The Bit Shift

The Bit Shift

Basic Auditing of a Web3 Frontend

Verify the source before you click send on your precious funds

BowTiedCrocodile's avatar
BowTiedCrocodile
Aug 13, 2022
∙ Paid

This post is too long for email, please open on the Substack site!


Another significant Web3 hack occurred this week with the ever popular Curve Finance getting their domain records tampered with and a false frontend put it up to steal user funds. This resulted in around half a million dollars being siphoned from users sending funds to an unexpected address that the hacker replaced their own wallet address with. Instead of adding liquidity to a pool your funds were now suddenly gone, whisked away through services such as Fixed Float to hide the attacker. While some of the money was recovered or frozen, it sill does not take the sting away from being cheated. In this article we will talk about methods to protect yourself from these attacks.

User's avatar

Continue reading this post for free, courtesy of BowTiedCrocodile.

Or purchase a paid subscription.
© 2026 BowTiedCrocodile · Privacy ∙ Terms ∙ Collection notice
Start your SubstackGet the app
Substack is the home for great culture