Content
@
0 reply
0 recast
0 reaction
Varun Srinivasan
@v
Warpcast Fix: Wallet Verifications @horsefacts.eth patched a Warpcast issue last night that allowed someone to connect their wallet to your fid under some conditions. To the best of our knowledge, no one took advantage of the issue on Warpcast before we fixed it. Thanks to @0xsec.eth for reporting this!
9 replies
45 recasts
131 reactions
Varun Srinivasan
@v
If you want to verify a wallet on Warpcast.com, it creates a url where you can submit a signature from your wallet. Warpcast counter signs this with the signer it has for your account. The problem is that the submission url is predictable and wasn't closed when the verification was submitted. So someone watching the hubs for your verification could “back run” and post their own wallet verification to that URL, and Warpcast would have counter signed it with your signer, adding both wallets.
2 replies
2 recasts
26 reactions
0xsec.eth 👑
@0xsec.eth
Much appreciated for the bug fix!🙏
0 reply
0 recast
2 reactions
Icetoad 🎩 🍕 🎶 🐈 💚
@icetoad.eth
Wow, props to @0xsec.eth on the bug report! And good job team on fixing a 0 day before anyone could exploit it. Exceptional work all around!
0 reply
0 recast
0 reaction
Fibo / Scryptoguy
@fibo112358.eth
Could it be why I'm having an issue with warpcast login? It's telling me to open the link in mobile and I am doing just that but nothing happens. Android.
0 reply
0 recast
0 reaction
d_ttang
@ttang.eth
something document about the wallet verifications？ thx sir
0 reply
0 recast
0 reaction
Block.base.eth 🔵
@block1337.eth
yo, why i dont see my followers?
0 reply
0 recast
0 reaction
Juan Antonio Lleó 🎩
@jalleo
Gn Varun I also found a bug in Warpcast. Sometimes the B&W images appears in negative, like on this screenshot. And if I download it, I can see it perfectly. Have you noticed this before?
0 reply
0 recast
0 reaction
Jacque(she|her).⌐◨-◨
@jacque
scary sh*t In other words my iPhone 13 hasn't been able to upload the same images I can on my tablet for days.
0 reply
0 recast
0 reaction
Sheena
@sheena
Always hunting and fixing issues 🫡 So I take it we don’t have to reconnect or anything…
0 reply
0 recast
0 reaction
