man kind of hacking. not really
source: https://giphy.com/gifs/YQitE4YNQNahy

“Hacking” Uniswap’s $UNI Airdrop

Naz

--

This is how to get free $40000

So it is 2 am, and I need to go to bed. I see Paul Razvan Berg tweeting about a “hack”.

So I open up the link and see a bunch of transactions originating from

0x0531242C5d7e00d23cfEbEE9ab0d13E700121547

to various addresses. The common theme among the destination addresses is that all of them are inactive now for some time. One could then think that perhaps it is all the same owner. That is a plausible scenario. But that would be too easy. Let’s dig deeper. How could you possess the private keys of these accounts? Well, you could have been hacked before, or you may have dropped your private key into Pastebin? Or maybe a gist? Or perhaps committed it on GitHub? Or maybe posted somewhere on your wall on Vkontakte and thought it was private? There are a gazillion ways that you may have leaked the private key. Therefore, another plausible scenario is that the “attacker” has already collected a bunch of private keys. If you use advanced Google search operators, it is relatively easy to find a bunch of private keys. That is…

--

--

Naz
Naz

Written by Naz

I crave knowledge. Mathematical knowledge and then computer science.

Responses (5)