infosec

ETHSecurity Community

Reminder guys: now with PECTRA ethereum upgrade, you only need to sign a message to get completely drained! Before, you actually had to sign the TX.

Be very careful of what you sign now - even an offchain message!

https://x.com/blockaid_/status/1920141140465967595?t=xeD5WXDccX4Gpbf8M7Gn-Q&s=09

be wary of TOCTOU attacks and strictly limit the scope of session keys. 

modularity and predictability are virtues.

Blockaid

𝖒𝖆𝖓𝖉𝖆𝖙𝖚𝖒 𝖆𝖉 𝖆𝖘𝖙𝖗𝖆