Skip to content

Commit abc9179

Browse files
author
Bitfinding website publisher
committed
Publish 9ec65076a96a474f827f135b4086716c0d4ffbde
1 parent a714f9a commit abc9179

16 files changed

Lines changed: 58 additions & 46 deletions

File tree

‎404.html‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@
3030
<link rel="icon" href="/favicon.ico" sizes="any">
3131
<link rel="icon" href="/favicon.svg" type="image/svg+xml">
3232
<link rel="apple-touch-icon" href="/apple-touch-icon.png">
33-
<link rel="stylesheet" href="/assets/css/style.css?v=1788809619">
33+
<link rel="stylesheet" href="/assets/css/style.css?v=1788810189">
3434
</head>
3535

3636
<body>

‎blog/54k-rescue-on-arbitrum-network/index.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
<link rel="icon" href="/favicon.ico" sizes="any">
4343
<link rel="icon" href="/favicon.svg" type="image/svg+xml">
4444
<link rel="apple-touch-icon" href="/apple-touch-icon.png">
45-
<link rel="stylesheet" href="/assets/css/style.css?v=1788809619">
45+
<link rel="stylesheet" href="/assets/css/style.css?v=1788810189">
4646
</head>
4747

4848
<body class="layout-post section-blog">
@@ -144,6 +144,6 @@ <h2 class="section-title" id="connected-title">Stay <span>Connected</span>
144144
</div>
145145
</footer>
146146

147-
<script src="/assets/js/site.js?v=1788809619" defer></script>
147+
<script src="/assets/js/site.js?v=1788810189" defer></script>
148148
</body>
149149
</html>

‎blog/balancer-exploit-interception/index.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
<link rel="icon" href="/favicon.ico" sizes="any">
4343
<link rel="icon" href="/favicon.svg" type="image/svg+xml">
4444
<link rel="apple-touch-icon" href="/apple-touch-icon.png">
45-
<link rel="stylesheet" href="/assets/css/style.css?v=1788809619">
45+
<link rel="stylesheet" href="/assets/css/style.css?v=1788810189">
4646
</head>
4747

4848
<body class="layout-post section-blog">
@@ -186,6 +186,6 @@ <h2 class="section-title" id="connected-title">Stay <span>Connected</span>
186186
</div>
187187
</footer>
188188

189-
<script src="/assets/js/site.js?v=1788809619" defer></script>
189+
<script src="/assets/js/site.js?v=1788810189" defer></script>
190190
</body>
191191
</html>

‎blog/enforcing-transaction-simulation/index.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
<link rel="icon" href="/favicon.ico" sizes="any">
4343
<link rel="icon" href="/favicon.svg" type="image/svg+xml">
4444
<link rel="apple-touch-icon" href="/apple-touch-icon.png">
45-
<link rel="stylesheet" href="/assets/css/style.css?v=1788809619">
45+
<link rel="stylesheet" href="/assets/css/style.css?v=1788810189">
4646
</head>
4747

4848
<body class="layout-post section-blog">
@@ -303,6 +303,6 @@ <h2 class="section-title" id="connected-title">Stay <span>Connected</span>
303303
</div>
304304
</footer>
305305

306-
<script src="/assets/js/site.js?v=1788809619" defer></script>
306+
<script src="/assets/js/site.js?v=1788810189" defer></script>
307307
</body>
308308
</html>

‎blog/index.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@
3838
<link rel="icon" href="/favicon.ico" sizes="any">
3939
<link rel="icon" href="/favicon.svg" type="image/svg+xml">
4040
<link rel="apple-touch-icon" href="/apple-touch-icon.png">
41-
<link rel="stylesheet" href="/assets/css/style.css?v=1788809619">
41+
<link rel="stylesheet" href="/assets/css/style.css?v=1788810189">
4242
</head>
4343

4444
<body class="layout-blog section-blog">
@@ -342,6 +342,6 @@ <h2 class="section-title" id="connected-title">Stay <span>Connected</span></h2>
342342
</div>
343343
</footer>
344344

345-
<script src="/assets/js/site.js?v=1788809619" defer></script>
345+
<script src="/assets/js/site.js?v=1788810189" defer></script>
346346
</body>
347347
</html>

‎blog/open-sourcing-multiplexer/index.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
<link rel="icon" href="/favicon.ico" sizes="any">
4343
<link rel="icon" href="/favicon.svg" type="image/svg+xml">
4444
<link rel="apple-touch-icon" href="/apple-touch-icon.png">
45-
<link rel="stylesheet" href="/assets/css/style.css?v=1788809619">
45+
<link rel="stylesheet" href="/assets/css/style.css?v=1788810189">
4646
</head>
4747

4848
<body class="layout-post section-blog">
@@ -208,6 +208,6 @@ <h2 class="section-title" id="connected-title">Stay <span>Connected</span>
208208
</div>
209209
</footer>
210210

211-
<script src="/assets/js/site.js?v=1788809619" defer></script>
211+
<script src="/assets/js/site.js?v=1788810189" defer></script>
212212
</body>
213213
</html>

‎blog/paribus-hack-interception/index.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
<link rel="icon" href="/favicon.ico" sizes="any">
4343
<link rel="icon" href="/favicon.svg" type="image/svg+xml">
4444
<link rel="apple-touch-icon" href="/apple-touch-icon.png">
45-
<link rel="stylesheet" href="/assets/css/style.css?v=1788809619">
45+
<link rel="stylesheet" href="/assets/css/style.css?v=1788810189">
4646
</head>
4747

4848
<body class="layout-post section-blog">
@@ -200,6 +200,6 @@ <h2 class="section-title" id="connected-title">Stay <span>Connected</span>
200200
</div>
201201
</footer>
202202

203-
<script src="/assets/js/site.js?v=1788809619" defer></script>
203+
<script src="/assets/js/site.js?v=1788810189" defer></script>
204204
</body>
205205
</html>

‎blog/semantic-second-factor/index.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
<link rel="icon" href="/favicon.ico" sizes="any">
4343
<link rel="icon" href="/favicon.svg" type="image/svg+xml">
4444
<link rel="apple-touch-icon" href="/apple-touch-icon.png">
45-
<link rel="stylesheet" href="/assets/css/style.css?v=1788809619">
45+
<link rel="stylesheet" href="/assets/css/style.css?v=1788810189">
4646
</head>
4747

4848
<body class="layout-post section-blog">
@@ -236,6 +236,6 @@ <h2 class="section-title" id="connected-title">Stay <span>Connected</span>
236236
</div>
237237
</footer>
238238

239-
<script src="/assets/js/site.js?v=1788809619" defer></script>
239+
<script src="/assets/js/site.js?v=1788810189" defer></script>
240240
</body>
241241
</html>

‎blog/signature-overflow-attacks-on-ledger/index.html‎

Lines changed: 12 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
<link rel="icon" href="/favicon.ico" sizes="any">
4343
<link rel="icon" href="/favicon.svg" type="image/svg+xml">
4444
<link rel="apple-touch-icon" href="/apple-touch-icon.png">
45-
<link rel="stylesheet" href="/assets/css/style.css?v=1788809619">
45+
<link rel="stylesheet" href="/assets/css/style.css?v=1788810189">
4646
</head>
4747

4848
<body class="layout-post section-blog">
@@ -471,6 +471,13 @@ <h2 id="making-257-calls-fit"><a class="section-link" href="#making-257-calls-fi
471471

472472
<h2 id="proof-of-concept"><a class="section-link" href="#proof-of-concept" title="Link to this section">8. Proof of Concept</a></h2>
473473

474+
<blockquote>
475+
<p><strong>Before testing:</strong> Treat the PoC page and its outputs as untrusted. Use a
476+
separate test device with a new, disposable seed phrase and no real funds.
477+
Never use your everyday wallet or reuse its recovery phrase. Never enter a
478+
seed phrase into the PoC page or any website.</p>
479+
</blockquote>
480+
474481
<p>The <a href="/poc/ledger-clear-signing-bypass/">hardware signing artifact wizard</a>
475482
presents the Safe, Aave, and Morpho proofs as three paths through one page. For
476483
each protocol it reconstructs the canonical 257-element payload, requests a
@@ -488,9 +495,8 @@ <h2 id="proof-of-concept"><a class="section-link" href="#proof-of-concept" title
488495
field and the corresponding <code class="language-plaintext highlighter-rouge">Safe.execTransaction</code> calldata. Aave and Morpho
489496
export complete raw signed EIP-1559 transactions.</p>
490497

491-
<p>The browser deliberately stops before execution. It has no RPC configuration
492-
and cannot broadcast. Instead, it generates commands that consume the exported
493-
artifact through independent Safe or DeFi runners on a pinned, disposable
498+
<p>The page generates commands that consume the exported artifact through
499+
independent Safe or DeFi runners on a pinned, disposable
494500
Anvil fork.</p>
495501

496502
<p>The final result compares the device display, signed authorization, and local
@@ -522,7 +528,7 @@ <h2 id="proof-of-concept"><a class="section-link" href="#proof-of-concept" title
522528

523529
<p>A physical-device capture requires Chrome or Edge, an affected test device,
524530
and a disposable seed. The fixed Ethereum app rejects the malformed array. The
525-
page does not offer an archived-signature fallback and never broadcasts.</p>
531+
page does not offer an archived-signature fallback.</p>
526532

527533
<h2 id="fix-and-release"><a class="section-link" href="#fix-and-release" title="Link to this section">9. Fix and Release</a></h2>
528534

@@ -739,6 +745,6 @@ <h2 class="section-title" id="connected-title">Stay <span>Connected</span>
739745
</div>
740746
</footer>
741747

742-
<script src="/assets/js/site.js?v=1788809619" defer></script>
748+
<script src="/assets/js/site.js?v=1788810189" defer></script>
743749
</body>
744750
</html>

‎blog/unblind-safe-dashboard/index.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
<link rel="icon" href="/favicon.ico" sizes="any">
4343
<link rel="icon" href="/favicon.svg" type="image/svg+xml">
4444
<link rel="apple-touch-icon" href="/apple-touch-icon.png">
45-
<link rel="stylesheet" href="/assets/css/style.css?v=1788809619">
45+
<link rel="stylesheet" href="/assets/css/style.css?v=1788810189">
4646
</head>
4747

4848
<body class="layout-post section-blog">
@@ -189,6 +189,6 @@ <h2 class="section-title" id="connected-title">Stay <span>Connected</span>
189189
</div>
190190
</footer>
191191

192-
<script src="/assets/js/site.js?v=1788809619" defer></script>
192+
<script src="/assets/js/site.js?v=1788810189" defer></script>
193193
</body>
194194
</html>

0 commit comments

Comments
 (0)