Rangashree (rangashree)

The recent $572K @FilamentFinance hack was not caused by a conventional smart contract vulnerability, but by a more serious error in collateral accounting and liquidity assumptions. In the latest analysis, I explain how the attack occurred, where protocol logic failed, and what long-term precautions DeFi teams should consider to avoid repeat attacks. Read the post-incident report: https://medium.com/@rangashree.rangaraja/how-572-000-was-drained-on-the-other-end-of-the-collateral-accounting-loophole-in-the-filament-pro-4276c457c30a

• 0 replies
• 0 recasts
• 0 reactions

gNoice

• 0 replies
• 0 recasts
• 0 reactions

In the recent @hackenclub's $HAI hack, an attacker managed to mint 900 million tokens and pocket over $250,000 thanks to a single smart contract bug. What was the mistake? A crucial mint function became accessible to the public due to an oversight in the ownership check, and the exploit spread rapidly. Here I detail the flaw, the attacker's process, and the takeaways for Web3 auditors and developers. Read the in-depth hack analysis here- https://medium.com/@rangashree.rangaraja/900-000-000-tokens-minted-over-250k-stolen-91f9a00b4814

• 0 replies
• 0 recasts
• 0 reactions

@ackee's School of Solana Bootcamp Season 7, here I come!

• 0 replies
• 0 recasts
• 0 reactions