Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: Breaking Immutability: How I Bypassed a Core Security Invariant in a Major DeFi Protocol
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 11:42:05 GMT
════════════════════════
⌗ Tags: #web3_security #solidity #bug_bounty #defi #smart_contracts
Medium
Breaking Immutability: How I Bypassed a Core Security Invariant in a Major DeFi Protocol
In the world of smart contract security, immutability is a sacred concept. When a protocol’s documentation explicitly states that a core…
17 views
Daily Writeups
⤷ Title: Critical Web3 Vulnerability: Full Account Takeover via Arbitrary Internal Self-Calls in Smart…
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Sat, 28 Feb 2026 19:04:04 GMT
════════════════════════
⌗ Tags: #web3_security #smart_contracts #solidity #bug_bounty #cybersecurity
Medium
Critical Web3 Vulnerability: Full Account Takeover via Arbitrary Internal Self-Calls in Smart Wallets
How a missing target validation led to a complete compromise of a modular smart contract wallet.
54 views
Daily Writeups
⤷ Title: ClickFix Alert: Fake Venture Capitalists Target Web3 Pros with “Terminal” Phishing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 00:29:06 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #cryptocurrency #cyber_espionage #infosec #LinkedIn Scams #malware #Moonlock Lab #North Korean hackers #social engineering #UNC1069 #Web3 security
Daily CyberSecurity
ClickFix Alert: Fake Venture Capitalists Target Web3 Pros with “Terminal” Phishing
Cybersecurity researchers at Moonlock Lab have unmasked a coordinated malware operation targeting cryptocurrency and Web3 professionals. The campaign, which shares striking tactical overlaps with …
16 views
Daily Writeups
⤷ Title: Malicious “Hex Visualizer” Chrome Extension Targeting imToken Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:37:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chrome Extension Phishing #Crypto Wallet Drainer #Cryptocurrency Security #Homoglyph Attack #ImToken Chromophore #infosec #Malware Analysis #Seed Phrase Theft #Socket Threat Research #Web3 security
Daily CyberSecurity
Malicious "Hex Visualizer" Chrome Extension Targeting imToken Users
Socket researchers uncover "ImToken Chromophore," a malicious Chrome extension using fake branding and homoglyphs to steal crypto wallet seed phrases.
17 views
Daily Writeups
⤷ Title: The ‘Contagious Interview’ Trap: How a Web3 CEO Unmasked North Korean Stealth Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:07:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contagious Interview #cybersecurity #infosec #Kill Switch #LinkedIn Phishing #Malware Analysis #North Korean malware #social engineering #threat intelligence #Web3 security
Daily CyberSecurity
The 'Contagious Interview' Trap: How a Web3 CEO Unmasked North Korean Stealth Malware
A fake LinkedIn recruiter and a poisoned GitHub repo: See how a CEO uncovered the North Korean "Contagious Interview" malware targeting Web3 developers.
16 views
Daily Writeups
⤷ Title: How I Found a $1,000 Signature Replay Vulnerability in a Blockchain Bridge SDK
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 18:22:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #web3_security #defi_security #ethical_hacking #blockchain
Medium
How I Found a $1,000 Signature Replay Vulnerability in a Blockchain Bridge SDK
A Step-by-Step Journey from Code Review to Bounty
30 views
Daily Writeups
⤷ Title: How I Found a $1,000 Signature Replay Vulnerability in a Blockchain Bridge SDK
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 05:08:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #web3_security #defi_security #ethical_hacking #blockchain
Medium
How I Found a $1,000 Signature Replay Vulnerability in a Blockchain Bridge SDK
A Step-by-Step Journey from Code Review to Bounty
23 views
Daily Writeups
⤷ Title: LLM Injection + Unlimited Approval + RCE: The Coinbase AgentKit Attack Chain
════════════════════════
𐀪 Author: xxmrlnxx
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:05:04 GMT
════════════════════════
⌗ Tags: #bug_bounty #prompt_injection_attack #web3_security #cybersecurity #ai_security
Medium
LLM Injection + Unlimited Approval + RCE: The Coinbase AgentKit Attack Chain
A prompt injection that crosses three trust boundaries — and why Coinbase called it Medium
7 views
Daily Writeups
⤷ Title: My First Bug Bounty: Finding Memory DoS Vulnerabilities in Circle’s Arc Blockchain Consensus Engine
════════════════════════
𐀪 Author: Veríssimo
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 12:33:58 GMT
════════════════════════
⌗ Tags: #rust_programming_language #bug_bounty #web3_security #hackerone
Medium
My First Bug Bounty: Finding Memory DoS Vulnerabilities in Circle’s Arc Blockchain Consensus Engine
A beginner’s journey through Rust, BFT consensus, and the HackerOne disclosure process
9 views
Daily Writeups
⤷ Title: One Scan to Zero: The QR Code Trap Wiping Trust Wallets via Telegram
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:11:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BNB Smart Chain #crypto drainer #Cyfirma #Drainer_as_a_Service #ERC_20 Approve #infosec #QR Code Scam #Telegram Phishing #Trust Wallet #USDT #Web3 security
Daily CyberSecurity
One Scan to Zero: The QR Code Trap Wiping Trust Wallets via Telegram
A new QR code "drainer" targets Trust Wallet users on Telegram. It exploits the ERC-20 approve mechanism to wipe USDT. Learn how to protect your assets now.
17 views