series
The Phantom Sender: How Address Poisoning Weaponizes Your Own Transaction History
A Transfer event is a claim, not a fact — attackers write claims that put their address in your history. Two real poisoning campaigns, decoded on-chain.
#security
2 posts
- series
Post-Mortem: How a Forged Message Minted $292M of rsETH Out of Thin Air
On April 18, 2026 a forged message released 116,500 rsETH (~$292M) from KelpDAO's bridge adapter. We trace the exploit, the attacker and the money on-chain.