Powered by ApeCoin - Security Awareness Public Good for Web3/NFTs and beyond We provide free classes, security awareness, and track scam/hack trends in Web3.
shop.boringsecurity.com
Joined March 2022
- Tweets3.2K
- Following218
- Followers22.7K
- Likes8.1K
Boring Security retweeted
Claim site is live. If I was able to save your NFTs, you can now reclaim them. You will have to revoke the PaymentProcessor approval first, if you haven't already.
You may also opt to donate as part of your transaction.
nftsaresafu.xyz/
Boring Security retweeted
At 9AM EST today somebody abused a bug in Payment Processor V2 to steal 10 Meebits, 50 Otherdeeds, 10 WoW, and 235 Desperate Apewives.
It wasn't until over 12 hours later that somebody reported it to me, and upon digging in I realized that a great many NFTs were subject to the same exploit.
I got in touch with the team over at LimitBreak and they quickly paused Payment Processor V3, which was subject to the same exploit. Unfortunately, V2 was not pausable, so the only path towards protecting affected assets was to run a whitehat operation.
Similarly, V3 on ApeChain is temporarily in a state where it cannot be paused, so ApeChain assets approved to V3 needed to be saved as well.
All in all, we rescued 23,155 NFTs worth north of $5.7M USD.
We later discovered that a similar exploit could be used in reverse to steal WETH. 660 WETH was at risk, which we unfortunately were not fast enough to recover. Apologies to those affected.
Shout out to @Boomskite for flagging the initial exploit tx to me, and @coffeedev @0xjustadev and @whiteoakkong for acting quickly and assisting with the recovery.
All NFTs are safely relocated. Soon, owners will be able claim them back after revoking the exploitable approvals.
Addresses to revoke below.
Boring Security retweeted
REVOKE APPROVALS TO THESE ASAP:
Payment Processor V2 on Ethereum: 0x9A1D00bEd7CD04BCDA516d721A596eb22Aac6834
Payment Processor V3 on ApeChain: 0x9a1D00000000fC540e2000560054812452eB5366
use revoke.cash or similar.
Boring Security retweeted
exploit discovered a few hrs ago, Quit is in the pocket rn white hat rescue of affected assets, everything safu, more info soon.
Boring Security retweeted
As a reminder, our collab class with @BoringSecurity is tonight, 8pm EST.
Don't be an Orange background and show up late.
Safe. Secure. Aquamarine. The tenets of a good club.
Security matters.
That’s why we teamed up with @boringsecurity to host a FREE security class to help keep Apes safe.
In fact, we made SEC101 one of the required quests for new club members looking to qualify for the Welcome Package.
Join us this Thursday at 8PM ET w/ @nft_dreww & @crypto_kfx.
Reserve your spot in Boring Security Discord now ⬇️
Boring Security retweeted
Security matters.
That’s why we teamed up with @boringsecurity to host a FREE security class to help keep Apes safe.
In fact, we made SEC101 one of the required quests for new club members looking to qualify for the Welcome Package.
Join us this Thursday at 8PM ET w/ @nft_dreww & @crypto_kfx.
Reserve your spot in Boring Security Discord now ⬇️
Boring Security retweeted
There are still a few days left to donate in the ETH Security round:
qf.giveth.io/project/boring-…
Right now we are #13 of 133 projects in terms of donated amounts. Let's break into the top 10!
Remember for maximum donation effect, be sure to donate to other projects as well!
Boring Security retweeted
made my donation to @_SEAL_Org & @boringsecurity
last thing anyone wants to think about is security; the work they both do for the space is unprecedented 🙏
i suggest you support with a follow & check their pages to donate via @Giveth - they are matching donations
stay safe 🦊
Boring Security retweeted
What a great show today!
We talked with @nft_dreww about security and @Giveth campaign!
I donated to @boringsecurity , @nft_dreww, and @wiimee. If you can, pls donate too.
Giveth matches all donations. So a $10 spend is over $100 donated.
Link for the whole space in comments👇🏻
Boring Security retweeted
MeebCo donated yesterday's royalties to @boringsecurity's Giveth campaign to show our appreciation for the work they do to keep our web3 family safe.
We encourage every large NFT project to consider doing the same.
There are still a few days left to donate in the ETH Security round:
qf.giveth.io/project/boring-…
Right now we are #13 of 133 projects in terms of donated amounts. Let's break into the top 10!
Remember for maximum donation effect, be sure to donate to other projects as well!
Boring Security retweeted
0/ Clear signing is now live.
An open standard to end blind signing, making human-readable transactions default.
This effort brings a major UX and Security upgrade to transaction signing on Ethereum.
Boring Security retweeted
consider donating to @boringsecurity
there’s a great matching program rn that amplifies every donation
they do a lot to keep our space safe
There are still a few days left to donate in the ETH Security round:
qf.giveth.io/project/boring-…
Right now we are #13 of 133 projects in terms of donated amounts. Let's break into the top 10!
Remember for maximum donation effect, be sure to donate to other projects as well!
Boring Security retweeted
Boring Security has been doing amazing work in this space for years. If you've been here, you know them.
Now there's a matching pool on @Giveth for any donations to them. It's a quadratic funding round, which is some nerd shit I am not going to pretend to understand. But am ape so I am supporting @boringsecurity
Proud to announce that Boring Security has been included in @thedaofund’s Ethereum Security Quadratic Funding round on @Giveth!
👉qf.giveth.io/project/boring-…
As a public good since 2022, we make Web3 security education accessible with free live classes, interactive modules, and gamified learning.
Our journey so far:
• 6,000+ students taught live in Discord
• $3M+ in stolen assets recovered via Flashbot rescues and other recoveries
• 10,000+ Discord members using our resources & alerts
And we’re just getting started.
Help us keep building a safer crypto for everyone and donate at the link above!
Boring Security retweeted
Security education works best when it meets people where they are. @boringsecurity has been shipping free, high-quality curriculum for years.
Learn more: youtube.com/watch?v=A70zxmDQ…
Support: qf.giveth.io/project/boring-…
Boring Security retweeted
DeFi is full of opportunities.
It’s also full of traps if you don’t know what you’re doing.
We’re teaming up with @boringsecurity for a free DeFi Safety & Security class covering:
• DeFi basics & protocols
• MEV and common risks
• Safer Web3 practices
• How to avoid scams and navigate DeFi with confidence
🗓 May 9, 10 AM EST
📍discord.gg/boringsecurity
Important: You must sign up for the course through the Boring Security server first to access the classes.
Learn first. Ape smarter later. 🔶
Boring Security retweeted
Boring Security is my baby. And it needs your help. Like it really really needs your help. And right now, you can help in a massive way! How?
0) Make sure your Passport is up to date: https:@//app.passport.xyz/ (Remove the '@') - This just checks your wallet and makes sure it seems human. If you've donated before you can skip this step and simply press refresh on any donation page (below). So when you donate, make sure you aren't using a burner! A wallet with tx history, that has a few tokens and NFTs pretty much gets auto-accepted for the requisite 20 points!
1) Go here and donate something small. Anything between $5-100 (but more is fine too!): qf.giveth.io/project/boring-… - if you did the above right, you should see "Your donations are eligible to be matched"
2) Find another project and donate any amount greater than a couple dollars. We recommend two of our long-time instructors for Boring Security, who you've definitely seen around:
@wiimee - qf.giveth.io/project/wiimee-…
@nft_dreww - qf.giveth.io/project/drew-se…
3) Let me know you donated in the comments so I can go hire a woo-woo girl on TikTok to bless you with good fortune in all your crypto endeavors this year.
From the bottom of my heart thank you! Sorry the process is so cumbersome, but anti-sybil, and preventing the self-deal/self-donation cabal is difficult. We're only interested in real donations from real people who feel Web3 Security education is important! If you haven't checked out BSec in a while, head on over. We've got new classes, all free of course, and some new things in the works coming soon :).
Boring Security retweeted
I highly suggest supporting Boring Security as they've spent the past 5 years supporting NFT communities absolutely free.
As a proud @thedaofund security badge holder, gifts through me are boosted up to 4x. If you're serious about donating, reach out and let's set it up.
Proud to announce that Boring Security has been included in @thedaofund’s Ethereum Security Quadratic Funding round on @Giveth!
👉qf.giveth.io/project/boring-…
As a public good since 2022, we make Web3 security education accessible with free live classes, interactive modules, and gamified learning.
Our journey so far:
• 6,000+ students taught live in Discord
• $3M+ in stolen assets recovered via Flashbot rescues and other recoveries
• 10,000+ Discord members using our resources & alerts
And we’re just getting started.
Help us keep building a safer crypto for everyone and donate at the link above!
Boring Security retweeted
Proud to announce that Boring Security has been included in @thedaofund’s Ethereum Security Quadratic Funding round on @Giveth!
👉qf.giveth.io/project/boring-…
As a public good since 2022, we make Web3 security education accessible with free live classes, interactive modules, and gamified learning.
Our journey so far:
• 6,000+ students taught live in Discord
• $3M+ in stolen assets recovered via Flashbot rescues and other recoveries
• 10,000+ Discord members using our resources & alerts
And we’re just getting started.
Help us keep building a safer crypto for everyone and donate at the link above!
Boring Security retweeted
🚨🚨
UPDATE: CoW Swap experienced a DNS hijacking at 14:54 UTC (approximately 90 minutes ago).
The CoW Protocol backend and APIs were not impacted, but we have paused them temporarily as a precaution.
We are now actively working to resolve the situation. Please continue to refrain from using swap dot cow dot fi until we confirm that it is safe to use.
