
$1mln – Generating ETH from thin air – Aurora rainbow bridge withdrawal logic bug

Source link
Related Articles
All Mix →How do I know I’m paying the right amount of bug bounty?
You asked, and we answered. At Intigriti, we’ve been paying close attention to the questions most frequently asked by those with a bug bounty program…
Hunting for DOM-based XSS vulnerabilities: A complete guide
Table of Contents DOM sources DOM sinks Finding DOM-based XSS via static code analysis Finding DOM-based XSS via DOM runtime interception Exploiting DOM-based XSS via…
Thotcon 2018 – Fun With LDAP, Kerberos (and MSRPC) in AD Environments
Slides Supplemental The original (large) PowerPoint wih all embedded GIFs/Videos: https://1drv.ms/p/s!Aq5mEA03Lijrg9h-hsezBkUC5qwXag Source link
7 Common Security Pitfalls to Avoid When Migrating to the Cloud
Table of Contents 7 Common Security Pitfalls to Avoid When Migrating to the Cloud Exposing sensitive information Leaking Credentials Lack of clear policies (and enforcing…
Four Types of Project | Daniel Miessler
If we classify projects into four categories by important vs. unimportant, and interesting vs. unpleasant, we can assess what happens under open allocation. Important and…
Bug Bytes #201 – Path Traversal, Prompt Injection, and GitHub Actions
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps…