Uwerx network (https://www.uwerx.network/) compromised (or rugged?) a few minutes ago: https://twitter.com/hexagate_/status/1686660090072379392

www.uwerx.network

Uwerx. Disrupting The Freelance Industry

The popularity of freelance marketplaces has surged, not only due to the COVID-19 pandemic. Uwerx aims to revolutionize and reconceptualize the freelance industry by launching the first global, blockchain-powered freelance platform with a host of unique features…

Alchemix and Metronome DAO also been hacked due to a missing reentrancy locks on remove_liquidity and add_liquidity possibly due to a bug on an old Vyper compilers: https://twitter.com/hexagate_/status/1685677801813217280

JPEGd pETH has just been hacked due to a reentrancy in a Curve pool for 11 million USD.

https://twitter.com/DecurityHQ/status/1685646377198505985

The attacker was frontrunned by a MEV bot: https://etherscan.io/tx/0xa84aa065ce61dbb1eb50ab6ae67fc31a9da50dd2c74eefd561661bfce2f1620c

[Hayden Twitter Hack]

Summary@haydenzadams Twitter account was compromised

Current StatusAccount has been recovered

Timeline2023/07/208:08 PM - Initial report
8:16 PM - Blocked in Metamask
8:26 PM - Blocked in Coinbase Wallet
8:36 PM - New phishing link tweeted
8:38 PM - Blocked in Coinbase Wallet
8:42 PM - New phishing link
8:43 PM - Blocked in Coinbase Wallet
8:50 PM - Blocked in Metamask
2023/07/21
12:17 AM - Account recovered

APEDAO has just been hacked for $7k:

https://twitter.com/DecurityHQ/status/1681307025391906816

https://bscscan.com/tx/0x8d35dfd9968ce61fb969ffe8dcc29eeeae864e466d2cb0b7d26ce63644691994

https://twitter.com/hexagate_/status/1678669303623680002

Sus tx: https://polygonscan.com/tx/0x7320accea0ef1d7abca8100c82223533b624c82d3e8d445954731495d4388483

X (formerly Twitter)

Hexagate on X

Sus tx: https://t.co/DX5HH88sMj

[Aptos Twitter Hack]

Summary@Aptos_Network and @moshaikhs Twitter accounts were compromised

Current statusAccounts have been recovered

Timeline2023/07/067:52 PM UTC - @Aptos_Network tweets phishing link
8:04 PM UTC - Phishing URL merged into Metamask blocklist
8:13 PM UTC - Phantom is now blocking the phishing URL
~11:00 PM UTC - The accounts seem to have been recovered