BlockThreat - Week 36, 2024

PenPie | Pythia | Ethervista | MakerDAO | Yubikey | Trezor

Greetings!

Reentrancy exploits are back. Two projects were compromised this week netting attackers $27M+ mostly from a very interesting PenPie compromise.

MakerDAO deployer keys on Optimism and Arbitrum networks are compromised thanks to the good ole’ Profanity vanity generator bug. Malicious contracts were already deployed on BSC, Base, and other EVM chains.

To gain access to comprehensive vulnerability write-ups, post-mortems, exploit proof of concepts (PoCs), attacker addresses, and additional data regarding this week’s compromises, please subscribe to the premium plan below.

Let’s dive into the news!