#solidity

· 3mo ago

Malicious VS Code extension 'Solidity Pro' steals crypto 🔗 https://cybersecurefox.com/en/malicious-vscode-extension-solidity-pro #Visual #Studio #Code #Solidity #Pro #malicious #extension #crypto #wallet #stealer #Web3 #security

cybersecurefox.com

Malicious VS Code Extension 'Solidity Pro' Steals Crypto

Researchers from Yeeth Security discovered the malicious Solidity Pro extension for Microsoft Visual Studio Code which, while masquerading as a tool for

Rubén Santos García @rsgbengi@infosec.exchange

· 4mo ago

Reentrancy forked Ethereum in 2016 ($60M DAO hack). It drained $52M from Curve in 2023 because Vyper 0.2.15-0.3.0 silently gave each @nonreentrant function its own independent lock. Cross-function reentrancy bypasses guards via shared state. Read-only reentrancy bypasses them via view function oracles. CEI is the foundation, guards are just backup. https://www.kayssel.com/newsletter/issue-57/ #InfoSec #CyberSecurity #Pentesting #BugBounty #OffSec #Web3 #Solidity

Reentrancy: The Bug That Forked Ethereum

kayssel.com

Reentrancy: The Bug That Forked Ethereum

Classic single-function reentrancy, cross-function bypass of nonReentrant guards, read-only reentrancy via view oracles, ERC-777 token hooks, Vyper compiler bug, and Slither detection

You've seen all posts