Web3 Security Firm - Defending against Hacks & Scams on #BSC & More! 🛡️ Users stay safe with our Chrome Extension & Metamask Snaps! ⚙️ Links below 👇
Joined January 2022
- Tweets1.2K
- Following85
- Followers6.6K
- Likes350
Pinned Tweet
BREAKING: Introducing our latest "HashDit Pro" Chrome Extension🎉🥳
The latest Extension will offer :
🔹 Powered up Threat Protection (stay SECURED against address poisoning / drainer + any other phishing attacks)
🔹 Smart Contract Simulation (preview balance changes and approval changes)
🔹 Supporting 7 popular wallets + all EVM chains
🔹 Website checker (Clear pop-up warning when visiting malicious websites)
🤔 What you should do if you are using the old Extension? Remove the old Extension and install our latest Extension for continuous improved protection!
Download here NOW for FREE: chromewebstore.google.com/de…
Stay safe with HashDit Pro! 🛡️
🚨 HashDit Alert! 🚨
Polymarket users are reporting unauthorized withdrawals and a possible frontend compromise, according to @AggrNews citing Discord reports.
A frontend injection attack is suspected, the mechanism remains unconfirmed.
As a precaution, pause interactions with the site and avoid signing transactions or approvals until official clarification.
Stay safe!
🚨 HashDit Summary: Last 24h in Crypto Security
• @solflare's staking provider had a validator key issue, impacting reward production xitter.twitterapi.xyz/solflare/status/211522…
• @predictdotfun was compromised, leading to ~400K USDT in user losses via a third-party hosted API docs site xitter.twitterapi.xyz/predictdotfun/status/2…
• @coinbase disclosed a vendor incident involving Amplitude that affected data of ~70K users.xitter.twitterapi.xyz/CoinbaseSupport/status…
• @FoundationHQ and @KeystoneWallet hardware wallets suffered customer data breaches xitter.twitterapi.xyz/FoundationHQ/status/21…
xitter.twitterapi.xyz/KeystoneWallet/status/…
Attackers are increasingly targeting vendors and supply chains. Platforms need to audit third parties closely and revoke access at the first red flag; users should minimize shared data and reduce exposure.
Stay safe!
Update on Solflare SOL staking
Our staking provider has notified us of a security incident on their side, affecting the keys they hold for the Solflare validator. They are investigating. As a result, the Solflare validator is currently not producing rewards.
Your SOL is safe. Delegated stake sits in your own stake account and is controlled by your keys alone; the Solana protocol does not allow a validator, or anyone holding its keys, to move it. No user funds were touched.
We're moving to a new Solflare validator, which means your stake will need to move too. No action is needed now: an upcoming app update will give you a secure, guided path to the new validator, and we'll post here the moment it's live. Rewards are paused until your stake is active on the new validator, and we're working on a compensation plan for everyone who migrates.
Migration will only happen through the Solflare app. We will never DM you or send you a link. We'll keep you posted.
3
745
🚨 HashDit Alert! 🚨
Fearless Wallet extension versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5 contained malicious code that could exfiltrate private keys when users unlocked the wallet.
Confirmed on Chrome; Firefox users during the same period should also treat keys as compromised. So far, 8 users have reported unauthorized transactions totaling 17,286 DOT.
If affected, assume compromise and move funds to a new wallet immediately.
Stay safe!
Security Alert for Fearless Wallet
Fearless Wallet is a third-party application, built and maintained by an independent team.
Following an investigation by the Polkadot Technical Fellowship on behalf of the @PCF_org, it was found that the Fearless Wallet browser extension had been compromised and had been leaking users’ private keys since February 2025.
If you have used the Fearless Wallet browser extension, please create a new keypair with a different wallet and move your funds as soon as possible.
Remember to never share your private keys.
1
2
587
According to @spreekaway , @swellnetworkio has been breached and could potentially be linked to the Railway incident.
Stay safe!
xitter.twitterapi.xyz/spreekaway/status/2113…
🚨 HashDit Alert! 🚨
@Railway detected unauthorized access to systems storing customer environment variables. An attacker may have obtained some encrypted env vars and their decrypted contents (API keys, DB credentials, private registry credentials, private keys, etc.).
Immediate actions recommended for all users (especially crypto teams):
1. Rotate/roll all environment variables and secrets stored in Railway right away.
2. For crypto: treat any private key that was in Railway as compromised! Migrate funds/roles to new keys rather than just rotating in place.
3. Rotate any related private registry credentials.
4. Review service logs for unusual activity.
This appears to be part of a broader series of attacks on platform companies (primarily aimed at compromising AI inference providers). Crypto projects are also heavily affected/at risk, especially any that stored private keys, wallet keys, or signer credentials in Railway env vars.
1
522
🚨 HashDit Alert! 🚨
@Railway detected unauthorized access to systems storing customer environment variables. An attacker may have obtained some encrypted env vars and their decrypted contents (API keys, DB credentials, private registry credentials, private keys, etc.).
Immediate actions recommended for all users (especially crypto teams):
1. Rotate/roll all environment variables and secrets stored in Railway right away.
2. For crypto: treat any private key that was in Railway as compromised! Migrate funds/roles to new keys rather than just rotating in place.
3. Rotate any related private registry credentials.
4. Review service logs for unusual activity.
This appears to be part of a broader series of attacks on platform companies (primarily aimed at compromising AI inference providers). Crypto projects are also heavily affected/at risk, especially any that stored private keys, wallet keys, or signer credentials in Railway env vars.
An urgent notice from the Railway team
blog.railway.com/p/security-…
🚨 HashDit Alert! 🚨
We have monitored that $NEM 0x9Cf0E3aD4efa7ab602D7b5a38c55795CFA777777 has been compromised and drained for roughly $725k worth of funds on $BSC.
This is a typical Price Manipulation attack. The attacker first flashloaned USDT and swapped for NEM.
Next, he aimed to manipulate the AMM pool price, the attacker was able to repeatedly follow this sequence 42 times
1) transfer NEM directly to the pool contract,
2) used skim() to pull the excess tokens back to the attack contract
3) call the exposed flushLpSellRecycle method to burn some NEM from the pool
4) call the sync() method
After sufficiently distorting the pool state, the attacker swapped back through the pool at the manipulated price and realized a profit.
The issue lies in the flushLpSellRecycle() method, which burns tokens directly from the LP pair based on balanceOf[pair], which is attacker-influenceable.
Calling sync() afterward updates reserves to the manipulated balance, enabling pool price distortion and profit extraction.
Funds have been bridged to ETH.
Detected by our Internal HashDit AI Triage Monitor.
Stay safe!
⚠️ DApps with OFTs on @GravityChain, @campnetworkxyz, @GOATNetwork, @MetisL2 or if you deposited into Stargate pool positions on these 4 chains take note!
Stargate support ends Oct 23 (in 3 days); LayerZero Labs’ DVN/Executor services end Oct 30 (in 10 days).
Your OFT isn’t automatically deprecated, but affected routes need alternative infrastructure. Check configs and coordinate migration with chain teams.
Reminder: For a number of chains with minimal activity, LayerZero is winding down offchain support. This means that LayerZero DVN and Executor services will no longer be available for these chains.
We will be deprecating support for the following chains via Stargate v2, effective October 23rd, 2026:
Gravity, Camp, GOAT, Metis
Stargate Pool liquidity providers and ETH liquidity providers should withdraw their funds from the respective pools to redeem their assets before the effective deprecation date.
Stargate hydra (USDC.e, USDT) holders should bridge their funds to Stargate Pools to redeem their assets before the effective deprecation date.
For the full list of impacted chains and effective dates, read here: layerzero.network/blog/suppo…
2
615
🚨 HashDit Alert! 🚨
Over the weekend, HashDit have monitored 3 notable hacks on #BSC, involving #TIP, #SIEVE, #ALPS, resulting in approximate losses of $69k, $11k, $152k respectively.
We have blacklisted the hackers on our system.
Detected by our Internal HashDit AI Triage Monitor.
Feel free to reach out if your project needs early warning detection! 🛡️ Stay safe!
🚨 HashDit Alert! 🚨
We have monitored that @cysic_xyz has been compromised and drained for roughly $1.1m worth of funds.
🔍 According to preliminary root cause, the attacker gained unauthorized access to a database supporting its bridge services and exploited a processing-logic vulnerability to submit a fraudulent mint message.
⛓️ Our on-chain shows that its deposit nonce (1792239993405, a millisecond timestamp) falls outside the normal sequential range (20978–20980). This indicates a forged record that the signers accepted without verifying it on the Cysic chain.
Malicious bridge: bscscan.com/tx/0x8de43ba77f9…
Most of the funds are held here at the moment etherscan.io/address/0x1106D… , while 2.8m base:0x19e8d59ff3d7a31289e0dc04db48d43b02c7ffa6 are still held in the hacker wallet. We have blacklisted the wallets and are monitoring closely.
Stay safe!
On Oct 17, a security incident involving the unauthorized minting of 10M CYS occurred through the Cysic bridge.
Our team responded swiftly. User wallets and mainnet operations remain unaffected.
The bridge remains suspended pending security review.
Full update below. 👇
657
🚨 HashDit Alert! 🚨
We have monitored that PositionManager has been compromised and drained for roughly $40k worth of funds.
The issue lies in the deposit() function. Internally, newly minted shares are calculated by valuing the vault’s existing pooled assets using a manipulable AMM spot price, while the incoming deposit is valued using a trusted Chainlink oracle price. As a result, withdraw() returns an incorrectly priced amount.
By manipulating the AMM pool price, the attacker was able to repeatedly call deposit() and withdraw() in a loop 24 times, compounding a small profit on each cycle. The attacker ultimately forwarded the remaining profit of approximately 40,341.62 USDT to the sender’s EOA.
Funds have been deposited into Tornado Cash.
Detected by our Internal HashDit AI Triage Monitor.
Stay safe!
1
16
1,984
🚨 HashDit Alert! 🚨
As if Mid-Autumn Festival wasn’t eventful enough, following Bitget, payy_link, and Duelbits, another exploit has surfaced...
We detected an exploit involving $YUNA on #BNBChain, resulting in an estimated $1.2M drain.
The issue stemmed from the Pool contract’s claim() function, where staking rewards were priced using the YUNA/USDT pool. By manipulating the pool price, the attacker was able to claim significantly more YUNA than intended, then unwind the position for a large USDT profit.
The stolen funds have since been bridged to Ethereum and remain in the attacker’s wallet.
Detected by our Internal HashDit AI Triage Monitor.
Stay safe!
🚨 HashDit Alert! 🚨
@bitget has been reported to be hacked for ~$351.6M!
Withdrawals are temporarily paused and the platform has stated that users will be covered by their User Protection Fund.
HashDit is following the incident closely.
Stay Safe!
[SECURITY NOTICE] Bitget Hot Wallet Incident — September 24, 2026
At 18:31 UTC on September 24, 2026, Bitget's security systems detected unauthorized transfers from some of our hot wallets. Our security team activated emergency response protocols immediately.
What we have confirmed:
-Estimated funds affected: approximately $351.6 million
-Cold wallets remain fully secure. Bitget operates a three-tier wallet architecture — the breach contained only a portion of the hot wallet and warm wallet layers.
-User funds are safe. The full amount of this loss falls within the coverage of Bitget's User Protection Fund, which currently holds over $464 million
Actions we have taken:
-Emergency response team activated within minutes of detection
-Abnormal transfer addresses identified, flagged, and reported
-Withdrawals temporarily suspended as a precautionary measure, pending security review
-Law enforcement and on-chain security firms have been formally notified and are engaged
What this means for you:
-Your account balances are accurate and your assets are protected
-Deposits and trading remain fully operational
Withdrawals are temporarily paused and will be restored as soon as the security review is complete
-What comes next: We will provide updates on an hourly basis across this channel and all official platforms. A full incident report — including root cause analysis and corrective actions — will be published within 24 hours. We will not speculate on the attack vector until the investigation is complete.
Bitget has navigated multiple market cycles. We will not run from this. Every dollar and every decision will be accounted for, transparently and in full.
Updates will be posted here and across all official Bitget channels as they become available.
— Gracy Chen, CEO, Bitget
1
1
877
🚨 HashDit Alert! 🚨
Trezor's third-party e-mail provider has been compromised!
Please be extra wary for any phishing emails even coming from the official trezor[.]io domain.
Stay Safe!
Our third-party e-mail provider has been breached. Please be aware that the email named ‘Critical Security Alert: STM32 Entropy Vulnerability’ is not coming from us, and it’s a phishing attempt. Do not click on any link.
We have taken down the domain, and we are investigating the situation, including how the hackers got access to our legit domain.
Builders on @BNBCHAIN can now book HashDit's security services through the AvengerDAO marketplace.
HashDit provides Security APIs, Web2/Web3 audits, monitoring, and incident handling to help teams catch vulnerabilities before launch, scan risky addresses/tokens/websites in real time, and respond faster when threats appear.
Find us on the AvengerDAO marketplace 👇
avengerdao.org/marketplace
Joining the alliance to help keep BNB Chain’s protocols and users safe 🛡️
Proud to be part of the next chapter of AvengerDAO and contribute to a more secure BNB Chain ecosystem 🤝
Every builder should have a clear path to strong security.
AvengerDAO now brings 11 security firms, an official BNB Chain standard, and bug bounty support for builders, from development through launch and beyond.
The goal is to raise the baseline for every project launching on BNB Chain 🧵👇
2
7
2,173
Stay wary! Official @BNBCHAIN members will never promote random CAs or platforms, and will never contact you directly.
seems like there was someone that impersonated me and made a github and launched a meme ai agent on BNB
i did not do this fyi and do not endorse this.
2
1,350
🚨 HashDit Alert! 🚨
Another npm supply-chain attack!
keyv (~154M weekly downloads) + related cacheable packages were compromised. Malicious versions contain a preinstall hook that:
• Downloads & runs a Bun-based payload
• Steals cloud/CI/GitHub/npm/Vault tokens
• Self-propagates by publishing trojanized packages
• Plants hooks in .claude & .vscode
What should you do:
→ Check your lockfiles NOW
→ Avoid latest versions
→ Rotate tokens if you installed recently
→ Look for .claude and .vscode repo hooks
Stay safe!
🔥 ALERT - A massive npm supply-chain attack is unfolding right now.
It began with a poisoned Keyv release and spread across hundreds of packages.
The worm:
→ Credential stealer via install scripts
→ npm, GitHub, cloud and CI secrets targeted
→ Claude Code and VS Code hooks in Keyv repo
→ Valid OIDC and SLSA provenance
Read the full story: thehackernews.com/2026/08/ke…
1
1,519
🚨 HashDit Alert! 🚨
By now, many may have seen reports about @42dao_official being compromised.
But 3 hours earlier, the same threat actor had already compromised 29 users on another platform, and there have been so reports yet!
The threat actor drained $300k worth of $USDT and $BNB from an unknown exchange contract on BSC by abusing EIP-7702 account delegations.
Attacker: 0x7b2e2dE172fd24c9158f6ECB77c05943CE47399D
Victim Platform: 0x1Dd2235091c82862BCC7E9c25017ba9C409c0820
Detected by our Internal HashDit AI Triage Monitor.
Stay safe!
🚨@42dao_official exploited for ~$912K.
The attacker exploited an abnormal BTCB oracle price update, allowing multiple BTCB vault liquidations in a single transaction.
Root cause:
→ Missing oracle price deviation checks
→ No liquidation delay or minimum price protection
Attacker: 0x9d8dd9f2d734675e2bfcc142d1c7a45609ca213c
🚨 HashDit Alert! 🚨
We have monitored that VES Finance has been compromised and drained for roughly $109k worth of funds.
The VECAndETH exposed a getReward() function. Internally, earned() -> calculateUSDTToETH(), which relied on PancakeRouter.getAmountsOut using a PancakeSwap liquidity pair price that had been manipulated via a flash-loan swap.
As a result, the attacker’s legitimate reward of 17.14 USDT was mispriced as a payout worth 76.11 BNB, whereas the fair value should have been only about 0.0096 ETH. In total, the contract paid 68.50 ETH to the attacker, with the remainder taken as fees.
Funds have been deposited into Tornado Cash.
Detected by our Internal HashDit AI Triage Monitor.
Stay safe!
