ChainLight (@ChainLight

ChainLight

1,605 posts

ChainLight

@ChainLight_io

smart contract audit & token regulation and compliance | 8-time winner @defcon | winner @paradigm_ctf 23 | member @_SEAL_Org | est. 2016

links.chainlight.io

Joined September 2022

Pinned
ChainLight
@ChainLight_io
Aug 15, 2024
We did it again. We are thrilled to announce that ChainLight has won @defcon 32, the Olympics of CTF. This marks our 8th victory and the first time any team has won 3 consecutive years in the DEF CON history. 🧵For those new to ChainLight, here’s a little thread about us:
1.4M
ChainLight
@ChainLight_io
Nov 2, 2023
Saving $1.9B. On September 15th, we discovered and reported a critical bug in @zksync Era's ZK-Circuits that could have drained all the tokens passing through the bridge. This bug allows a malicious prover to produce "proofs" for invalidly executed blocks, which the verifier
00:00
66K
ChainLight
@ChainLight_io
Feb 14, 2024
Introducing Lumos, the platform that enables you to track all web3 hacks with just one click. lumos.chainlight.io Our goal is simple: to illuminate the shadows of web3 hacks.
00:00
1.9M
ChainLight
@ChainLight_io
Oct 12, 2023
Hello, Mr. President. After winning the @defcon CTF for two consecutive years, the @paradigm CTF, and the @dragonfly_xyz CTF, ChainLight had the honor of being invited to the Blue House and conversing with South Korea's President Yoon Suk Yeol. 1/4
64K
ChainLight
@ChainLight_io
Jan 11, 2024
We are excited to announce that we are releasing our 150-page internal research to the public. This report includes: → 112 hacks' scale, root cause, and underlying chain analysis → Correlation between security audits and hacks. → Post-incident responses from the team →
363K
ChainLight
@ChainLight_io
Nov 3, 2023
Exploiting ZK-EVM. After discovering a @zksync Era bug on September 15th, we intentionally produced a false "proof" to battle-test our findings. Spending 100 GPU hours on A100s to generate the exploit, we turned a ZK soundness bug into a full token-stealing exploit. As this
00:00
33K
ChainLight
@ChainLight_io
Jul 10, 2024
We are thrilled to announce the successful completion of @Moca_Network's audit. → Zero critical risks detected → All suggested improvements implemented Thrive without fear, Mocaverse.
00:00
21K
ChainLight
@ChainLight_io
Oct 30, 2023
Cracking the @paradigm_ctf in 33 hours. We were able to solve all challenges 15 hours earlier than the closing time, making us the first team to complete the CTF. (1/5)
00:00
22K
ChainLight
@ChainLight_io
Nov 9, 2023
Draining $32M in 5 Minutes. On October 3rd, 2022, we discovered and reported a critical bug in @perpprotocol that could have drained $32M, the entire deposited USDC in the pool. The critical bug was discovered in the "AccountBalance" contract, which serves as the protocol's
00:00
83K
ChainLight
@ChainLight_io
Jan 5, 2024
In 2023, CertiK audited 22.1% of projects that suffered hacks amounting to $500k or more. Now, their X account is compromised.
57K
ChainLight
@ChainLight_io
Jan 26, 2025
Happy to announce that we solved all 23 challenges first in Remedy CTF 2025 - the biggest Web3 security challenge competition ever! 1,839 TEAMS with 2,000+ players attended, including industry-leading security researchers. We appreciate @hexens for hosting this amazing CTF.
8.8K
ChainLight
@ChainLight_io
Jan 18, 2024
We are thrilled to announce that we have been awarded $157,696.85 USDC from @code4rena's @zksync Era audit for identifying two high-severity vulnerabilities in the zkEVM circuit. Everyone's a gangster until getting hacked. We are always impressed by @the_matter_labs' commitment
6.1K
ChainLight
@ChainLight_io
Dec 27, 2024
Are you bullish in web3 projects utilizing TEEs? If so, do you really know what TEE is and how they work? Today, we are publicly releasing our internal report on projects utilizing TEEs. Currently, various projects, especially AI agents, that promotes to leverage Trusted
22K
ChainLight
@ChainLight_io
Dec 14, 2023
Here's a quick 30-second guide to protect yourself from the @Ledger library hack: Summary: Clear your browser cache. This will help prevent compromised libraries from being fetched from the cache. 1. Go to cdn.jsdelivr.net/npm/@ledgerhq/… 2. Make sure the version is 1.1.8. 3. Press F12
30K