Coinspect Security

@coinspect

You Build. We Defend. Since 2014 protecting critical decentralized systems: L1 nodes, smart contracts audits, wallets, web3 dApps, exchanges, bridges.

coinspect.com

Joined July 2014

796 Following

3,200 Followers

Replies Reposts Media Articles

Pinned
Coinspect Security
@coinspect
Oct 2
Coinspect is now a Ledger security audit partner for Ledger wallet apps! As one of Ledger's approved audit partners, we bring our crypto and embedded security expertise to help developers find and fix vulnerabilities before release. Building a Ledger app? Let's talk.
9
Coinspect Security
@coinspect
21h
Qubic's Math.random() wallet drain is another example of a vulnerability Coinspect has been warning about for months.
Qubic
@_Qubic_
Oct 18
Security incident update. Between 23:42 UTC on 17 October and 01:26 UTC on 18 October, an attacker drained 1,404 Qubic wallets, totalling around 2.94 trillion QU. Here is what happened, what has been done, and what comes next.
Coinspect Security
@coinspect
Oct 16
web3 frontend security: A dApp can serve malicious code to just one user while everyone else sees a normal site. DappFence doesn’t need to recognize the attack to block the code. It verifies that frontend code is authorized, without waiting for a report or a blocklist update.👇
1
Coinspect Security
@coinspect
Oct 4
If you suspect Ill Bloom or another weak wallet generation vulnerability is being exploited on a blockchain not currently covered by our datasets, please get in touch with us. We can expand coverage where there is evidence of affected wallets.
Coinspect Security
@coinspect
Jul 15
Ill Bloom update: After receiving reports of wallet drains on additional networks, we expanded the address checker's coverage, including: • EOS/Antelope public keys in both legacy EOS... and PUB_K1_ formats Never share your seed phrase or private key.
Coinspect Security
@coinspect
Oct 1
1/ We've been making steady progress on DappFence. The goal is simple but ambitious: dApp users shouldn’t have to blindly trust whatever content and code intermediate providers serve. The browser should be able to verify that the frontend is authentic.
1