@GoPlusSecurityOfficial1d ago
🚨 GoPlus Security Alert:
Brazilian exchange @MercadoBitcoin has experienced abnormal asset outflows from its multichain custody wallets, with losses exceeding $30 million. Some stolen funds have been frozen. MB has suspended deposits and withdrawals following the attack.
The https://t.co/pmcIym8hWv
@GoPlusSecurityOfficial2d ago
In September’s report, we called it the year’s costliest month: $793M lost.
October broke that record: $6.46B in Web3 losses, led by the $6.3B #Binance multichain hot-wallet theft…
Sobering. https://t.co/ncIKLEN75T
@GoPlusSecurityOfficial2d ago
1/13
⚠️ Exploit Breakdown: Premia Labs Options Vault Attack
On November 1, @PremiaLabs vault contracts on #Arbitrum were exploited for over $400,000. The factory allows permissionless deployment of option pools, but the vaults lacked sufficient checks to establish whether those https://t.co/dH1PDW99Dz
@GoPlusSecurityOfficial4d ago
🚨 GoPlus Security Alert:
On October 31, the official Flap and Kintsu websites suffered DNS hijacking attacks. The attacker likely compromised a domain registrar, with more than 10 other domains also hijacked alongside Flap and Kintsu. By manipulating DNS, the attacker https://t.co/92Rp1DnOHg
@GoPlusSecurityOfficial4d ago
DeepScan’s AI audit flagged the @zkLink_Official vulnerability in just 10 minutes.
We recommend that project teams use DeepScan AI audits for continuous smart-contract scanning to strengthen contract security and reduce related risks.
Full report: https://t.co/CjZsFBMu0X
@GoPlusSecurityOfficial5d ago
1/4
⚠️ Exploit Breakdown: zkLink Nova Ethereum Bridge Attack
On October 29, an attacker withdrew 22.43129453 ETH and 11 different ERC-20 tokens from zkLink Nova’s L1 custody contracts in a single transaction. The stolen assets were worth approximately $797,016.48 at the time of https://t.co/nWOz3ex9lI
@GoPlusSecurityOfficial5d ago
⚠️ Exploit Breakdown: Polymarket User Asset Theft
On October 29 (UTC), user assets were stolen on Polymarket’s international site, Polymarket[.]com. A supply-chain compromise of third-party performance monitoring provider DebugBear’s RUM script delivered malicious code to user https://t.co/CQNi2Hjc0K
@GoPlusSecurityOfficial5d ago
🚨 GoPlus Security Alert: Binance Multi-Chain Hot Wallet System Compromised
Approximately $5.8B has been stolen from Binance’s multi-chain hot wallet system. Roughly $3B of the stolen funds have been frozen so far.
Binance US is an independent platform and is not affected. BNB
@GoPlusSecurityOfficial7d ago
AI is accelerating smart contract vulnerability discovery and exploitation—and beginning to push the boundaries of cryptanalysis… https://t.co/DZEp91IVaG
@GoPlusSecurityOfficial7d ago
GoPlus DeepScan Community Nominations · Round 3 | Web3 Security Hot Topics — Winners
Congrats to the 10 winners below. Each gets 10 USDT:
@0xanyar
@TyoApod
@koirc38116997
@loveli_lovelife
@cheuk_baby
@lavely_9
@0xNuls_
@MatthewMburkett
@DavidMurcuc
@ZestGl0w
Notes:
1. Rewards
@GoPlusSecurityOfficial7d ago
Recent user data leaks at hardware wallets and exchanges. Watch for phishing, social engineering, and SIM swap attacks 👇👇
@GoPlusSecurityOfficial7d ago
Builders: @OpenFour_dev is opening its launch layer to new mechanisms, and we're glad to back it.
Selected mechanisms get a free security audit. Submit your proposal 👇
GPS Social Buzz & News
Official and community posts on X