Skip to content
October 1, 2026
☍ CyberNoz
  • Home
Home›Mix›Bypass parsing of transaction data, users on the phishing site will transfer/approve ERC20 tokens without being alerted
Mix

Bypass parsing of transaction data, users on the phishing site will transfer/approve ERC20 tokens without being alerted

Cybernoz
April 11, 2023 1 min read
Share X / Twitter LinkedIn Reddit WhatsApp Email



MetaMask disclosed a bug submitted by ronnyx2017: https://hackerone.com/reports/1651429 – Bounty: $1000



Source link

Share X / Twitter LinkedIn Reddit WhatsApp Email
« Previous
How to Hack MFA (Multi-Factor Authentication)
Next »
The iceberg of web app exploits

Related Articles

All Mix →
OWASP TOP 10 XXE Detectify Blog Mix

OWASP TOP 10: Injection – Detectify Blog

Table of Contents Description Prevalence Potential impact Well-known events How to discover How Detectify can help Exploitability Code example of vulnerable application Remediation Injection Proof…

May 20, 2023 Cybernoz 5 min read
OWASP Seoul Meetup | HAHWUL Mix

OWASP Seoul Meetup | HAHWUL

Table of Contents #1 #2 #3 2025.08.26 OWASP Seoul Meetup Recap At the recent OWASP Seoul Meetup, I had the opportunity to speak on the…

September 7, 2025 Cybernoz 2 min read
Supporting Sprocket Securitys offensive security testing with BChecks from Burp Mix

Supporting Sprocket Security’s offensive security testing with BChecks, from Burp Suite | Blog

Table of Contents Discovering BChecks Learning how to work with BChecks Automating BCheck production with ChatGPT Incorporating BChecks into their testing workflow Feeling inspired? Emma…

September 6, 2023 Cybernoz 5 min read
Which XSS payloads get the biggest bounties Case study scaled Mix

Which XSS payloads get the biggest bounties? – Case study of 174 reports

Which XSS payloads get the biggest bounties? – Case study of 174 reports Source link

April 9, 2023 Cybernoz 1 min read
Fredrik Alexandersson Office IT partner Detectify is my hacker toolbox Mix

Fredrik Alexandersson, Office IT-partner: “Detectify is my hacker toolbox”

Office IT-Partner is a Swedish IT consultancy providing a range of tailored solutions to clients across the country. Fredrik Alexandersson, Systems architect and Senior security advisor,…

May 9, 2023 Cybernoz 4 min read
Addressing the Rising Threat of API Leaks Mix

Addressing the Rising Threat of API Leaks

Table of Contents The Growing Concern: Unseen API Vulnerabilities Leaked Secrets: A Catalyst for Compromises Sealing the Leaky Buckets In the realm of cybersecurity, the…

January 3, 2024 Cybernoz 3 min read

Latest Posts

  • Internet Society Launches Global Online Trust and Safety Hub as Part of Its Safer Internet Initiative
  • Signal brings encrypted local backups to iOS and desktop, adds cross-platform restore
  • Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
  • Post Office process redress scheme pays out £4m so far
  • From data overload to decisive action – accelerating decisions with AI agents
  • Agbi
  • ArsTechnica
  • AttackDefense
  • Australiancybersecuritymagazine
  • Bankinfosecurity
  • Bleeping Computer
  • CISOOnline
  • CloudSecurity
  • ComputerWeekly
  • Crowdstrike
  • Cyber Security Ventures
  • CyberDefenseMagazine
  • CyberNews
  • Cyberscoop
  • CyberSecurity-Insiders
  • CyberSecurityDive
  • CyberSecurityNews
  • CyberWire
  • DarkReading
  • ExploitOne
  • GBHackers
  • Genel
  • HackerCombat
  • HackRead
  • HelpnetSecurity
  • IndustrialCyber
  • InfoSecurity
  • ITnews
  • ITSecurityGuru
  • Krebson
  • MalwareBytes
  • Mix
  • OTSecurity
  • PortSwigger
  • Rapid7
  • SCMP
  • securelist
  • Securityaffairs
  • SecurityWeek
  • techcrunch
  • TheCyberExpress
  • TheHackerNews
  • ThreatIntelligence-IncidentResponse
  • Tldrsec
  • Unit42
  • VendorResearch
  • welivesecurity
  • Wired
  • Zerosalarium
☍ CyberNoz

Cybersecurity News

  • Agbi
  • ArsTechnica
  • AttackDefense
  • Australiancybersecuritymagazine
  • Bankinfosecurity
  • Bleeping Computer
  • CISOOnline
  • CloudSecurity
  • ComputerWeekly
  • Crowdstrike
  • Cyber Security Ventures
  • CyberDefenseMagazine
  • CyberNews
  • Cyberscoop
  • CyberSecurity-Insiders
  • CyberSecurityDive
  • CyberSecurityNews
  • CyberWire
  • DarkReading
  • ExploitOne
  • GBHackers
  • Genel
  • HackerCombat
  • HackRead
  • HelpnetSecurity
  • IndustrialCyber
  • InfoSecurity
  • ITnews
  • ITSecurityGuru
  • Krebson
  • MalwareBytes
  • Mix
  • OTSecurity
  • PortSwigger
  • Rapid7
  • SCMP
  • securelist
  • Securityaffairs
  • SecurityWeek
  • techcrunch
  • TheCyberExpress
  • TheHackerNews
  • ThreatIntelligence-IncidentResponse
  • Tldrsec
  • Unit42
  • VendorResearch
  • welivesecurity
  • Wired
  • Zerosalarium
Archive
  • October 2026
  • September 2026
  • August 2026
  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2026
  • September 2026
  • August 2026
  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2025
  • August 2025
  • July 2025
  • June 2025
  • May 2025
  • April 2025
  • March 2025
  • February 2025
  • January 2025
  • December 2024
  • November 2024
  • October 2024
  • September 2024
  • August 2024
  • July 2024
  • June 2024
  • May 2024
  • April 2024
  • March 2024
  • February 2024
  • January 2024
  • December 2023
  • November 2023
  • October 2023
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • May 2023
  • April 2023
  • March 2023
  • February 2023
  • January 2023
  • December 2022
© 2026 Cybernoz. All rights reserved.