Archive - Verichains

Technical Analysis - Improper Use of Private iOS APIs in some Vietnamese Banking Apps

Technical analysis reveals that BIDV and Agribank mobile banking apps exploit private iOS API side channel issue to detect other apps installed on…

Mar 28 •

Binance Chain Bridge Exploitation Writeup - Part 1

Binance Chain was hacked with almost $600M of asset value with roughly $90M being moved out of the Binance ecosystem. In this writeup, we write an…

Oct 7, 2022 •

Phân tích: Lạm dụng API riêng tư trên iOS ở một số app ngân hàng Việt

Mar 29 •

[VSA-2022-120] Multichain: Key Extraction Vulnerability in fastMPC's Secure Multi-Party Client (smpc)

Since October 2022, Verichains has been conducting extensive research on threshold ECDSA security.

Mar 27, 2023 •

and

Cetus Protocol $260M Exploit: Root Cause Analysis and Technical Breakdown

This analysis aims to dissect the root cause of Cetus Protocol hack, providing a clear understanding of the incident, the exploited vulnerability, and…

May 22 •

and

Verichains Discovers Critical Key Extraction Attacks in Popular Threshold Signature Scheme for MPC Wallets and Digital Asset Custody

Verichains announced today that it discovered critical Key Extraction Attacks in many popular Threshold Signature Scheme (TSS) implementations, a…

Mar 28, 2023 •

Technical Analysis of the Bybit Hot Wallet Exploit

Feb 25 •

$320 Million Wormhole Hack Explained

Credit: Khang Hoang, Giap Nguyen

Feb 21, 2022 •

Binance Chain Bridge Exploitation Writeup - Part 2

This is the second part of our analysis on Binance Chain's bridge hack, focus on hacker transactions and exploitation payloads.

Oct 8, 2022 •

Hacker đã cuỗm đi gần $150k của dự án HeroFi

Cập nhật ngày 08/12/2021, đội ngũ phát triển của HeroFi có liên lạc với chúng tôi, cho biết tình hình khắc phục sự cố đã diễn ra một cách nhanh chóng…

Dec 7, 2021 •

Discovering and Fixing a Critical Vulnerability in Polygon zkEVM

In September 2023, Whitehat researchers at Verichains identified a critical vulnerability within Polygon zkEVM, a layer-2 solution designed to enhance…

Mar 19, 2024 •

and

[VSA-2022-100] Tendermint: Forging Membership Proof of Empty Merkle Tree Vulnerability in IAVL Proof

Verichains discovered critical vulnerabilities in Tendermint that could have resulted in a significant loss of funds from projects using IAVL proof…

Mar 1, 2023 •

#nojs-banner { position: fixed; bottom: 0; left: 0; padding: 16px 16px 16px 32px; width: 100%; box-sizing: border-box; background: red; color: white; font-family: -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; line-height: 13px; } #nojs-banner a { color: inherit; text-decoration: underline; } This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts