The CoinSec Podcast

Latest Episodes:

Episode 67: Guests from AnChain.AI, Tornado Cash Sanctions, DeBridge Phishing Attack, Curve Hack Aug 16, 2022

Show notes

In this episode we were joined by guests from AnChain.ai who talked about their upcoming CTFs they are putting on. Tornado Cash has been sanctioned by OFAC. We talked about the repercussions of these sanctions. We discussed a phishing attack against DeBridge Finance employees. NEAR Protocol revealed that SMS and email data that was used as wallet recovery options were leaked to a third party in June. Curve Finance was hacked via a DNS hijack. Ethereum's Proof of Stake merge is getting closer!

Episode 66: Nomad Bridge Hack, Solana Wallet Draining Attack, New Threat Intel Discord Bots Aug 10, 2022

Show notes

In this episode of the CoinSec Podcast we talked about the $190 million Nomad bridge hack. Users of the Solana wallet Slope found that their tokens were being sent without authorization resulting in $6 million in losses across 9000 wallets. ZBExchange was drained for nearly $5 million. We discussed critical vulnerabilities discovered in Moonbeam and Strips finance. Our CoinSec Discord has new bots that are for assisting in blockchain threat intel.

Episode 66: Nomad Bridge Hack, Solana Wallet Draining Attack, New Threat Intel Discord Bots Aug 10, 2022

Show notes

Episode 65: Nirvana Hack, Audius Governance Takeover, Premint Hack, and Uniswap Phishing Attack Aug 02, 2022

Show notes

In this episode we talked about a $3.5 million theft from the Solana stablecoin Nirvana via a flash loan attack. The music-related token Audius was hit by a governance takeover. Premint's website suffered an issue where it appeared that malicious JavaScript was being injected into the site, causing malicious wallet requests to visitors of the site. A sophisticated phishing attack targeting Uniswap users was discussed. Metamask has updated their browser extension to display the implications of token approval transactions.

Episode 65: Nirvana Hack, Audius Governance Takeover, Premint Hack, and Uniswap Phishing Attack Aug 02, 2022

Show notes

Episode 64: Steven Walbroehl from Halborn, Critical Wallet Vuln, Served via NFT & Multiple Hacks Jun 21, 2022

Show notes

In this episode we are joined by special guest Steven Walbroehl from Halborn Security to discuss a critical wallet vulnerability they discovered. A law firm served a hacker with a restraining order via NFT. ApolloX had a bug in their network's trading rewards contract that resulted in an attacker stealing $2.8 million. Inverse Finance was hit for a 2nd time this year via an Oracle Manipulation attack. GYM Network had a function that lacked caller verification that resulted in a hack of $2.1 million. Osmosis Exchange was hacked for $5 million. Maiar Exchange was brought offline after a $113 million hack of the Elrond virtual machine. Wintermute made a mistake when attempting to receive airdropped Optimism governance tokens that resulted in the loss of around $27.6 million.

Episode 63: Solana Halted, Former OpenSea Employee Arrested, Mirror Protocol Hack, and Puzzles Jun 08, 2022

Show notes

In this episode we discussed Solana network downtime due to a bug that led to non-determinism resulting in a lack of consensus. A former OpenSea employee was arrested after being accused of using his knowledge of which NFTs would be featured on the site's home page to make financial gain. Mirror Protocol was hacked for $90 million. Internet sleuth ZachXBT posted a thread allegedly revealing that the Animoon NFT project was a rug pull. The World of Solana team was able to recover some NFTs that were stolen via scams. We discussed crypto-related puzzles including the ongoing Phrazeboard puzzle as well as an amazing, augmented reality game puzzle created by the SheetFighter NFT project.

Episode 62: CoinZilla Malicious Ads, Blizz Finance and Venus Protocol Hacks, Mee6 Bot Compromise Jun 01, 2022

Show notes

A phishing attack targeting users of popular crypto data sites like Etherscan and CoinGecko was found that uses CoinZilla ad networks. Two lending platforms, Venus Protocol on BSC and Blizz Finance on Avalanche, have been drained of $13.5 and $8.3M, respectively. NeorderDAO had a private key compromise. The popular Mee6 Discord bot was compromised and used to post scam messages in high profile Discord servers.

Episode 61: UST Depeg, FEI Rari, Saddle Finance, Deus DAO, MMFinance, & Fortress Protocol Hacks May 20, 2022

Show notes

In this episode we discussed the $UST (Terra Luna) depeg issue that is ongoing. Multiple hacks were discussed this week including FEI Rari, Saddle Finance, Deus DAO, MMFinance, and Fortress protocol. An Internet sleuth helped track down stolen funds for person. A vulnerability was discovered in Everscale wallet. OpenSea's Discord was hacked. NiceHash found a way to bypass Nvidia's LHR protection that prevents miners from leveraging the hardware to its full capabilities.

Episode 60: Ronin Bridge Hack, Sanctions, Elephant Money Hack, Beanstalk Hack, Metamask Phishing Apr 20, 2022

Show notes

In this episode we discuss Axie Infinity's Ronin Bridge hack and how it has been tied to the North Korean Lazarus group. An Ethereum developer has been imprisoned for helping North Korea evade sanctions. Tornado Cash has implemented a measure to help block OFAC-sanctioned addresses. Elephant Money and Beanstalk Farms were both hacked. Metamask has issued a warning regarding iCloud backups. A critical Cross-Site Scripting (XSS) bug was found in Rarible's website.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected