@0xbitslab

Securing and Building EMERGING Web3 Ecosystems 🛡️Sub-brand： @MoveBit_ | @ScaleBit_ | @TonBit_

bitslab.xyz/
Joined July 2024
  • Tweets400
  • Following158
  • Followers7.5K
119Media

EIP-8141 Explained: How Frame Transactions Bring Account Abstraction to Ethereum’s Consensus Layer

On January 29, 2026, EIP-8141, the core standards proposal known as Frame Transaction, was officially published. The proposal was co-authored by Vitalik Buterin, Matt Garnett, Felix Lange, Yoav Weiss,…

Article · @0xbitslab
1
3
110
5,489
BitsLab AI is BitsLab's AI-powered smart contract security scanner.

BitsLab AI Case Studies: Detecting Web3 Business Logic Vulnerabilities

👉 Learn more about BitsLab and BitsLab AI

Article · @0xbitslab
3
221
9,777
How a Uniswap v4 Delta Settlement Flaw Led to a Loss of Funds？

GoldPesa Exploit Analysis: How a Uniswap v4 Delta Settlement Flaw Led to a Loss of Funds

On October 2, 2026, the GoldPesa (GPX) Uniswap v4 Hook contract GPXHooks on the Base network was exploited through a single atomic transaction attack. The victim suffered a loss of 114,999.999186 USDC…

Article · @0xbitslab
3
2
1
217
7,126

Set Protocol's 8.11 WETH Exploit: A Rounding Flaw in Share Accounting

On October 6, 2026, ETHMACOAPY, a legacy Set Protocol product on Ethereum, reportedly lost approximately 8.11 WETH through two abnormal withdrawal transactions. The second transaction occurred just tw…

Article · @0xbitslab
113
6,211
The Shift Toward Continuous Web3 Security.

Beyond Point-in-Time Audits: The Shift Toward Continuous Web3 Security

Over the past few years, smart contract audits have become a standard part of the Web3 launch process. Teams build and test their protocols, bring in an independent security firm, address the findings…

Article · @0xbitslab
2
1
180
6,825

When 1 Means Both 1 Wei and Token ID #1: Inside the OMNI404 Exploit

In the evolving landscape of Decentralized Finance (DeFi) and Non-Fungible Tokens (NFTs), hybrid token standards combining ERC-20 and ERC-721 functionality (such as ERC-404 and its variants) have gain…

Article · @0xbitslab
3
107
4,049
In BitsLab’s security analysis of cross-VM systems, precompiles, and native modules, this type of state mismatch is a key area of focus.

One Balance Mismatch, 6 Chains Hit: Inside the $5.7M Cosmos EVM Exploit

Between August 20 and August 25, 2026, attackers exploited a balance-handling flaw in Cosmos EVM across multiple Cosmos-based networks. Cosmos Labs later confirmed that six networks were exploited. Ap…

Article · @0xbitslab
6
1
1
91
15,100
How the $8.5M Term Finance Exploit Exposed a Governance Security Gap

Beyond Smart Contract Bugs: How the $8.5M Term Finance Exploit Exposed a Governance Security Gap

Security incidents in DeFi are increasingly revealing a fundamental shift: the most dangerous vulnerabilities are not always hidden inside smart contract code. They often exist in the assumptions surr…

Article · @0xbitslab
2
2
5
2,527
Why upgrade permissions can be more dangerous than smart contract vulnerabilities?

Your Smart Contract Has No Bug. Your Upgrade Authority Does.

In smart contract security, most discussions start with a familiar question: does the code contain vulnerabilities?

Article · @0xbitslab
2
3
5
2,472
Participating in a meeting could have exposed the Zoom client to remote attack?

A Zoom Zero-Click RCE in 24 Hours: AI Is Changing the Exploit Timeline

For most users, joining a Zoom meeting would not normally be considered an attack surface. There is no need to open a suspicious attachment, click a link, or download a file. But a recently disclosed …

Article · @0xbitslab
2
1
4
4,222

One Email Is All It Takes: How nanobot Becomes a Zero-Click Executor

As AI Agent frameworks scale into production, identity authentication and prompt injection are being chained together in increasingly subtle ways. During a code review of the open-source agent framewo…

Article · @0xbitslab
5
5
8
437

Balancer V2's Singleton Vault: 6 Design Tricks Worth Stealing

In 2020, while every other AMM was iterating on the "one contract per pool" model that Uniswap V2 popularized, Balancer made a counterintuitive call: put every token from every pool into a single cont…

Article · @0xbitslab
1
89
Load more