Tag
13 pieces
A vulnerability report for TON now comes with a self-check written by a language model, following a guide from the program's own repository.
· 6 min read
A fix in the JavaScript engine matching V12's finding is dated November 10, 21 minutes before the Durov post that opened widgets to everyone.
· 6 min read
In two hours, 123.5 thousand Gram, 376.7 thousand USDT and 94 other kinds of tokens left xRocket's hot wallet, and the next day they were back in circulation through a new wallet.
· 7 min read
A USDT vault share cost 1.068 USDT, now it's less than a thousandth of a cent. The project has made no statements for over a month.
· 5 min read
A checkmark next to the app name, login accurate to the second, and location on the map — all from the fields the server provides for each session.
· 5 min read
A bug in parsing a service call message was fixed in Telegram's common call library back in April, but in Telegram for Android, only in September.
· 3 min read
Fuzzing rlottie with a language model, bypassing server-side sticker validation, and executing code in Telegram for iOS — without a single tap from the victim.
· 5 min read
Three hours after the attack, Binance's hot wallet in TON sent 5.7 million TON and 59 million USDT to an address that had topped up this wallet itself a week prior.
· 5 min read
Withdrawal requests from regular users of the bridge are numbered 366, 368, 373. Requests for which 242 trillion BabyDoge were withdrawn over three nights are 888001, 888002, 888003, 888004, and there is not a single deposit behind them.
· 6 min read
While the "Report" panel hangs over the chat, the stranger will not see two checkmarks, and their buttons and links in messages do not work.
· 7 min read
It had to be fixed twice. After 7.2.7 with "Fix crashes with invalid lottie files," 7.2.8 was released three days later with "Fix some more crashes."
· 1 min read
The stolen credit card store operated like a regular Telegram Mini App: a bot, a storefront, a search function for leaks, and a map of victims' addresses. Stolen keys were sorted into supergroup forum topics—one topic for each key type, totaling 471.
· 7 min read
An animated sticker is spreading through Telegram chats, causing the app to crash during rendering. The vulnerability affects iOS, Android, macOS, and Windows; the web version continues to function normally. The bug report had been in Telegram’s support system since July; developers only began…
· 4 min read
