hexens

@hexens

Security for those who cannot afford a mistake.

hexens.io

Joined September 2021

Following

9,179

Followers

Replies Reposts Media Articles

Pinned
hexens
@hexens
Jul 6
1/ we found a bug in the Aptos Move VM that put up to $70B at systemic risk. type confusion at the execution layer. a ~90% success rate across hundreds of simulated runs on a 30+ validator cluster. cost to build the attack infrastructure: $3,000. Conducted by @kemmio , to our
Arbitrary Struct Hijack in Aptos Move VM
From hexens.io
11
hexens
@hexens
5h
You integrate Aave by writing one address into your code. That one address pulls in at least 310 risks that you didnt monitor or even know of (428 nodes). But how do you monitor all of this? When anything happens there nobody calls you. There is no changelog for your risk
1
hexens
@hexens
Sep 21
We're bringing the Loss Prevention Lounge to TOKEN2049. Both days. Paste a public address, wallet or contract, and watch us map what it actually rests on, hop by hop. Anything worth an alert, we put under live monitoring before you leave. Oct 7 & 8 · 10:00-18:00 SGT · Level 1,
3
hexens
@hexens
Sep 16
A team we onboarded to Glider Monitor runs 85 contracts across six chains — Ethereum, Arbitrum, Base and three more. Their dependency graph came back with 2,895 addresses. That is 34 inherited contracts for every one they deployed. Oracles, routers, proxies, token
4
hexens
@hexens
Sep 15
Audit Completed: @1inch Aqua and Swap VM, a bytecode engine where makers compose swap strategies from individual instructions. Across two reviews we looked at PeggedSwap pricing, decay offsets, protocol fee ordering and the external call surface, plus the SplineSwap update.
00:00
3