BlockThreat - Week 45, 2024

BGM | DSS | MrBeast | Lazarus

Greetings!

Only one DeFi exploit the week of the DeFi Security Summit. Is it a coincidence, or are the hackers busy traveling to Bangkok to mingle with other security professionals? As I mentioned in a recent talk, there is one category of attackers - the crypto natives - that are most certainly participating in the same events as the rest of us. Could they be inspired by the many talks, particularly the many inspiring SEAL releases, to change their ways and join the good side? I certainly hope so. In the meantime, be sure to check out the Media section below for live recordings of many fantastic sessions.

In other news, scammers are getting increasingly creative, using reflective XSS to push drainers and sending out fake Devcon event invitations with phishing links. Meanwhile, in-person attacks on crypto owners continue at an alarming rate, with two incidents reported this week.

To gain access to comprehensive vulnerability write-ups, post-mortems, exploit proof of concepts (PoCs), attacker addresses, and additional data regarding this week’s compromises, please subscribe to the premium plan below.

Let’s dive into the news!