Mar 22A secret secure(?) communication channel for Ronin Bridge Exploiter and Euler Finance ExploiterBackground On Mar-21–2023 05:02:23 PM +UTC, Ronin Bridge Exploiter sent a message to Euler Finance Exploiter 2 at Ethereum chain: https://etherscan.io/tx/0xcf0b3487dc443f1ef92b4fe27ff7f89e07588cdc0e2b37d50adb8158c697cea6 Decrypt with the private key of 0xb66cd966670d962c227b3eaba30a872dbfb995db (https://github.com/LimelabsTech/eth-ecies). …Research6 min readResearch6 min read
Aug 31, 2022[TH] Paradigm CTF 2022 WriteupFor English version, please visit: https://inspexco.medium.com/paradigm-ctf-2022-writeup-2ce290cd9287 ทีมงานของ Inspex ได้เข้าร่วมการแข่งขัน Paradigm CTF 2022 ในชื่อทีม _C0FFEE และคว้าอันดับที่ 15 ของโลกจากผู้เข้าแข่งขันทั้งหมด 445 ทีม ด้วยคะแนนรวม 2,465.1 คะแนนBlockchain Security17 min readBlockchain Security17 min read
Aug 29, 2022Paradigm CTF 2022 Writeupสำหรับเวอร์ชั่นภาษาไทย สามารถอ่านได้ที่: https://inspexco.medium.com/th-paradigm-ctf-2022-writeup-ae7b6a86fcec Inspex team members participated in Paradigm CTF 2022 on the _C0FFEE team and ranked 15th from a total of 445 teams with a total score of 2,465.1.Ctf Writeup22 min readCtf Writeup22 min read
Aug 19, 2022Inspex Library Major Update — Better UX/UI and New Features.The Inspex Library has made significant improvements to its aesthetics and ease of use and can also display more detailed audit information. Inspex Library is a smart contract audit dashboard that collects smart contract audit results in one place. …Smart Contracts3 min readSmart Contracts3 min read
Aug 8, 2022StarkNet Smart Contract Common PitfallsThere are currently a lot of solutions that have been introduced to solve the Ethereum scaling and gas pricing issues. Rollups is a layer 2 blockchain solution that is used to improve the scalability by operating the computational part on layer 2, while storing the data on layer 1. …Starknet7 min readStarknet7 min read
Jun 9, 2022How 20 Million $OP Was Stolen from the Multisig Wallet (Not Yet) Owned by WintermuteWintermute was engaged by the Optimism Foundation for liquidity provisioning services on the $OP launch. On May 27, 2022, 20 million $OP was allocated to Wintermute from the Foundation’s Partner Fund. However, Wintermute later found that they could not access these tokens because they had provided an Ethereum (L1) multisig…Optimism5 min readOptimism5 min read
May 23, 2022End-to-End DApp Security Assessment Serviceสำหรับ Decentralized Application (DApp) ต่าง ๆ การพัฒนา smart contract ให้มีความปลอดภัยนั้นเป็นสิ่งสำคัญอย่างมาก แต่นอกเหนือจากนั้น off-chain component อื่น ๆ (ส่วนของการทำงานที่อยู่นอก Blockchain) ก็มักถูกใช้งานร่วมกับ smart contract เพื่อให้บริการกับผู้ใช้ด้วยเช่นกัน ซึ่งในหลาย ๆ ครั้ง แม้ว่า smart contract จะได้รับการตรวจสอบความปลอดภัยอย่างดีแล้ว แต่แพลทฟอร์มกลับถูกโจมตีผ่านทาง off-chain component ก่อให้เกิดความเสียหายเป็นมูลค่ามหาศาล ตามที่เห็นได้จากหลากหลายตัวอย่าง ไม่ว่าจะเป็น:Dapps3 min readDapps3 min read
May 23, 2022End-to-End DApp Security Assessment ServiceIntroduction to End-to-End DApp Security Assessment Service For Decentralized Applications (DApp), developing smart contracts securely is one of the most critical parts. Nevertheless, off-chain components are also frequently used together with smart contracts to provide further functionalities for the users. In many occurrences, even when the smart contracts are properly assessed or audited, the platform can still…Dapps4 min readDapps4 min read
Apr 27, 2022Introducing Smart Contract Security Testing GuideSince the inept of smart contracts, exploits and attacks have always been prevalent in this world of decentralized applications, as can be seen from various sources such as: https://rekt.news/ https://defiyield.app/rekt-database Unlike traditional software that can be easily patched, most smart contracts cannot be modified after they are deployed, and allowing…Smart Contracts3 min readSmart Contracts3 min read
Apr 7, 2022Inverse Finance’s Incident Analysis —$INV Price ManipulationOn Apr 02, 2022, 11:04:09 AM UTC (block 14506359), the attacker borrowed assets from Inverse Finance using a collateral asset that had less actual value than the borrowed assets. The price of the collateral asset on Inverse Finance becoming more expensive at the time, making $INV collateral with more borrowable…Incident Analysis7 min readIncident Analysis7 min read
![[TH] Paradigm CTF 2022 Writeup](https://miro.medium.com/v2/resize:fill:224:224/1*P66O6qMoHUDkiKgWk944Sw.jpeg)
![[TH] Paradigm CTF 2022 Writeup](https://miro.medium.com/v2/resize:fill:160:112/1*P66O6qMoHUDkiKgWk944Sw.jpeg)
