Logo
Picture

BLOCKMAGE @BlockmageSec

Web3 Native Threat Intelligence. blockmage.dev The Ether Joined December 2022
  • Tweets
    266
  • Followers
    1K
  • Following
    152
  • Likes
    390
BlockmageSec Profile Picture

BLOCKMAGE @BlockmageSec

3 months ago

Takeaway: Automated scanners are essential for flagging capabilities, but manual verification is the only way to determine intent. We acted quickly in hopes of preventing harms, but in this case, we were mistaken. We've removed the post to avoid any confusion (sorry!).

BlockmageSec Profile Picture

BLOCKMAGE @BlockmageSec

3 months ago

- The SOL wallet identified was actually a character property table in the Oniguruma regex engine. - The "Dropper" patterns were standard Emscripten/LLHTTP boilerplate. - The "Stealer" hits were bundled dotenv and undici dependencies.

BlockmageSec Profile Picture

BLOCKMAGE @BlockmageSec

3 months ago

Earlier today, we flagged a VS Code extension (rphlmr.vscode-drizzle-orm) based on 21 critical YARA hits from vsix-audit. After manual inspection and deeper analysis, inspecting the .vsix, and reversing the WASM binaries, we’ve confirmed this is a False Positive.

BLOCKMAGE retweeted
0xFantasy Profile Picture

Fantasy @0xFantasy

10 months ago

1/ I've been doing some research into how Unity Packages (similar to Node or Pip packages) could be weaponized for malware delivery Let me tell you, it doesn't exactly look good... 🧵

BLOCKMAGE retweeted
Alchemyst0x Profile Picture

Alchemyst @Alchemyst0x

a year ago

Links: CVE-2025-31201: Apple CVE-2025-31200: Apple and Google Threat Analysis Group macOS Sequoia 15.4.1: support.apple.com/en-us/122400 iOS 18.4.1 and iPadOS 18.4.1: support.apple.com/en-us/122282 visionOS 2.4.1: support.apple.com/en-us/122402

BLOCKMAGE retweeted
Alchemyst0x Profile Picture

Alchemyst @Alchemyst0x

a year ago

No excuses. These are live use, not theoretical CVEs. Apple doesn’t push same-day cross-platform updates and delete vulnerable code unless the stakes are real. Stay sharp. Patch everything. Watch your traffic. 🧙‍♂️

BLOCKMAGE retweeted
Alchemyst0x Profile Picture

Alchemyst @Alchemyst0x

a year ago

Two #CVE's, patched across every Apple platform, both marked as actively exploited in the wild: #Apple just released: - macOS 15.4.1, - iOS 18.4.1 - iPadOS 18.4.1 - tvOS 18.4.1 - visionOS 2.4.1 — and you should stop what you're doing and update now.

BLOCKMAGE retweeted
intell_on_chain Profile Picture

IOC Investigations @intell_on_chain

2 years ago

July 2023 #TornadoCash exit worth 1,400 ETH ($2.6M) Exit via 100 ETH Contract, swaps for USDC, heads out over the Synapse bridge, to Polygon 0xc09d3c2 and get gambled away at @Stake. I see this fairly often when analysing TC. Tool: @MetaSleuth

BLOCKMAGE retweeted
zachxbt Profile Picture

ZachXBT @zachxbt

3 years ago

@zaingaziani @Ledger @Microsoft Sadly received two messages about this from victims today. Seems another person lost funds in just past few min.

BLOCKMAGE retweeted
zachxbt Profile Picture

ZachXBT @zachxbt

3 years ago

Community Alert: There is currently a fake @Ledger Live app on the official @Microsoft App Store which was resulted in 16.8+ BTC ($588K) stolen Scammer address bc1qg05gw43elzqxqnll8vs8x47ukkhudwyncxy64q

BLOCKMAGE retweeted
zachxbt Profile Picture

ZachXBT @zachxbt

3 years ago

1/ An investigation into the Canadian scammer known as Yahya for their involvement in 17+ SIM swaps which resulted in more than $4.5M stolen.

BlockmageSec Profile Picture

BLOCKMAGE @BlockmageSec

3 years ago

@solminingpunk How else would we know what they are up to all the time?

BlockmageSec Profile Picture

BLOCKMAGE @BlockmageSec

3 years ago

Unfortunate but true, web3 sees security as something you pay for once prior to your contract deployment. Brand protection gets sidelined in favor of keeping hype perpetually alive. Not to mention, those who do help, very often get nothing in return, so there's little incentive for professionals, albeit rife with opportunity to improve security across the board. We hardly have a name for the position though, so it can certainly be and feel overwhelming. That said, its always appreciable seeing the builders and the devs and security techs that are here, reaching out and making such efforts. This has been a constant in the space for years despite any market or trends otherwise. There's a sense of purpose to the whole thing because of this, and it certainly brings a level of quality and enthusiasm that you can't rightly find elsewhere. Nice post - cheers.

BLOCKMAGE retweeted
0xFantasy Profile Picture

Fantasy @0xFantasy

3 years ago

@PeckShieldAlert This is another MakerDAO deposit. Now, I dont understand the exact mechanics of this, but after a bit of digging, funds seem to get withdrawn from Maker as USDC and deposited into Coinbase x.com/0xFantasy/stat…

0xFantasy Profile Picture

Fantasy @0xFantasy

3 years ago

@MistTrack_io seems that it was a deposit into maker. call trace and debank show it properly, but etherscan doesnt for some reason docs.makerdao.com/smart-contract…

BLOCKMAGE retweeted
CaidoIO Profile Picture

Caido @CaidoIO

3 years ago

It's release time 🎃 - Responses can now be intercepted and modified - Delete requests from HTTP History - [Pro] Import/export your projects using our new "backups" page - [Pro] Add shell commands to your convert workflows with the new "Shell" node github.com/caido/caido/re…

BlockmageSec Profile Picture

BLOCKMAGE @BlockmageSec

3 years ago

@nft_sec llm-attacks.org or github.com/llm-attacks/ll…

BLOCKMAGE retweeted
intell_on_chain Profile Picture

IOC Investigations @intell_on_chain

3 years ago

GM GMers! Tagging people who do great work in this space but I feel are not shown enough love! Go follow ⬇️ @CryptoaaService @WoAS_Necksus @0xFantasy @0xSaiyanElite @1c4m3by @Plumferno @BlockMageSec @boringsecurity @brookejlacey @ManicalEngineer Who did I miss? Tag them!

BLOCKMAGE retweeted
Vaana2K Profile Picture

Vaana❤️ @Vaana2K

3 years ago

@PocketUniverseZ @1c4m3by @OxSaiyanGod @BlockMageSec @Plumferno @opensea @Server_Forge @1c4m3by saved me the other day 🤝 appreciate your work ♥️

BLOCKMAGE retweeted
PocketUniverseZ Profile Picture

Pocket Universe 🟣 @PocketUniverseZ

3 years ago

Introducing the Pocket Guardians They've already saved *hundreds* of you from dangerous websites Here's a quick intro ⬇️

BLOCKMAGE retweeted
PocketUniverseZ Profile Picture

Pocket Universe 🟣 @PocketUniverseZ

3 years ago

3/ - @1c4m3by is a security researcher who's already blocked hundreds of scams - @OxSaiyanGod is a security researcher from @BlockMageSec - @plumferno works at @opensea's trust & safety team and founded @Server_Forge

Trends for United States

Knicks
Knicks
Brunson
Wemby
Harper
Josh Hart
Aaron Fox
#loveislandusa
Mitch Johnson
#AEWDynamite
San Antonio
Kenzie
Scott Foster
Champagnie
Bryce
#Spurs
Gabriel
3 MORE
Shamet
Mike Brown

You might like

A social movement & private-by-default tech stack built to revitalise civil society.
Logos
@Logos_network
70K Followers
Bringing Compliance to Cryptoassets. Blockchain analytics, training, and certification for crypto businesses, financial institutions, and regulators.
Elliptic
@elliptic
18K Followers
Smart Contract Audit | Security Monitoring | AML/CFT (KYA/KYT) | Crypto Investigation | @Phalcon_xyz @MetaSleuth @MetaDockTeam 👉TG: https://t.co/owokTLanv5
BlockSec
@BlockSecTeam
27K Followers
Preventing fraud and financial crime for digital currencies
TRM Labs
@trmlabs
16K Followers
Professional Crypto & OSInt Investigations | Visit us @ https://t.co/JY6uEKeGxH | Urgent support +44 (0) 330 133 9852 or visit https://t.co/yz3dvkDcNX
IOC Investigations
@intell_on_chain
5K Followers
Crypto Anti-Scam🛡️ | User-safety advocate 🌐 🧩 Extension: https://t.co/How2d4sL8b 📲 | ✈️ TG: https://t.co/qbfM5Z44mZ
Scam Sniffer | Web3 A...
@realScamSniffer
90K Followers
Founder @0xfluid. Co-founder @Instadapp @avowallet. DeFi. Forbes 30 under 30 India/Asia.
Samyak Jain 🌊
@smykjain
16K Followers
Web2/3 - Security Researcher. - Guardian/Researcher @pocketuniverseZ
͔̤͎̝̣͈̩̤͈̭�...
@1c4m3by
2K Followers
Co-founder of BlockSec (@BlockSecTeam) | Views are my own
Lei Wu
@realvisual
268 Followers
Security R&D @MetaMask | Co-founder & Co-CEO of @wallet_guard acquired by @Consensys | Security Alliance - @_SEAL_ORG | Opinions are my own
Ohm
@0xOhm_eth
5K Followers
Intel @DoppelHQ, Investigations @Fairside, Contributor @BoringSecurity
Fantasy
@0xFantasy
2K Followers
Product @ MetaMask 🦊 | prev. co-founder & co-CEO @wallet_guard (acquired) | Building a safer web3 for all. Opinions are my own.
Martin
@TheMindofMar
2K Followers
Most likely at the dog park | Tech lead of Product Safety @Metamask | Previously cofounder @wallet_guard (acquired)
Jacob 🚀
@AugmentedMode
780 Followers
@candidelabs
marc
@heymarcopolox
820 Followers