Content pfp
Content
@
0 reply
0 recast
0 reaction

Varun Srinivasan pfp
Varun Srinivasan
@v
Warpcast Fix: Wallet Verifications @horsefacts.eth patched a Warpcast issue last night that allowed someone to connect their wallet to your fid under some conditions. 

 To the best of our knowledge, no one took advantage of the issue on Warpcast before we fixed it. Thanks to @0xsec.eth for reporting this!
9 replies
87 recasts
354 reactions

Varun Srinivasan pfp
Varun Srinivasan
@v
If you want to verify a wallet on Warpcast.com, it creates a url where you can submit a signature from your wallet. Warpcast counter signs this with the signer it has for your account. The problem is that the submission url is predictable and wasn't closed when the verification was submitted. So someone watching the hubs for your verification could “back run” and post their own wallet verification to that URL, and Warpcast would have counter signed it with your signer, adding both wallets.
2 replies
2 recasts
155 reactions

0xsec.eth 👑 pfp
0xsec.eth 👑
@0xsec.eth
Much appreciated for the bug fix!🙏
0 reply
0 recast
2 reactions

Icetoad 🎩 🍕 🎶 🐈 💚 pfp
Icetoad 🎩 🍕 🎶 🐈 💚
@icetoad.eth
Wow, props to @0xsec.eth on the bug report! And good job team on fixing a 0 day before anyone could exploit it. Exceptional work all around!
0 reply
0 recast
0 reaction

Fibo / Scryptoguy pfp
Fibo / Scryptoguy
@fibo112358.eth
Could it be why I'm having an issue with warpcast login? It's telling me to open the link in mobile and I am doing just that but nothing happens. Android.
0 reply
0 recast
0 reaction

d_ttang pfp
d_ttang
@ttang.eth
something document about the wallet verifications? thx sir
0 reply
0 recast
0 reaction

Block.base.eth 🔵 pfp
Block.base.eth 🔵
@block1337.eth
yo, why i dont see my followers?
0 reply
0 recast
0 reaction

Juan Antonio Lleó 🎩 pfp
Juan Antonio Lleó 🎩
@jalleo
Gn Varun I also found a bug in Warpcast. Sometimes the B&W images appears in negative, like on this screenshot. And if I download it, I can see it perfectly. Have you noticed this before?
0 reply
0 recast
0 reaction

Jacque(she|her).⌐◨-◨ pfp
Jacque(she|her).⌐◨-◨
@jacque
scary sh*t In other words my iPhone 13 hasn't been able to upload the same images I can on my tablet for days.
0 reply
0 recast
0 reaction

Sheena pfp
Sheena
@sheena
Always hunting and fixing issues 🫡 So I take it we don’t have to reconnect or anything…
0 reply
0 recast
0 reaction