PT-2023-22770 · Npm · @Web3-React/Eip1193 +4

Name of the Vulnerable Software and Affected Versions: @web3-react versions prior to the updated npm artifacts Description: The chainId may be outdated if the user changes chains as part of the connection flow, causing the value of chainId returned by useWeb3React to be incorrect. This can lead t...

Deanonymizing OpenSea NFT Owners via Cross-Site Search Vulnerability

TLDR Recently, a cross-site search vulnerability was discovered affecting the popular NFT marketplace OpenSea. When successfully exploited, this issue allows for the deanonymization of OpenSea users by linking an IP address, a browser session, or an email in certain conditions to a specific...

Malicious code in hardhat-web3-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736287dd58e487359e35a7c53653af7140c45ca2919d533e02fb45b58e898dbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-web3-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b492c5ccdb582dd43eb84cd6e87f55f91de39f0367ce38fa7426091cbccb908f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-493 Malicious code in hardhat-web3-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736287dd58e487359e35a7c53653af7140c45ca2919d533e02fb45b58e898dbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-494 Malicious code in hardhat-web3-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b492c5ccdb582dd43eb84cd6e87f55f91de39f0367ce38fa7426091cbccb908f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

0x-web3 (5.0.0a5), 20220429-pdfminer-jameslp310 (0.0.2) +2183 more potentially affected by CVE-2023-0286 via cryptography (>=0.8.1, <=39.0.0)

cryptography PYPI version =0.8.1, =0.1.0, =0.5.0rc5, =1.0.0, =0.0.1, =1.0.2, =0.1.1, =1.0.0, =2.6.3, =1.0.4, =2.8.1, =2.13.1 and more Source cves: CVE-2023-0286 Source advisory: GHSA-X4QR-2FVF-3MR5...

0x-web3 (5.0.0a5), 20220429-pdfminer-jameslp310 (0.0.2) +2183 more potentially affected by CVE-2023-0286 via cryptography (>=0.8.1, <=39.0.0)

cryptography PYPI version =0.8.1, =0.1.0, =0.5.0rc5, =1.0.0, =0.0.1, =1.0.2, =0.1.1, =1.0.0, =2.6.3, =1.0.4, =2.8.1, =2.13.1 and more Source cves: CVE-2023-0286 Source advisory: MEND:CVE-2023-0286...

Exploring the Vulnerabilities of Seaport: A Technical Analysis of a Fake Signature Attack on Non-Fungible Tokens

Lines of code Vulnerability details Impact This finding aims to provide a comprehensive analysis of the sc4m trend, which emerged in August 2022, and has since been a prevalent issue in the WEB3 space. Despite efforts to combat this phenomenon, bad actors continue to engage in illicit activities,...

“Payzero” Scams and The Evolution of Asset Theft in Web3

In this entry, we discuss a Web3 fraud scenario where scammers target potential victims via fake smart contracts, and then take over their digital assets, such as NFT tokens, without paying. We named this scam “Payzero”...

Web3 IPFS Currently Used For Phishing

We discuss the use of the InterPlanetary File System IPFS in phishing attacks...

Web3 IPFS Only Used for Phishing - So Far

We discuss the use of the InterPlanetary File System IPFS in phishing attacks...

37xDubai – Morningstar Ventures Launches NFT Art Gallery in Dubai

By Deeba Ahmed 37xDubai is established to promote Web3 technology and focus on Web-3-based education, digital/traditional art, and entertainment. This is a post from HackRead.com Read the original post: 37xDubai - Morningstar Ventures Launches NFT Art Gallery in Dubai...

Exploit for CVE-2022-36537

CVE-2022-36537 Summary R1Soft Server Backup Manager uses t...

Exploit for CVE-2022-36537

CVE-2022-36537 Summary R1Soft Server Backup Manager uses t...

GAM3 Awards: Leading crypto firms and influencers to honor best in Web3 gaming

By Deeba Ahmed GAM3 awards are dubbed as the Grammys of the Web3 gaming industry. This is a post from HackRead.com Read the original post: GAM3 Awards: Leading crypto firms and influencers to honor best in Web3 gaming...

Theft of ETH that was not used for successful execution of orders in non-atomic execution

Lines of code Vulnerability details Description There is an execute function in LooksRareAggregator contract. It refunds any ETH that was unused for example that left due to the unsuccessful execution of an order at the end of its execution flow: returnETHIfAnyoriginator; returnETHIfAny function ...

AS Roma’s Paulo Dybala is the new face of Web3 soccer game MonkeyLeague

By Deeba Ahmed MonkeyLeague allows players to build a dream team of MonkeyAthlete NFTs to fill field positions and compete against real users. This is a post from HackRead.com Read the original post: AS Romas Paulo Dybala is the new face of Web3 soccer game MonkeyLeague...

MAL-2022-7084 Malicious code in web3-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77fdc33138ce74bde93c5bcbd67fafc405aeeb7ae156a91124a5500d3f1b869c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77fdc33138ce74bde93c5bcbd67fafc405aeeb7ae156a91124a5500d3f1b869c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...