SlowMist

@SlowMist_Team

SlowMist is a Blockchain security firm established in 2018, providing services such as security audits, security consultants, red teaming, and more.

slowmist.com

Joined April 2018

413 Following

90.3K Followers

Replies Reposts Media

SlowMist
@SlowMist_Team
18h
🚨SlowMist TI Alert🚨 💸 @slice__so Loss: ~$41k 🔍 Root Cause: FundsModule’s 0x9d2edfac trusted release amounts returned by caller-selected source contracts without verifying that the corresponding ETH or USDC was actually received. In this transaction, two selected contracts
27
SlowMist
@SlowMist_Team
18h
🚨 SlowMist TI Alert: Two Critical PHP Remote Code Execution (RCE) Vulnerabilities Disclosed 🚨 🔴 Severity: Critical 📌 CVEs: CVE-2026-109618, CVE-2026-109619 ⚠️ CVSS v4.0: 9.2 for both vulnerabilities 🛠️ Patch Status: Official patches pending On October 20, 2026, PHP
The PHP Foundation
@ThePHPF
Oct 20
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
6
SlowMist
@SlowMist_Team
19h
Four years ago, we built @MistTrack_io to make on-chain tracing and AML compliance analysis more accessible. Today, it’s trusted by 500+ institutions and 100,000+ users. Whether you’re investigating fund flows, building tools, or managing compliance, we’ve got options for every
Arkham
@arkham
Oct 20
Announcing Arkham Enterprise info.arkm.com/announcements/…
4
SlowMist
@SlowMist_Team
Oct 20
🚨 Recovering Private Keys from 6 Consecutive Observations: Qubic Wallet Vulnerability Analysis During our analysis of @_Qubic_ Wallet, we found that the wallet uses the same non-cryptographically secure Math.random() stream for account seed generation and dejaVu values exposed
Qubic
@_Qubic_
Oct 18
Security incident update. Between 23:42 UTC on 17 October and 01:26 UTC on 18 October, an attacker drained 1,404 Qubic wallets, totalling around 2.94 trillion QU. Here is what happened, what has been done, and what comes next.
12
SlowMist
@SlowMist_Team
Oct 19
🚨SlowMist TI Alert🚨 💸 Loss: ~$59.8k 🔍 Root Cause: The affected Argent-style smart wallet system exposed two exploitable flaws. In the recovery module, the unrestricted 0x254a2e49 setter allowed a crafted recovery period to make the calculated deadline wrap to a timestamp
slowmist.ai
SlowMist AI — Security for AI & Crypto
Securing AI systems and the crypto ecosystem from emerging threats.
28