Channel

New on Onchain Diary

Electrum's Server Swapped the Transaction, Then the Fee Bump Made You Sign It

A malicious Electrum server replaced a pending payment with one paying itself. Version 4.8.3 now verifies signatures. Upgrade and verify addresses.

https://theonchaindiary.com/articles/electrum-server-swapped-transaction-fee-bump/ Onchain Diary Electrum 4.8.3: Malicious Server Stole BTC on Fee Bump

New on Onchain Diary

Keystone's Breach Leaked Shipping Addresses, Not Seed Phrases. That Is Still Bad.

Keystone says a third party took names, addresses and order details after unauthorised access on Oct 20. No seed or card data. What to do now.

https://theonchaindiary.com/articles/keystone-customer-data-breach-shipping-addresses/ Onchain Diary Keystone Data Breach: Customer Addresses Leaked

New on Onchain Diary

The Initia Hack: A Chain Halted Itself Mid-Attack as an 'Infinimint' Exploit Bridged Out $2.7M

Initia halted its L1 and all rollups on Oct 23 after an attacker spoofed MoveVM state, credited himself unbacked tokens and bridged ~$2.7M in WETH, AUSD0 and…

https://theonchaindiary.com/articles/initia-halt-mint-exploit-explained/ Onchain Diary Initia Hack: L1 Halted After $2.7M Mint Exploit

New on Onchain Diary

Keystone's Breach Leaked Shipping Addresses, Not Seed Phrases. That Is Still Bad.

Keystone says a third party took names, addresses and order details after unauthorised access on Oct 20. No seed or card data. What to do now.

https://theonchaindiary.com/articles/keystone-customer-data-breach-shipping-addresses/ Onchain Diary Keystone Data Breach: Customer Addresses Leaked

New on Onchain Diary

The Initia Hack: A Chain Halted Itself Mid-Attack as an 'Infinimint' Exploit Bridged Out $2.7M

Initia halted its L1 and all rollups on Oct 23 after an attacker spoofed MoveVM state, credited himself unbacked tokens and bridged ~$2.7M in WETH, AUSD0 and…

https://theonchaindiary.com/articles/initia-halt-mint-exploit-explained/ Onchain Diary Initia Hack: L1 Halted After $2.7M Mint Exploit

New on Onchain Diary

The NEM Token Hack: A Sell-Tracking Bug Let an Attacker Drain a PancakeSwap Pool 42 Times

The NEM (NemTokenV2) token on BNB Chain lost $821,920 to a contract logic flaw. How the pendingLpSellRecycle accounting bug was looped 42 times against…

https://theonchaindiary.com/articles/nem-token-contract-exploit-explained/ Onchain Diary NEM Token Hack: How NemTokenV2 Lost $821K

New on Onchain Diary

The Fearless Wallet Hack: A Backdoor Hid in the Extension's Open Source for 20 Months

The Fearless Wallet browser extension sent private keys to an attacker server for 20 months. How the TON-camouflaged backdoor worked and what victims should do.

https://theonchaindiary.com/articles/fearless-wallet-extension-key-leak-explained/ Onchain Diary Fearless Wallet Hack: Extension Leaked Private Keys

New on Onchain Diary

The Ledger Hack Postmortem: What Broke, What Didn't, and What's Still Open

The Ledger implant hack stands at $102M from 335 wallets, two weeks on, zero arrests. Recap: the numbers, the device, the money trail, what to check now.

https://theonchaindiary.com/articles/ledger-cryptobilis-hack-final-recap/ Onchain Diary Ledger Hack Recap: $102M, 335 Wallets, Zero Arrests

New on Onchain Diary

A Sui Bridge Claim Bot Just Paid the Cetus Hacker — 17 Months After the Freeze

A rescue bot finalized the Cetus hacker's 17-month-old bridge claims and paid out $392K. Why dormant bridge claims are live liabilities for every chain.

https://theonchaindiary.com/articles/sui-bridge-claim-bot-cetus-hacker/ Onchain Diary Sui Bridge Claim Bot Paid the Cetus Hacker $392K

New on Onchain Diary

You Checked the Address and Still Bought the Fake: Best Ways to Verify a Token That Hold Up

Six ways to verify a token address before you buy: official-source cross-checks, explorer verification, scam scanners, and how scammers fake each signal.

https://theonchaindiary.com/articles/best-ways-to-verify-token-addresses/ Onchain Diary Best Ways to Verify Token Addresses: 6 Checks

New on Onchain Diary

Fake Crypto Exchange Scams: Why the Balance Grows but the Withdrawal Never Comes

The dashboard shows profit, the withdrawal is frozen, and support wants a fee. How fake crypto exchanges work, the deposit-address test that exposes them, and…

https://theonchaindiary.com/articles/fake-crypto-exchange-withdrawal-scam/ Onchain Diary Fake Crypto Exchange: Why You Can't Withdraw

Fixed: the "Open in App" buttons on channel posts used a link format Telegram rejects — they silently did nothing. New pushes (and this post) use the correct encoding.

Yesterday's article, now reachable in-app:

New on Onchain Diary

The Task Scammer Who Lost 60 BTC to a Tampered Ledger Wallet

Chainalysis says one of the biggest Ledger theft victims was a task-scam operator — 60 BTC of scam proceeds sat in three implanted hardware wallets for 17 days…

https://theonchaindiary.com/articles/ledger-task-scammer-loses-60-btc/ Onchain Diary The Task Scammer Who Lost 60 BTC to a Tampered Ledger Wallet — Onchain Diary

Onchain Diary pinned «Welcome to Onchain Diary. Independent Web3 safety education built on original on-chain forensics: scam breakdowns, phishing and drainer analysis, and what to do after a drain. 100+ deep-dive articles and a 230+ term glossary, English and Chinese. New articles…»

New on Onchain Diary

Denmark CPR Breach: 8.8M Identities Sat Behind a '123456' Password

A hacker ran 14 million queries against Denmark's national register for ten days through a small IT firm whose admin account used the password 123456. What 8.8…

https://theonchaindiary.com/articles/denmark-cpr-breach-123456/ Onchain Diary Denmark CPR Breach: 8.8M Identities Sat Behind a '123456' Password — Onchain Diary

Welcome to Onchain Diary.

Independent Web3 safety education built on original on-chain forensics: scam breakdowns, phishing and drainer analysis, and what to do after a drain. 100+ deep-dive articles and a 230+ term glossary, English and Chinese.

New articles land here as they publish.

Site: https://theonchaindiary.com Onchain Diary Onchain Diary: Learn on-chain safety. Spot scams before they spot you.

Hello

Channel created