Daily Writeups
@Daily_Writeups
3.57K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.57K subscribers
Daily Writeups
⤷ Title: The Solidity delete Trap: How a Simple Keyword Can Wipe Out a Protocol's Revenue
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 16:00:16 GMT
════════════════════════
⌗ Tags: #solidity #bug_bounty #web3_security #smart_contracts #cybersecurity
Medium
The Solidity delete Trap: How a Simple Keyword Can Wipe Out a Protocol's Revenue
Exploring a real-world smart contract vulnerability where state machine mismanagement and a 12-week timelock collided to create a complete…
27 views
Daily Writeups
⤷ Title: Breaking Immutability: How I Bypassed a Core Security Invariant in a Major DeFi Protocol
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 11:42:05 GMT
════════════════════════
⌗ Tags: #web3_security #solidity #bug_bounty #defi #smart_contracts
Medium
Breaking Immutability: How I Bypassed a Core Security Invariant in a Major DeFi Protocol
In the world of smart contract security, immutability is a sacred concept. When a protocol’s documentation explicitly states that a core…
17 views
Daily Writeups
⤷ Title: Critical Web3 Vulnerability: Full Account Takeover via Arbitrary Internal Self-Calls in Smart…
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Sat, 28 Feb 2026 19:04:04 GMT
════════════════════════
⌗ Tags: #web3_security #smart_contracts #solidity #bug_bounty #cybersecurity
Medium
Critical Web3 Vulnerability: Full Account Takeover via Arbitrary Internal Self-Calls in Smart Wallets
How a missing target validation led to a complete compromise of a modular smart contract wallet.
53 views
Daily Writeups
⤷ Title: ClickFix Alert: Fake Venture Capitalists Target Web3 Pros with “Terminal” Phishing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 00:29:06 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #cryptocurrency #cyber_espionage #infosec #LinkedIn Scams #malware #Moonlock Lab #North Korean hackers #social engineering #UNC1069 #Web3 security
Daily CyberSecurity
ClickFix Alert: Fake Venture Capitalists Target Web3 Pros with "Terminal" Phishing
Moonlock Lab uncovers a North Korean-aligned malware campaign targeting Web3 pros. Attackers use fake VC profiles and ClickFix CAPTCHAs to deploy malware.
16 views
Daily Writeups
⤷ Title: Malicious “Hex Visualizer” Chrome Extension Targeting imToken Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:37:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chrome Extension Phishing #Crypto Wallet Drainer #Cryptocurrency Security #Homoglyph Attack #ImToken Chromophore #infosec #Malware Analysis #Seed Phrase Theft #Socket Threat Research #Web3 security
Daily CyberSecurity
Malicious "Hex Visualizer" Chrome Extension Targeting imToken Users
Socket researchers uncover "ImToken Chromophore," a malicious Chrome extension using fake branding and homoglyphs to steal crypto wallet seed phrases.
17 views
Daily Writeups
⤷ Title: The ‘Contagious Interview’ Trap: How a Web3 CEO Unmasked North Korean Stealth Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:07:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contagious Interview #cybersecurity #infosec #Kill Switch #LinkedIn Phishing #Malware Analysis #North Korean malware #social engineering #threat intelligence #Web3 security
Daily CyberSecurity
The 'Contagious Interview' Trap: How a Web3 CEO Unmasked North Korean Stealth Malware
A fake LinkedIn recruiter and a poisoned GitHub repo: See how a CEO uncovered the North Korean "Contagious Interview" malware targeting Web3 developers.
16 views
Daily Writeups
⤷ Title: How I Found a $1,000 Signature Replay Vulnerability in a Blockchain Bridge SDK
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 18:22:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #web3_security #defi_security #ethical_hacking #blockchain
Medium
How I Found a $1,000 Signature Replay Vulnerability in a Blockchain Bridge SDK
A Step-by-Step Journey from Code Review to Bounty
30 views
Daily Writeups
⤷ Title: How I Found a $1,000 Signature Replay Vulnerability in a Blockchain Bridge SDK
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 05:08:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #web3_security #defi_security #ethical_hacking #blockchain
Medium
How I Found a $1,000 Signature Replay Vulnerability in a Blockchain Bridge SDK
A Step-by-Step Journey from Code Review to Bounty
19 views
Daily Writeups
⤷ Title: LLM Injection + Unlimited Approval + RCE: The Coinbase AgentKit Attack Chain
════════════════════════
𐀪 Author: xxmrlnxx
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:05:04 GMT
════════════════════════
⌗ Tags: #bug_bounty #prompt_injection_attack #web3_security #cybersecurity #ai_security
Medium
LLM Injection + Unlimited Approval + RCE: The Coinbase AgentKit Attack Chain
A prompt injection that crosses three trust boundaries — and why Coinbase called it Medium
7 views
Daily Writeups
⤷ Title: My First Bug Bounty: Finding Memory DoS Vulnerabilities in Circle’s Arc Blockchain Consensus Engine
════════════════════════
𐀪 Author: Veríssimo
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 12:33:58 GMT
════════════════════════
⌗ Tags: #rust_programming_language #bug_bounty #web3_security #hackerone
Medium
My First Bug Bounty: Finding Memory DoS Vulnerabilities in Circle’s Arc Blockchain Consensus Engine
A beginner’s journey through Rust, BFT consensus, and the HackerOne disclosure process
9 views
Daily Writeups
⤷ Title: One Scan to Zero: The QR Code Trap Wiping Trust Wallets via Telegram
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:11:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BNB Smart Chain #crypto drainer #Cyfirma #Drainer_as_a_Service #ERC_20 Approve #infosec #QR Code Scam #Telegram Phishing #Trust Wallet #USDT #Web3 security
Daily CyberSecurity
One Scan to Zero: The QR Code Trap Wiping Trust Wallets via Telegram
A new QR code "drainer" targets Trust Wallet users on Telegram. It exploits the ERC-20 approve mechanism to wipe USDT. Learn how to protect your assets now.
17 views
Daily Writeups
⤷ Title: The AI Multiplier: How North Korea’s “HexagonalRodent” Turned ChatGPT into a $12M Crypto Heist
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 07:52:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ChatGPT #Cryptocurrency Theft #Cursor AI #Cybercrime 2026 #Expel #Famous Chollima #HexagonalRodent #malware analysis #North Korea #Social Engineering #Web3 Security
Penetration Testing Tools
The AI Multiplier: How North Korea’s "HexagonalRodent" Turned ChatGPT into a $12M Crypto Heist
Inexperienced North Korean cyber operatives have successfully exfiltrated millions of dollars in cryptocurrency over a span of several
13 views
Daily Writeups
⤷ Title: Inside “HexagonalRodent”: The AI-Powered DPRK Syndicate Hauling Millions in Crypto
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 01:00:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Cybercrime #BeaverTail #Crypto Malware #DPRK #Expel Research #Fake Job Scam #HexagonalRodent #InvisibleFerret #OtterCookie #VS Code Vulnerability #Web3 security
Daily CyberSecurity
Inside "HexagonalRodent": The AI-Powered DPRK Syndicate Hauling Millions in Crypto
North Korean group HexagonalRodent stole millions in Q1 2026 using AI-generated lures and backdoored VS Code tasks. Protect your Web3 wallet now.
31 views
Daily Writeups
⤷ Title: The Great Convergence: When Traditional Malware Becomes a Crypto-Hunting Machine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 01:42:39 +0000
════════════════════════
⌗ Tags: #Malware #Blockchain security #Crypto Drainers #Cyber Threat Intelligence #Enterprise Security #EtherRAT #infosec #LevelBlue SpiderLabs #Malware Convergence #StepDrainer #Web3 security
Daily CyberSecurity
The Great Convergence: When Traditional Malware Becomes a Crypto-Hunting Machine
LevelBlue SpiderLabs reveals how traditional malware now integrates crypto drainers and uses blockchain for C2. A major shift in enterprise risk.
12 views
Daily Writeups
⤷ Title: Blockchain Kya Hota Hai? Bilkul Zero Se Samjho!
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Mon, 11 May 2026 08:28:37 GMT
════════════════════════
⌗ Tags: #infosec #smart_contracts #web3_security #blockchain #bug_bounty
Medium
Blockchain Kya Hota Hai? Bilkul Zero Se Samjho!
Series: Web3 Security Zero se Advance | Article #1 By HackerMD | 18 min read
15 views
Daily Writeups
⤷ Title: Web2 vs Web3 Security Ka Naya Duniya!
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Tue, 12 May 2026 04:31:02 GMT
════════════════════════
⌗ Tags: #infosec #penetration_testing #smart_contracts #web3_security #bug_bounty
Medium
Web2 vs Web3 Security Ka Naya Duniya!
Series: Web3 Security Zero se Advance 🛡️ | Article #2 By HackerMD | 20 min read
30 views
Daily Writeups
⤷ Title: Ethereum Deep Dive Part 1: Accounts & Transactions
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Mon, 18 May 2026 08:01:10 GMT
════════════════════════
⌗ Tags: #web3 #bug_bounty #web3_security #ethereum #smart_contracts
Medium
Ethereum Deep Dive Part 1: Accounts & Transactions
Series: Web3 Security Zero se Advance | Article #3 By HackerMD | 22 min read
7 views