Shmuel Eiderman

Shmuel Eiderman@_eiderman · 2026/04/02赛道影响

Before I go in depth to explain the booster rocket stage of the Durable Nonces and how some architectural design of this feature played a crucial part in the exploit, I would just like to bring attention to the fact that wallet software should do more and invest more in the display of the transactions being signed. If you can’t read the “fine print” of the transaction payload you are signing - might as well just sign with your eyes closed. Read more on our blog: https://t.co/lvB423tRFJ Stay safe

AI：偏主题投资表达，释放对基础设施与新叙事的偏多信号。

Shmuel Eiderman@_eiderman · 2026/04/02政策影响

A quick recap of the Bybit hack to show the remarkable resemblance. Bybit’s treasury, secured by a multi-sig account (Gnosis Safe), on Ethereum - hacked ($1.4B) by compromising the Gnosis Safe UI, delivering an obfuscated payload instead of a legitimate transaction to signers - the transaction looked like a regular transfer, but was in fact reassigning the ownership of the entire Safe to the attacker. This was amplified by the use of an “advanced feature” of the Gnosis Safe. The use of this advanced feature probably went unnoticed by the signers, most likely because the wallet software did not emphasize it (link in comments for previous post). Now, Drift’s treasury, secured by a multi-sig account (Squads), on Solana - hacked by making 2 out of the 5 Squads admins sign a transaction that reassigned the ownership of the entire Squads mutil-sig to the attacker. This was amplified by the use of an “advanced feature” of Solana - Durable Nonces. And again, the use of this advanced feature probably went unnoticed by the signers, again - most likely because the wallet software did not emphasize its usage.

AI：偏政策推进，强调合规落地与规则明晰，对监管主线更敏感。

Shmuel Eiderman@_eiderman · 2026/04/02政策影响

🚨 Drift Protocol on Solana - Compromised, 250M$ Stolen 🚨 Statement from Drift: "Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a novel attack involving durable nonces, resulting in a rapid takeover of Drift’s Security Council administrative powers. This was a highly sophisticated operation that appears to have involved multi-week preparation and staged execution, including the use of durable nonce accounts to pre-sign transactions that delayed execution."

AI：偏政策推进，强调合规落地与规则明晰，对监管主线更敏感。

Shmuel Eiderman@_eiderman · 2025/02/24观点输出

@YaelSherer בינתיים כל העכבישים עזבו לי את הבית

AI：延续个人公开立场，强调长期主义、执行效率与行业方向判断。

Shmuel Eiderman@_eiderman · 2025/02/24观点输出

@YaelSherer זה נכון גם לביצי תרנגולות שקרפדה דגרה עליהם?

AI：延续个人公开立场，强调长期主义、执行效率与行业方向判断。

Shmuel Eiderman@_eiderman · 2025/02/21政策影响

IMO this is an insecure design choice by the @safe team, `operation` should have never been a parameter to execTransaction method but should have been moved to its own execDangerousTransaction method to avoid UI/phishing attacks.

AI：偏政策推进，强调合规落地与规则明晰，对监管主线更敏感。

Shmuel Eiderman@_eiderman · 2025/02/21观点输出

There's only one thing worse than "no simulation" and that's "wrong simulation", I wonder how many wallets that simulate Safe's contract calls, flag contract calls with "operation = 1" as a parameter (instead 0). This was literally a one bit attack. 🤯

AI：延续个人公开立场，强调长期主义、执行效率与行业方向判断。

Shmuel Eiderman@_eiderman · 2025/02/21观点输出

Holy sh!t @safe multisig simulations are hard, especially when done in STDv4 setting, in those cases simulators should use the embedded `to`, `value` and `data` parameters - a zero value transfer(address,uint256) in this case - no simulation effects even, HOWEVER... https://t.co/FqRbCkWkCE

AI：延续个人公开立场，强调长期主义、执行效率与行业方向判断。

Shmuel Eiderman@_eiderman · 2025/01/28观点输出

RT @_eiderman: @LindellYehuda I agree, it's a purist approach The alternative from UX perspective is to tell users: "just keep those keys…

AI：延续个人公开立场，强调长期主义、执行效率与行业方向判断。

Shmuel Eiderman@_eiderman · 2025/01/27观点输出

@LindellYehuda I agree, it's a purist approach The alternative from UX perspective is to tell users: "just keep those keys somewhere less safe forever", which is always worse. Better to allow import and set "imported: true; attestation: null"

AI：延续个人公开立场，强调长期主义、执行效率与行业方向判断。