SEVEN.LEGEND // V4
Users Online: 1
Total Hits: 9,597
RSS // DATA STREAM
DATA STREAMS // RSS AGGREGATOR
0day Fans Troy Hunt USOM Threat Intel Welive Security The Hacker News Zero Day Initiative HackRead Coin Telegraph Bitcoinist RSS
0day Fans
A curated feed of the latest security research and advisories.
Ethereum Bridge BTC Import/Proof Path Trace-Attributed Unauthorized Payout
DATE: 2026.05.17 // 00:00 // AUTH: DARKNAVY
On Ethereum block `25118335` at `2026-05-17T23:55:23Z`, attacker EOA `0x5abb91b9c01a5ed3ae762d32b236595b459d5777` called bridge dispatcher `0x71518580f36feceffe0721f06ba4703218cd7f63` and drained bridge-held assets to drainer `0x65cb8b128bf6e69076104...
ACCESS DATA >>
Bad News for the Average Pentester
DATE: 2026.05.16 // 03:28 // AUTH: Shawn Moyer
With the changes to the market of late, Atredis has actually been exceedingly busy. We've been working with AI and related tech since we started the company over a dozen years ago, but in the last year, like everyone, our work has changed: we're tes...
ACCESS DATA >>
Adshares Wrapper On-Chain Whitehat Message Is Settlement Traffic, Not The Exploit
DATE: 2026.05.16 // 00:00 // AUTH: DARKNAVY
On Ethereum at 2026-05-16 18:15:23 UTC, transaction `0x99a1114c2e8dc1807e00da0e963a6fbd5d91a04d1e1fd0a75b78e9c6b41a7464` was an on-chain plaintext settlement message related to Adshares Wrapper, not the drain transaction itself. The trace shows a sin...
ACCESS DATA >>
Adshares Wrapper Incident Follow-Up Transaction: Post-Incident On-Chain Message, Not Exploit Execution
DATE: 2026.05.16 // 00:00 // AUTH: DARKNAVY
On May 16, 2026, transaction `0x7a823a891b7c5c02de50931f34cf50fc12cc600fe8b390b8f3dc29f2222c93b8` on Ethereum made a single zero-value call with plaintext calldata and no internal execution, logs, or transfers, marking it as post-incident Adshares Wr...
ACCESS DATA >>
Hack the Elephant One Bite at a Time: JPEG-Related Memory-Safety Bugs in PHP
DATE: 2026.05.15 // 09:09 // AUTH: admin
PHP is one of the world’s most popular programming languages. The PHP core itself is rarely perceived as an attack surface — attention usually shifts to frameworks and third-party libraries. However, a significant portion of real-world applicatio...
ACCESS DATA >>
WrappedADS Privileged `wrapTo()` Mint Through the Authorized Minter Allowance Path
DATE: 2026.05.14 // 23:59 // AUTH: DARKNAVY
WrappedADS on Ethereum processed a direct `wrapTo()` mint on May 15, 2026 that created `999,999.94319920782` wADS for `0x63e22ce9bde9bb8892a447258abfcaa4142f001b`. The evidence in this analysis directory supports an `access_control` conclusion, not a...
ACCESS DATA >>
TrustedVolumes On-Chain Message Is Post-Exploit Settlement Traffic, Not The Drain
DATE: 2026.05.14 // 23:59 // AUTH: DARKNAVY
On May 15, 2026, transaction 0xebeec0... on Ethereum carried a plaintext settlement demand referencing the prior TrustedVolumes theft and should be classified as post-exploit message traffic rather than the exploit itself.
ACCESS DATA >>