Security Team: The rugpullfinder Discord server has been compromised

[Security Team: rugpullfinder Discord server has been hacked] Jinse Finance reported that according to CertiK monitoring, the NFT open source intelligence provider @rugpullfinder Discord server has been hacked. There is a phishing link in the #hack-warnings channel.

Please do not click on the link, Mint, or approve any transactions.

Other news:

Security Team: Bitkeep Swap attackers have transferred more than $1 million in stolen funds to Tornado Cash: October 18 news, according to SlowMist data monitoring, Bitkeep Swap attackers have transferred 4,300 BNB (approximately $1.18 million) to Tornado Cash The stolen funds are transferred to Tornado Cash in the form of 100 BNB each. Remind users to cancel the "0x75eb01bf6e265e2a7dbba1644913b5adf0cc12de" contract authorization in time. [2022/10/18 17:30:24]

Security Team: In view of Wintermute’s $160 million hacking incident, it is recommended that the project party remove relevant address management rights: Jinse Finance reported that on September 20, 2022, according to Beosin EagleEye monitoring, Wintermute lost $160 million in DeFi hacking attacks, The Beosin security team found that attackers frequently use the 0x0000000fe6a... address to call the 0x178979ae function of the 0x00000000ae34... Query and confirm that the address 0x0000000fe6a has the setCommonAdmin permission, and the address has normal interaction with the contract before the attack, then it can be confirmed that the private key of 0x0000000fe6a has been leaked. Combined with the address characteristics (0x0000000), it is suspected that the project party used the Profanity tool to generate the address. In the previous article of this tool, security researchers have confirmed that its randomness has security flaws (there is a risk of brute force cracking the private key), which may lead to the possible leakage of the private key.

The Beosin security team suggests: 1. The project party removes the setCommonAdmin/owner and other management permissions of the 0x0000000fe6a address and other addresses with good names, and replaces them with safe wallet addresses. 2. Other project parties or users who use the Profanity tool to generate wallet addresses, please transfer assets as soon as possible. Beosin Trace is running an analytical trace of the stolen funds. [2022/9/20 7:08:40]

Security Team: The rugpullfinder Discord server has been hacked: Jinse Finance reported that according to CertiK monitoring, the NFT open source intelligence provider @rugpullfinder Discord server has been hacked. There is a phishing link in the #hack-warnings channel.

Please do not click on the link, Mint, or approve any transactions. [2022/8/17 12:30:59]