Web3's most elite smart contract audits, KYC, on-chain monitoring, bug bounties, penetration testing, and more.
Joined January 2025
- Tweets224
- Following74
- Followers466
- Likes11
Maverick Security retweeted
🚨 After analysis, we found that the phishing case is a new phishing trick, carried out by the well-known phishing group #InfernoDrainer.
🧵 Unlike typical phishing, the delegated address is not a phishing address, but MetaMask: EIP-7702 Delegator 0x63c0c19a282a1B52b07dD5a65b58948A07DAE32B that existed a few days ago, as shown in Image 1.
🪙The #phishing used the mechanism in MetaMask: EIP-7702 Delegator to complete the batch authorization phishing and stealing operations.
🧩As shown in Image 2, 0xc6D289d55fE64227A09E3120855ccBa0d2E606DC is the victim address, which initiated the execute batch execution of the scheduled instruction data from MetaMask: EIP-7702 Delegator.
📎 TX:
etherscan.io/tx/0x1ddc8cecbc…
🔍 Image 3 – Shows the inner logic of the execute in MetaMask’s EIP-7702 Delegator.
🎯 Image 4 – Demonstrates how the attacker uses this mechanism to complete the batch authorization operation of the victim's address-related tokens.
Learn more about the risks and best practices around #EIP7702 in our in-depth post:
slowmist.medium.com/in-depth…
Stay vigilant! cc @evilcos
Maverick Security retweeted
🚨 SECURITY ALERT: AML Phishing Scam Exposed 🚨
⚡️ Key Point: Social engineering makes these attacks sophisticated. The scammers exploit users' concerns about "dirty" funds to gain trust.
🚦 Scam Breakdown:
1️⃣ Scammers use fake "AML asset verification" websites
2️⃣ Target users worried about USDT cleanliness post-P2P trades
3️⃣ Fake TG groups (impersonating Trustwallet) lead to phishing sites
4️⃣ Over $50K stolen through wallet authorization scams
5️⃣ Active money laundering through multiple addresses
🛡️ Safety Tips:
- ALWAYS verify websites independently
- Be cautious with wallet authorizations
- Practice asset isolation - use separate wallets
- Install security tools like @GoPlusSecurity
🔍 Note: These malicious sites were registered in March 2025 and are part of an organized phishing operation.
⚠️ Malicious Addresses Identified:
0x00006104AB2669b501F2b4a2D31df6a243b20000
0x45C49D9ed4aea4514Ec6eAc5f239A6B8AfC5Da41
0x3380570e7dA720ab7828E3000B85382F2d1a652A
0x04720E2215628c4a687d025BA0a579089eF5A4f7
0x1D2ec76B521587c7728675A76DA8Ff36bC8D8a44
Stay vigilant! 🚀
Maverick Security retweeted
#PeckShieldAlert A #ZeroTransfer scammer grabbed ~1.7M $USDT from 0x86C0...2604.
Intended Address: 0x4668D1Fe87444a4d7508e83c89bfDAF1117e6B76 Phishing Address: 0x4668EE748c88DA4FEc595773b22f96f366eD6B76
Maverick Security retweeted
When attackers spend gas just to ruin your day. 🙄
Griefing attacks explained:
- Precise gas limit exploits
- State manipulation vulnerabilities
- Techniques to block legitimate transactions
Learn more in our security breakdown.👇
Maverick Security retweeted
🚦 Cetus Protocol Exploit Analysis 🚦
- Root Cause: Overflow check failure in mask calculation
- Vulnerable Function: math_u256::checked_shlw
- Impact: Single token → Infinite LP minting
- Total Loss: $223M
- Frozen: $162M secured
@SuiNetwork validators deployed emergency updates, establishing native transaction controls to halt the hacker's movements.
Proof: Chain-level security measures are the true Great Wall of Web3 asset protection.
🔗 Related Link: github.com/MystenLabs/sui/pu…
Maverick Security retweeted
🚨Alert Announcement 🚨
There was an incident detected on our protocol and our smart contract has been paused temporarily for safety. The team is investigating the incident at the moment. A further investigation statement will be made soon. We are grateful for your patience.
Maverick Security retweeted
#PeckShieldAlert The @CetusProtocol exploiter has transferred 24M $SUI (~$96M) to a new account (0xcd8962...0ac9562) on #SUI.
Maverick Security retweeted
#PeckShieldAlert The @CetusProtocol exploiter has swapped the bridged $USDC on #Ethereum for 23K $ETH (worth ~$62M) and transferred 20K ETH to a new address (0x0251...af16).
Maverick Security retweeted
#PeckShieldAlert The @CetusProtocol exploiter has deposited ~$10M in stolen SUI assets into @suilendprotocol, potentially to borrow stablecoins.
.@CetusProtocol on #SUI has been hacked and resulting in >$200M loss. The hacker has bridged the 60M $USDC to #Ethereum
Maverick Security retweeted
.@CetusProtocol on #SUI has been hacked and resulting in >$200M loss. The hacker has bridged the 60M $USDC to #Ethereum
Maverick Security retweeted
#PeckShieldAlert The threat actor who stole $300M+ from #Coinbase users by bribing customer support and sending #ZachXBT on-chain msg has swapped 8,697 $ETH for 22M DAI.
Another highly relevant address, which received 9,081 $ETH from #THORChain, has swapped them for 23M DAI.
Maverick Security retweeted
🚨 Beware of USD1 copycats on BSC! 🚨
@BNBCHAIN & @binance , we have found 41 fake USD1 tokens detected on BSC since May, with multiple scam addresses affecting over 1,200+ holders.
🚦 For Users, PLEASE always verify the official USD1 contract:
0x8d0D000Ee44948FC98c9B98A4FA4921476f08B0d
Stay SAFU!
Maverick Security retweeted
❗WARNING❗
🚨 Top 7702 Delegator Revealed as Phishing Scam 🚨
As thousands rush to enable EIP-7702 smart accounts after Pectra upgrade, dangerous vulnerabilities have emerged. While revolutionary for account abstraction, urgent security risks need attention.
Details ⬇️
Maverick Security retweeted
🚨 The official driver provided by this printer carries a backdoor program. It will hijack the wallet address in the user's clipboard and replace it with the attacker's address: 1BQZKqdp2CV3QV5nUEsqSg1ygegLmqRygj
🕵️ According to @MistTrack_io, the attacker has stolen 9.3086 $BTC. Active since Apr 22, 2016, last seen Mar 14, 2024, with links to multiple exchanges.
🔗light.misttrack.io/address/B…
中国深圳打印机公司天生 (#Procolored) 被发现提供的官方驱动程序携带后门程序用来盗取加密货币，数据显示黑客盗取的比特币数量达 9.3 个。
至于感染原因则是天生使用 U 盘传输这些驱动程序，被感染后门程序后天生又将其上传到网盘供全球用户下载。
查看全文：ourl.co/108992
Maverick Security retweeted
Front-running vulnerabilities explained: how blockchain’s inherent transparency can work against you.
- Get-or-create pattern exploits
- Two-transaction action hijacking
- Dust attack transaction reversions
- Flawed commit-reveal schemes
And more in our article.👇
Maverick Security retweeted
Here’s more lore about Malone Lam we uncovered during the $243M Genesis Creditor theft.
On June 23, 2024 Mark Cuban fell victim to a social engineering scam losing crypto assets from his public wallet markcuban.eth
We noticed the exact same device indicators in the Cuban theft as the $243M theft across multiple transactions where funds were laundered.
Yesterday the superseding indictment was unsealed that hints at Lam and Chen’s involvement in Cuban’s theft with a matching date/amount.
Theft address
0x733ea491051929d0b6619425e088d210deb5cbe6
Maverick Security retweeted
#PeckShieldAlert #ZunamiProtocol reports being hacked, with collateral for zunUSD and zunETH stolen, resulting in a loss of ~$500K. The exploiter has transferred the stolen funds to #TornadoCash.
xitter.gq/ZunamiProtocol/status/…
Maverick Security retweeted
Reflecting on another fantastic day at #Consensus2025! 🔥 Packed stages with heavy-hitting speakers brought incredible energy to Toronto today.
What were YOUR favorite moments from Day 2? Let's keep the momentum going!⚡