Zun
@Zun2025 • 41,935 subscribers
defi researcher & security analyst · solo dev at https://t.co/p8syKzovmF
Videos
dev who can't protect their backend securely even launching token and nft mint just stay away from these rugpull projects
Zun83,224 просмотров • 15 дней назад
I had a voice chat with founder of Humanity this morning. I want to be very transparent and keep everything up to you, that is why I am publishing this video recording even though he asked me not to. I want to let all VCs and Web3 people know the founder's mentality about their users. TLDR : 1) They reserved some percentage of allocation from Community Incentive (which was supposed to be distribute among users) for CEX listing 2) If you published your referral link publicly and any bad actor joined through it, your allocation was significantly penalized. You were expected to share it only with friends you trust. 3) They distributed the airdrop based on the value of your community. For example, if a project founder got 100 referrals and an airdrop influencer got the same number, the founder’s community was considered more valuable, so the founder received a larger allocation than a regular airdrop influencer. 4) If a bad actor joined through your referral link, or if you joined through a bad actor’s referral link, both of you were penalized or deemed ineligible for the airdrop. 5) A few minutes ago, I checked that they updated my allocation to 20,565 $H, while other users’ allocations increased by only 100 $H.
Zun133,500 просмотров • 1 год назад
Yesterday, I posted a long article on how to protect your wallet from hacks. There I promised to create a website where anyone will be able to revoke delegation with a sponsored transaction. When is this revocation effective? • If you believe that your wallet's private key or seed phrase is not compromised anyhow, neither your system is compromised but still it drains ERC20 tokens as well as gas balance instantly. Only in this case, you should try revoking the hacker's existing delegation. Now your question is during revoking there is need of gas fee in the compromised wallet but once you send the gas fee it gets drained then how can you revoke? • That is why I created this website where you need to generate a wallet address and send some gas fee in this wallet address (not in the compromised wallet) and this wallet will then pay the gas fee on behalf of your compromised wallet. 🔗 Website link : Later, you can withdraw all the remaining gas fee from this temporary wallet as well. But if you see that even after revoking the hacker again re-delegated it to his wallet or contract, then it is most likely a seed phrase or private key compromise. You should try to revoke max 3 to 5 times, if the hacker is not re-delegating then you should send a little gas fee in your compromised wallet, if this gas fee does not get drained now then you can think that your wallet is safe.
Zun107,825 просмотров • 11 месяцев назад
Introducing Batch Bridge, powered by Relay A tool that allow users to bridge or swaps multiple tokens across Ethereum, Base and Arbitrum in a single batch transaction using EIP5792 and EIP7702 🔗 Tool Link : 🔗 Code : Batching very small value tokens may cause issues, so it is best to batch tokens worth at least $1. This rool uses EIP-5792 for batching when supported. Wallets that do not support wallet_sendCalls fall back to sequential transactions. For the true batch transaction experience, use ambire.eth wallet or OKX wallet, they fully support EIP-5792 batch calls, allowing all swaps and approvals to execute in a single transaction.
Zun60,118 просмотров • 7 месяцев назад
Today, I built a very simple game "Blast or Bless" to participate in the "Succinct Rockstars: Week 2" competition. #SuccinctRockStars In this game, players need to buy 5 lives using 0.0005 Sepolia ETH. They must then sacrifice 1 life to gain 5 stars. The goal is to earn as many stars as possible by clicking on the boxes. However, there's a twist! Among the 9 boxes, 2 contain bombs. Players must collect stars while avoiding these bombs. If a player manages to collect some stars but doesn’t want to risk losing them, they can simply click the cash-out button to secure their stars. Check out the game here : This event will end tomorrow, so you can also try to participate in this competition to earn more stars. More details about this event : crashout Succinct
Zun104,573 просмотров • 1 год назад
Recently, after InfoFi was banned on X, many marketing agencies started onboarding creators. However, they received thousands of responses, making it extremely time-consuming to review each submission. Beside this, for ambassador programs, web3 projects still rely on Google Forms or Typeform. These forms have no minimum requirements, which leads to a large amount of spam and low-quality submissions. And moreover, there is no web3 native form builder website yet, so as participant of Ethos Vibeathon, I built Ethos Form, a Web3-native form builder that leverages the Ethos Network’s reputation system to prevent spam and low-quality entries. • Spam-resistant by design • Massive time savings for teams
Zun32,220 просмотров • 6 месяцев назад
⚙️ Another tool for compromised wallet A lot of users tagged me and DMed me asking for help minting the Intuition Authena NFT, which is required to register for the Intuition airdrop. Because their wallets are compromised, as soon as they send the base gas fee it gets drained instantly. I created this handy tool solely for minting the Intuition NFT so those with compromised wallets can mint the NFT. 🔗 Website link : In the coming days, I will build another website where any victim can claim their airdrop or unstake tokens from their compromised wallet and send them to a safe wallet
Zun40,222 просмотров • 9 месяцев назад
⚡ Update : Sahara Airdrop Claim from Compromised Wallet This time I don't want to take any risks because I couldn't find a way to get the HEX data beforehand. It also requires a captcha. I could use a captcha solver API, but I still don't want to take any chances since the sweeper bot might be faster than me. They are obviously more professional than I am. I got a lot of DMs, but sorry bro, it wouldn't work. After getting the claim parameters, I would need to convert them to HEX data and that could take 5 to 10 mins. In that time, sweeper bot could claim your airdrop allocation and I would be the one blamed. That is why I am going to skip this time.
Zun26,485 просмотров • 1 год назад
Больше нет контента для загрузки