When Hip-Hop Was Young

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   samczsun, gf_256, and ret2jazzy reverse engineer the wormhole crypto exploit

   Wormhole didn't properly validate all input accounts, which allowed the attacker to spoof guardian signatures and mint 120,000 ETH on Solana, of which they bridged 93,750 back to Ethereum.

   Read : samczsun, gf_256, and ret2jazzy reverse engineer the wormhole crypto exploit
2. /02

   How I hacked a hardware crypto wallet and recovered $2 million

   I've previously shared this in article form but the video is a must-watch. Joe Grand was contacted to hack a Trezor One hardware wallet and recover $2 million worth of cryptocurrency (in the form of THETA).

   Watch : How I hacked a hardware crypto wallet and recovered $2 million
3. /03

   Solving DOM XSS Puzzles

   DOM-based Cross-site scripting (XSS) vulnerabilities rank as one of spaceraccoon's favorite vulnerabilities to exploit. It's a bit like solving a puzzle; sometimes you get a corner piece like $.html(), other times you have to rely on trial-and-error.

   Read : Solving DOM XSS Puzzles
4. /04

   OrwaGodFather Methodology

   Video series where GodFather Orwa explains their bug bounty methodology.

   Watch : OrwaGodFather Methodology
5. /05

   What Bypassing Razer's DOM-based XSS Patch Can Teach Us

   An old story of a bug EdOverflow uncovered and reported to Razer’s vulnerability disclosure program resurfaced recently while they were chatting with Linus Särud.

   Read : What Bypassing Razer's DOM-based XSS Patch Can Teach Us