6 posts
A Gnosis Safe lost 7.8 million dollars in restaked ETH because an enabled module let a passing keeper point it at an attacker's own pool. The Safe itself worked. This kind of bug is old, and it comes down to who gets to choose the target.
ReadA signed transaction feels final, but a signature only proves who approved something valid. It does not prove that what executes is what they approved. DeFiLoops fills that gap with a content receipt and a simulation that judges what a transaction actually does.
ReadA key grants unlimited authority, and every limit on top is software. A permission can be withdrawn, but a copied key cannot be un-copied.
ReadA wallet an AI agent can spend from without asking you each time. The whole design question is what stops it, and the answers differ.
ReadEvery one of them enforces spending limits. They differ in where the enforcement sits, and that decides what happens when the operator is wrong.
ReadThe failure modes with evidence behind them, separated from the ones that only have a statistic. One widely quoted figure does not survive.
Read