Cover image
Blog iconShanmuga Bharathi
Jan 14

RingDAO | Sending an arbitrary message without authorization of Dapps. Part-II

Protocol Overview:RingDAO is a decentralized community focused on the latest innovations in the cross-chain field within the web3 world. Our mission is to empower existing and future applications to interact seamlessly with multiple blockchain networks. Darwinia chain, is one of the project from RingDAO, It is a one of the earliest parachains in the Polkadot ecosystem, offering out-of-the-box cross-chain capabilities to exchange messages with other parachains and external Ethereum-compatible ...

Most popular by Shanmuga Bharathi

Cover image

Ocean Protocol | Unprotected owner Withdrawl function leads to Sweeping of Contract's datatoken Balance.

Cover image

Incorrect Function visibility leads to the Stealing of Betverse ICO Tokens.

Cover image

RingDAO | Sending an arbitrary message without authorization of Dapps. Part-II

Cover image

Darwinia | Sending an arbitrary message without authorization of user application. Part-I

Cover image

MakerDAO Security Report

Cover image

Security research disclosure | Optimism Bridge Portal

Shanmuga Bharathi

Written by
Shanmuga Bharathi

Security Researcher πŸ§‘β€πŸ”¬ Vulnerability and security research disclosure reports Web3 security and cybersec kinds of stuff here πŸ§‘β€πŸ’»πŸ”¬

Subscribe

2025 Paragraph Technologies Inc

PopularTrendingPrivacyTermsHome
Search...Ctrl+K

Shanmuga Bharathi

Subscribe
Post cover image
Blog iconShanmuga Bharathi
Apr 11
Darwinia | Sending an arbitrary message without authorization of user application. Part-I
Protocol Overview:Darwinia is currently at the forefront of developing innovative cross-chain service solutions, with a strategic focus on enhancing the cross-chain capabilities of decentralized applications. In the evolving landscape of blockchain technology, the need for interoperability and seamless communication between diverse blockchains has never been more critical. Msgport, a groundbreaking initiative by Darwinia, stands at the forefront of this challenge, offering a robust solution f...
Post cover image
Blog iconShanmuga Bharathi
Apr 11
Open Source Security Research | How I Found Dependency Confusion vuln on Web2 and Web3 firms.
Intro:Dependency confusion, sometimes referred to as substitution attack, dependency repository hijacking, or simply repo jacking, is a software supply chain assault in which a valid internal software dependency is replaced with malicious third-party code. This type of attack vector can be created in several ways, such as Namespacing: By uploading a malicious software library to a public registry (such as the Python Package Index [PyPI] or JavaScript's npm registry) with a name that is s...
Post cover image
Blog iconShanmuga Bharathi
Apr 10
Security research disclosure | Optimism Bridge Portal
Intro:The OptimismPortal contract is an L1 smart contract that can be used by both smart contracts and EOAs to create L2 transactions without the direct involvement of the Sequencer. Many users already interact with this contract indirectly when they bridge ETH or other tokens between L1 and L2 via the Standard Bridge system available on all OP Stack chains. This write-up showcases that multiple forks of the Optimism Portal contract are affected. Some affected forked projects are:Base orgBlas...
Post cover image
Blog iconShanmuga Bharathi
Apr 10
Solidity lang Compiler | Bringing back Arithmetic bug over ^0.8.0 version.
Intro:This write-up will explain my accidental discovery of a solidity compiler bug. During a security audit on a protocol, I came across an interesting and Known compiler bug on solidity. I quickly escalated to the Ethereum security team and got a well-expected response. Compiler version affected: 0.8.19+commit.7dd6d404 and the latest release Target EVM Version: Default on Remix Framework/IDE: Remix IDEDescription:Solidity version 0.8.0 or above promises to prevent arithmetic overflow and un...
Post cover image
Blog iconShanmuga Bharathi
Apr 9
OASYS | Stealing of User's NFT From L1 Contract
Protocol Overview:The Oasys ecosystem consists of two major parts by structure: the Hub Layer and the Verse Layer. The Hub Layer is responsible for the data availability, security, and stability of the entire ecosystem, with the backing of trustworthy validators. The Verse Layer is the contents layer, and it's the home for all the games. The primary concern of every verse layer is gamers and game developers. This write-up focuses on Bridge contracts implementation by OASYS with a logic b...
Post cover image
Blog iconShanmuga Bharathi
Apr 9
Buttonwood Security Report
Protocol Overview:Buttonwood is a collection of DeFi primitives for building powerful decentralized financial instruments. One of Buttonwood's insights is that everything in finance is some form of a tranche. The ButtonTranche contracts serve as a foundation for marketplaces such as liquidation-free debt, convertible bonds, and options, and assets like fiat-free stablecoins. This write-up covers some bug bounty reports hosted by Buttonwood on Immunefi.#1 Accounting bug causes the free mi...
Post cover image
Blog iconShanmuga Bharathi
Apr 8
MakerDAO Security Report
Protocol Overview:MakerDAO is a decentralized organization dedicated to bringing stability to the cryptocurrency economy. The Maker Protocol employs a two-token system. The first being, Dai, a collateral-backed stablecoin that offers stability. The Maker Foundation and the MakerDAO community believe that a decentralized stablecoin is required to have any business or individual realize the advantages of digital money. Second, there is MKR, a governance token that is used by stakeholders to mai...
Post cover image
Blog iconShanmuga Bharathi
Mar 19
Incorrect Function visibility leads to the Stealing of Betverse ICO Tokens.
A critical vulnerability was discovered in one of the Testnet projects on the Immunefi Platform, the Betverse ICO Token contract’s transferTokenToLockedAddresses() function. The vulnerability was caused by mistakenly marking this function as public when it should have been an internal function. This mistake enabled anyone to transfer a specified amount of BToken (amount.div(term)) to the attacker's time lock address. Repeating this attack could lead to the sweeping of the BToken balance ...
Post cover image
Blog iconShanmuga Bharathi
Oct 14
Ocean Protocol | Unprotected owner Withdrawl function leads to Sweeping of Contract's datatoken Balance.
Hello readers! This article showcases the medium-severity bug on the Ocean Protocol Dispenser contract, which allowed any user to call the ownerWithdraw() function and send the funds to the payment collector. By sending the funds to the payment collector address, the owner cannot make a successful dispense of data tokens to his destination address. Vulnerable Code: function ownerWithdraw(address datatoken) external nonReentrant { require( datatoken != address(0), 'Invalid token contract addre...