Tom Heath’s Post

"Rug pulls" are an all too common occurrence in Web3, with the majority of victims unable to detect red flags that a project might be suspect. The good news is, awareness and education can help you spot a rug pull and secure your funds before it's too late. Our latest blog post delves into the mechanics of rug pulls and shares crucial tips on how to avoid them. We also explore how conducting on-chain finance on Haven1 safeguards users against rugpulls with unique security and identity measures. Get all the nitty gritty details on how rug pulls work, the various types of rug pulls, and how to proactively spot the warning signs: https://lnkd.in/dnFrnz4h

Heads up, frens! Looks like WOOFI on Arbitrum was targeted by a hacker. They manipulated the price and made off with ~$8.5M. Here's the breakdown: - The attacker used a flash loan to get a bunch of $USDC.e and $Woo. - Then, they kept swapping these tokens back and forth REPEATEDLY. - A bug in the WooPPV2 contract let them mess with the price during these swaps. The good news is that the team caught on and PAUSED the contract to prevent further damage. Stay vigilant, frens, and DYOR before making any trades! #Hack #StaySafe

Potential Bull Market? 🚀 Experience tells us that hackers often exploit projects during bullish conditions. Time to fortify your defenses against potential threats and ensure the safety of your projects! #QuillAudits #web3security #web3 #bullrun #bullmarket

You've probably heard the difference between a ZK-SNARK and a ZK-STARK is that the ZK-STARK is post-quantum secure and doesn't require a trusted setup. But why is that? The core cryptographic building block behind SNARKs is elliptic curve cryptography, which is known to be post-quantum insecure. STARKs on the other hand use random sampling of a Merkle tree to make a zero knowledge proof. Merkle trees can be built from hashes which are believed to be post-quantum secure. The requirement of a trusted-setup is not so clear cut however. Elliptic curves do not require trusted setups to run. It is possible to use elliptic curve-based ZK algorithms without a trusted setup -- this is what Bulletproofs and Halo2 are based on. However, using a trusted setup generally leads to more efficient algorithms for the verifier. Without a trusted setup, the verifier has to, loosely speaking, "make up for" the work that the trusted setup did.

Crypto Vulnerability Allows Cloning of YubiKey Security Keys: YubiKey security keys can be cloned via a side-channel attack that leverages a vulnerability in a cryptographic library. The post Crypto Vulnerability Allows Cloning of YubiKey Security Keys appeared first on SecurityWeek.

I'm excited to share that Chainproof and http://defiprotection.com are offering the best rates across the industry for covering (liquid) restaking risks. Read more about the risks and mitigations in our recent blog post.

Hello #connections, In today's world, frauds have become a common occurrence affecting us directly or indirectly, and it's natural to question the security of the systems we use. I want to bring to your attention a fraudulent activity happening in lottery and raffle systems, where participants are being scammed for a lot of real money. To tackle this issue, I have developed Smart Lottery - a decentralized system that ensures the participants are not scammed. The system is designed in such a way that there is no owner of the contract, and the randomness of winner selection is done with the help of Chainlink VRF, which automatically picks a random winner. Additionally, the winner is picked automatically after a certain interval. I have also written various tests and hope to increase the effectiveness of the code in the future. Check out the Github Repo Link to learn more about the project. https://lnkd.in/gRAZVGbn Let's work together to create a more secure and trustworthy environment.

Hello LinkedIn community Machine #pwned successfully difficulty : hard Just wrapped up the "#CherryBlossom" challenge Boot-to-root with emphasis on crypto and password cracking on TryHackMe - a tough nut to crack with its focus on cryptography and password cracking. 💻🔓 It was a journey filled with challenges, but with persistence and problem-solving skills, I managed to conquer it. 💪 #TryHackMe #CherryBlossom #CTF #CyberSecurity #InfoSec #EthicalHacking #Boot2Root #HardDifficulty #Cryptography #PasswordCracking