196 matches found
EUVD-2023-0387
Malicious code in bioql PyPI...
Malicious code in uniswap_connect (npm)
The package uniswapconnect was found to contain malicious code...
MAL-2025-37827 Malicious code in uniswap_connect (npm)
The package uniswapconnect was found to contain malicious code...
Malicious code in uniswap-v4-scratchpad-poc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01754c5d133c195a4c109504b5db8355893e90a308a2317d421d8f2d034cad23 Any computer that has this package installed or running should be considered...
MAL-2025-4932 Malicious code in uniswap-v4-scratchpad-poc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01754c5d133c195a4c109504b5db8355893e90a308a2317d421d8f2d034cad23 Any computer that has this package installed or running should be considered...
First-Spammed, First-Served: MEV Extraction on Fast-Finality Blockchains
This research analyzes the economics of spam-based arbitrage strategies on fast-finality blockchains. We begin by theoretically demonstrating that, splitting a profitable MEV opportunity into multiple small transactions is the optimal strategy for CEX-DEX arbitrageurs. We then empirically validat...
Malicious code in pancake_uniswap_validators_utils_snipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 791d7ac8f5692ffcb4db92ed0986a9f6c422640fbbe19c1522dbbc0f813aaeb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-48216
Uniswap Universal Router before 1.1.0 mishandles reentrancy. This would have allowed theft of funds...
The vulnerability of the microprogramming software of the Uniswap Universal Router, which allows a hacker to cause a service failure.
The vulnerability of the Uniswap Universal Router’s microprogramming software is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CVE-2025-25962
An issue in Coresmartcontracts Uniswap v.3.0 and fixed in v.4.0 allows a remote attacker to escalate privileges via the modifyPosition function...
CVE-2025-25962
An issue in Coresmartcontracts Uniswap v.3.0 and fixed in v.4.0 allows a remote attacker to escalate privileges via the modifyPosition function...
CVE-2025-25962
An issue in Coresmartcontracts Uniswap v.3.0 and fixed in v.4.0 allows a remote attacker to escalate privileges via the modifyPosition function...
CVE-2025-25962
An issue in Coresmartcontracts Uniswap v.3.0 and fixed in v.4.0 allows a remote attacker to escalate privileges via the modifyPosition function...
PT-2025-18171 · Unknown · Coresmartcontracts Uniswap
Name of the Vulnerable Software and Affected Versions: Coresmartcontracts Uniswap versions 3.0 through 3.0 Description: The issue allows a remote attacker to escalate privileges via the modifyPosition function. This enables the attacker to gain elevated access, potentially leading to further...
Uniswap 安全漏洞
Uniswap is a core smart contract in the Uniswap open source. A security vulnerability exists in Uniswap version 3.0, which stems from the modifyPosition function potentially leading to elevation of privilege...
CVE-2025-25962
The vulnerability concerns Coresmartcontracts Uniswap, specifically versions 3.0 (and affected 3.x as stated) with a fix in 4.0. The issue enables a remote attacker to escalate privileges via the modifyPosition function, enabling elevated access. Affected component/function: modifyPosition within...
Crypto Scam App Disguised as WalletConnect Steals $70K in Five-Month Campaign
Cybersecurity researchers have discovered a malicious Android app on the Google Play Store that enabled the threat actors behind it to steal approximately $70,000 in cryptocurrency from victims over a period of nearly five months. The dodgy app, identified by Check Point, masqueraded as the...
Malicious code in uniswap-math (PyPI)
--- -= Per source details. Do not edit below this line.=-...
