ScaleBit

@scalebit_

Sub-brand of @0xbitslab. We're a Blockchain Security Team that Provides Proficient Audit Solutions for the Mass Adoption of Web3

📧[email protected]

scalebit.xyz

Joined June 2023

ScaleBit
@scalebit_
Aug 19
1/3 🛡️A hardware wallet doesn’t need to leak your seed phrase to put your funds at risk. BitBox just patched 2⃣ severe firmware vulnerabilities. ✅One could lead to arbitrary code execution. ✅The other could lock funds to an unintended address.
ScaleBit
@scalebit_
Aug 13
💡A valid transaction is not always a valid bridge deposit.
MoveBit
@MoveBit_
Aug 13
A secure destination-chain contract can still receive incorrect state from off-chain relayers.
Article
The XRPL–Coreum Bridge Vulnerability: How the Wrong Payment Became Valid Deposit Evidence
The issue in the XRPL–Coreum bridge incident appears straightforward: when identifying inbound XRPL transfers, the relayer failed to verify whether the Payment Destination was the bridge address....
ScaleBit
@scalebit_
Aug 11
⚠️Smart contracts aren’t always targets. ‼️Sometimes they become attacker infrastructure. 🔘Unit 42 analyzed Aeternum, which uses a Polygon contract as an on-chain C2 resolver. slot 0 → admin slot 1 → encrypted C2 0xb68d1809 → getDomain() 0xb249cd2d → updateDomain()
ScaleBit
@scalebit_
Aug 6
🔔Your assets may still be lost if the wallet’s underlying cryptographic implementation is flawed!
MoveBit
@MoveBit_
Aug 6
Article
Beyond Seed Phrases: The Hidden Cryptographic Risks Behind Wallet Security
In digital asset security, “whoever controls the private key controls the assets” has long been treated as an industry-wide principle. However, BitsLab’s latest research reveals a frequently...
ScaleBit
@scalebit_
Aug 5
Key security doesn’t begin with storage. It begins with entropy ✅
BitsLab
@0xbitslab
Aug 5
🛡️Security Breakdown | COLDCARD 【Your private key doesn’t need to be stolen if an attacker can recreate it.】 The deeper issue behind the COLDCARD incident is not phishing or physical compromise — but weak entropy at seed generation. 💡The critical path looked deceptively