐私

Privacy, surveillance and control

A discussion of surveillance, data collection and the relationship between privacy and personal autonomy.

原创文章4 min
MASTR

支持独立研究

这里的调查、原始证据和指南均可免费阅读。自愿捐赠帮助支付研究成本,让 MASTR 能够继续提供工具。

打开钱包