1079 matches found
Integer Overflow or Wraparound
Overview @openzeppelin/confidential-contracts is a Smart Contract library for use with confidential coprocessors Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the wrap and onTransferReceived functions used by the ERC7984 contract. An attacker can cause user...
ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds.
Impact The ERC7984 contract tracks total supply using a confidential euint64 value. If a call to the internal mint function would result in the total supply overflowing, the call fails silently. The wrap and onTransferReceived functions in ERC7984ERC20Wrapper assume that mint won't fail silently...
Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack
Trust Wallet on Tuesday revealed that the second iteration of the Shai-Hulud aka Sha1-Hulud supply chain outbreak in November 2025 was likely responsible for the hack of its Google Chrome extension, ultimately resulting in the theft of approximately $8.5 million in assets. "Our Developer GitHub...
echidna-credit-union-race-CTF
NOISYECHIDNA — Race Condition CTF This repository implements...
Scammers Abuse WhatsApp Screen Sharing to Steal OTPs and Funds
A fast-spreading threat, known as the screen-sharing scam, is using a simple feature on WhatsApp to steal money…...
GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of Installs
Cybersecurity researchers have disclosed a new set of three extensions associated with the GlassWorm campaign, indicating continued attempts on part of threat actors to target the Visual Studio Code VS Code ecosystem. The extensions in question, which are still available for download, are listed...
Cybercriminals Targeting Payroll Sites
Microsoft is warning of a scam involving online payroll systems. Criminals use social engineering to steal people's credentials, and then divert direct deposits into accounts that they control. Sometimes they do other things to make it harder for the victim to realize what is happening. I feel li...
Europol Dismantles SIM Farm Network Powering 49 Million Fake Accounts Worldwide
Europol on Friday announced the disruption of a sophisticated cybercrime-as-a-service CaaS platform that operated a SIM farm and enabled its customers to carry out a broad spectrum of crimes ranging from phishing to investment fraud. The coordinated law enforcement effort, dubbed Operation...
EUVD-2020-19426
Malware in sbrugna...
EUVD-2019-18969
Malware in sbrugna...
EUVD-2018-4058
Malware in sbrugna...
EUVD-2020-22734
Malware in sbrugna...
EUVD-2018-14583
Malware in sbrugna...
EUVD-2018-14584
Malware in sbrugna...
EUVD-2024-1962
Malicious code in bioql PyPI...
EUVD-2021-28607
Malicious code in bioql PyPI...
EUVD-2023-46895
Malicious code in bioql PyPI...
EUVD-2022-1323
Malicious code in bioql PyPI...