Cybersecurity & Blockchain Security Experts: Smart Contract Audits, Penetration Tests, Red Team. Book an Audit, Pen Test or Red Team - https://teapawt.net/t.co/U2prXfdW9c
UK
Joined April 2022
- Tweets632
- Following1.2K
- Followers1.4K
- Likes1.4K
HYDN - Cybersecurity Experts retweeted
At @HYDNSecurity , we've spent years on the other side of this fight.
We don't just audit smart contracts, we run red team exercises, penetration testing and specialist Lazarus focused security support and education.
Full breakdown on our blog: hydnsec.com/blog-posts/when-…
Questions? DMs open.
End of 🧵
HYDN - Cybersecurity Experts retweeted
Your employees are using AI tools your security team has never heard of.
They're pasting customer data, internal documents, and sensitive queries into models running on infrastructure you have no visibility into and no logging on.
HYDN surfaces what's already in your environment, turns it into structured intelligence, and routes it into your SIEM, so you can see who is using which AI tools, with what data, before it becomes a breach.
hydnsec.com/ai-security
HYDN - Cybersecurity Experts retweeted
1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories.
Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately.
HYDN - Cybersecurity Experts retweeted
🚨 UPDATE: Mini Shai-Hulud has crossed from @npmjs into @pypi and is still spreading.
Newly confirmed compromised artifacts:
@opensearch-project/opensearch: 3.5.3, 3.6.2, 3.7.0, 3.8.0 (1.3M weekly downloads)
mistralai: 2.4.6 on PyPI
guardrails-ai: 0.10.1 on PyPI
additional @squawk/* packages on npm
guardrails-ai 0.10.1 executes malicious code on import. On Linux, it downloads git-tanstack[.]com/transformers.pyz, writes it to /tmp/transformers.pyz, and runs it with python3 without integrity verification.
The git-tanstack.com domain displayed a message signed “With Love TeamPCP,” along with: “We've been online over 2 hours now stealing creds
Regardless I just came to say hello :^)”
The page also linked to a YouTube video and you can probably guess which one.
HYDN - Cybersecurity Experts retweeted
🚨🚨
We are currently experiencing an issue with the CoW Swap frontend (swap.cow.fi). While we are investigating, please DO NOT use CoW Swap.
HYDN - Cybersecurity Experts retweeted
HYDN - Cybersecurity Experts retweeted
At HYDN we have an internal suite of tools monitoring over 35 different chains for potential vulnerabilities.
We don't post vulnerabilities online for views, we work hard behind the scenes helping a range of projects, from first time founders to multi-million dollar organizations, every month.
We're on a mission to make space more secure by finding issues and alerting projects before black hats can exploit them.
#hydn #cybersecurity #web3
HYDN - Cybersecurity Experts retweeted
Delighted to see one of our long term clients @decubate become the first MiCA-Licensed Launchpad 👏🔒
🛡️ Decubate Makes History: First MiCA-Licensed Launchpad!
Decubate is officially MiCA-licensed! We are the first-ever launchpad to receive authorization under the Markets in Crypto-Assets regulation.
Just as @krakenfx, @bitvavocom, @Bybit_Official, @coinbase, and @okx raced to secure their MiCA licenses, we are taking the lead in the launchpad sector, setting the compliance standard for token launches.
What this represents to you, investor?
🔹 Regulatory oversight
🔹 Solid investor protections
🔹 Full transparency.
While other launchpads remain unregulated, Decubate offers guaranteed safety and a fully regulated token-raise path.
This represents to our whole ecosystem: Institutional-grade trust, stronger user confidence, and a competitive advantage from day one.
🔍 Create your free investor account or apply to launch your project: decubate.com/micar?utm_sourc…
HYDN - Cybersecurity Experts retweeted
🚨 There’s a large-scale supply chain attack in progress: the NPM account of a reputable developer has been compromised. The affected packages have already been downloaded over 1 billion times, meaning the entire JavaScript ecosystem may be at risk.
The malicious payload works by silently swapping crypto addresses on the fly to steal funds.
If you use a hardware wallet, pay attention to every transaction before signing and you're safe.
If you don’t use a hardware wallet, refrain from making any on-chain transactions for now.
It’s still unclear whether the attacker is also stealing seeds from software wallets directly at this stage.
Excellent report here: jdstaerk.substack.com/p/we-j…
HYDN - Cybersecurity Experts retweeted
Why investors should care about MiCAR, and Decubate’s license
For too long, crypto investing was the wild west: no safeguards. No standards. No second chances.
Now, that changes.
Thanks to MiCAR:
- You get refund rights on token sales
- Projects must disclose risks, governance, and structure
- Tokens can’t go live without full regulatory checks
Decubate is the first launchpad to get the MiCA license.
For you, it means your exposure to new tokens just got a whole lot safer.
🟢 Invest early.
🛡️ Invest protected.
🚀 Invest with Decubate.
Join us: decubate.com/micar?utm_sourc…
HYDN - Cybersecurity Experts retweeted
OpenZeppelin Contracts for @arbitrum Stylus v0.3.0-alpha.1 is live 💥
Upgradeable proxies, ZK-optimized curves, and thoughtful access control improvements — big step forward for secure, Rust-native EVM apps.
Here’s what’s inside 👇
HYDN - Cybersecurity Experts retweeted
OpenZeppelin Solidity Contracts 5.4 just dropped 💥
This release brings standard Account Abstraction primitives, advanced signature schemes (multisignature), interoperability features, and new utilities and data structures.
🧵👇
HYDN - Cybersecurity Experts retweeted
🚀 Revert Lend progress update:
🔍 The protocol has now completed 3 audit and mitigation reviews:
✅ @HYDNSecurity github.com/hydnsec/audits/bl…
✅ @code4rena code4rena.com/audits/2024-03…
✅ @peckshield github.com/peckshield/public…
🤝 We have been working closely with @anthiasxyz, who have prepared a risk strategy and initial parameter recommendations.
The team is completing UI integration.
@arbitrum launch is imminent.
HYDN - Cybersecurity Experts retweeted
1/ D8X is now live on @Berachain!
Leveraging Berachain's Proof of Liquidity consensus, we're bringing leverage to illiquid spot markets on Berachain - together with our partner @madhoneyfi - Bmad bmad 🐻⛓️
Here's everything you need to know. Thread 🧵👇
HYDN - Cybersecurity Experts retweeted
Major @Bybit_Official Hack Alert! Some burning questions need addressing. Here's the deal: How did this happen, and what's the fate of the stolen millions (allegedly linked to the infamous Lazarus group)?
Credits to: @ercwl @gauthamzzz @zachxbt @arkham @HYDNSecurity
First, a curious thought: why update Ledger Firmware if you’ve already compromised a target machine, figured out key users, and successfully executed a web inject to show fake TX info? 🤔 Even Ben from ByBit noted on the livestream, "I checked the ledger; it seemed fine..." The need for human-readable transaction info is real!
This was definitely a highly-sophisticated attack. Only government-linked hacker groups can do this. To add, this hack marks the grandest crypto heist EVER—$1.46B+ vanished, a staggering 16% of all past crypto heists combined! But how will they move the loot? The moves are shrouded in mystery.
For insights into North Korea’s alleged fund handling, check out report made by @chainalysis in 2022. The supposed playbook?
1️⃣ Swap ERC20s (like stETH) to ETH
2️⃣ Convert ETH to BTC
3️⃣ Cash out BTC to Chinese Renminbi via Asian exchanges
Is there any chance of getting some of the money back? I think so, they can be blocked in the process of laundering.
But… this game of patience can stretch for years. Fun fact: In 2022, North Korea reportedly still held onto $55M from 2016 hacks. 🤯
Stay vigilant, crypto community! 💼🔍
HYDN - Cybersecurity Experts retweeted
Security First: The D8X Audits 🔒
At D8X, we have prioritised rigorous audits to ensure our protocol stands on solid ground. Here's a look into our audit history:
▶ 2 Audits from @peckshield - Covering the entier D8X ecosystem: Perpetuals, Governance, D8X Token
▶ @PythNetwork oracle integration has been audited by @osec_io
▶ Early version of the smart contracts has been audited by Hacken under a different brand
Continuous Audits: We're committed to ongoing security. Regular audits are part of our ethos, ensuring we stay ahead of potential vulnerabilities. We are right now in the middle of an additional audit on a new feature we are rolling out on @berachain
But our commitment to security doesn't stop at D8X. Our partners, including frontend providers, are also covered by these audits. This means when you interact with D8X through our trusted partners such as @Madhoneyfi , you're backed by the same rigorous security standards we uphold.
Whether it's trading, liquidity provision, or any other interaction, our partners benefit from the trust and reliability these audits bring.
🔗 Learn more about our audits here: d8x.gitbook.io/d8x/audits
HYDN - Cybersecurity Experts retweeted
GM Chads
As y'all know Revert Lend, which was in the works for weeks, will be out on @arbitrum very soon and we couldn't be more stoked!
At this juncture, we wanna give a special shoutout to @UniArbGrants for backing us to get our protocol audited by @HYDNSecurity @code4rena and @peckshield. Sincere gratitude from the Revert team.
King shit fr
