How to Find Attackers and Improve Your Security Posture
summary
Shows the WiirX hack of about $240 million from a malicious contract upgrade, links the deployer to Tornado Cash Classic and matches deposits using Dune Analytics; exposes four-byte signature reuse between a test deployer and the attack contract and traces 0.6 ETH/0.5 ETH flows. A second case ties a private key compromise to ENS history, profanity addresses and transfers into a DPRK-linked address, emphasizing concrete contract, funds and OSINT steps investigators actually use.
AI-written summary · about
related talks
10mHow to Understand a Smart Contract Hack
46mAttacks, Lies and the Underground World
32mHacking the OSS Supply Chain
55mNation-State Moneymule's Hunting Season – APT Attacks Targeting Financial Institutions
42mTracking Attackers in Open Source Supply Chain Attacks: The New Frontier
34mThe Simple, Yet Lethal, Anatomy of a Software Supply Chain Attack
47mThe Heist: Chasing an Advanced Crypto Attacker Across the Multi-cloud
24mBitcoin Web Application Security