4 posts
A Gnosis Safe lost 7.8 million dollars in restaked ETH because an enabled module let a passing keeper point it at an attacker's own pool. The Safe itself worked. This kind of bug is old, and it comes down to who gets to choose the target.
ReadA signed transaction feels final, but a signature only proves who approved something valid. It does not prove that what executes is what they approved. DeFiLoops fills that gap with a content receipt and a simulation that judges what a transaction actually does.
ReadNo exploit and no stolen key, just a message the model agreed to act on. Prompt injection is not a bug you patch, so what can a persuaded model express?
ReadThe failure modes with evidence behind them, separated from the ones that only have a statistic. One widely quoted figure does not survive.
Read