Originally published on xroot.dev. On 1 April 2026, the perpetuals protocol Drift lost about $285 million. The attacker did not break a contract or steal a key from a server. Over several weeks they phished two of the five signatures on the protocol's security council, and then, at a time of their choosing, submitted two transactions that had been... Weiterlesen: Solana Durable Nonces: The Transaction That Never Expires
Intelligence View
⚡ tsecurity.de Intelligence
Solana Durable Nonces: The Transaction That Never Expires
Originally published on xroot.dev. On 1 April 2026, the perpetuals protocol Drift lost about $285 million. The attacker did not break a contract or steal a key…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
14 Quellen
CVE-2026-107204 | LMCache up to 0.5.5 os command injection (EUVD-2026-94383)
13 weitere Quellen
VVulDB Updatesvor 47 Min.CVE-2026-106113 | SixLabors ImageSharp up to 4.1.1 HistogramEqualization GrayscaleLevelsRowOperation.Invoke memory corruption (EUVD-2026-93554) VVulDB Updatesvor 47 Min.CVE-2026-95606 | Liquid Web/StellarWP The Events Calendar Plugin up to 6.17.4 on WordPress deserialization (EUVD-2026-94491) VVulDB Updatesvor 5 Std.CVE-2026-103059 | Gitea up to 1.27.3 SSH Authentication sql injection (WID-SEC-2026-3792) VVulDB Updatesvor 4 Std.CVE-2025-54100 | Microsoft Windows up to Server 2025 PowerShell command injection (EUVD-2025-202201) VVulDB Updatesvor 4 Std.CVE-2025-64393 | Veeam Backup and Replication up to 12.3.2 code injection (EUVD-2025-211039) VVulDB Updatesvor 4 Std.CVE-2026-102256 | SonicWall SMA1000 os command injection (EUVD-2026-94325)
+7
13 Quellen
CVE-2022-45756 | SENS 1.0 cross site scripting (Issue 17 / EUVD-2022-48614)
12 weitere Quellen
VVulDB Updatesvor 56 Min.CVE-2022-45758 | SENS 1.0 getRegister cross site scripting (Issue 19 / EUVD-2022-48616) VVulDB Updatesvor 56 Min.CVE-2022-45759 | SENS 1.0 unrestricted upload (Issue 20 / EUVD-2022-48617) VVulDB Updatesvor 47 Min.CVE-2025-15591 | OpenText Content Server up to 25.2 Forums cross site scripting (EUVD-2025-211030) VVulDB Updatesvor 47 Min.CVE-2026-106448 | StableLib up to 2.0.3 Decoding cross site scripting (EUVD-2026-93973) VVulDB Updatesvor 5 Std.CVE-2026-103667 | Gitea up to 1.27.3 Container Registry cross site scripting (WID-SEC-2026-3792) VVulDB Updatesvor 4 Std.CVE-2025-41752 | Phoenix Contact K1 up to 3.49 pxc_portSfp.php cross site scripting (VDE-2025-071)
+6
12 Quellen
Neues von Windows: Die große Microsoft-Enthüllung hier im Livestream 07. Oktober
11 weitere Quellen
WWindows Latestvor 2 Std.“Nobody wants Copilot”: Microsoft pauses Copilot on Windows 11’s taskbar to “incorporate your feedback,” as Microslop backlash continues GGoogle Alertvor 5 Std.Outlook: Microsoft sperrt MSIX-Anhänge ab November in Web und Windows - BornCity GGoogle Alertvor 3 Std.Microsoft: Alte Drucker drohen, unter Windows auszufallen | Leben & Wissen - BILD.de VVulDB Updatesvor 4 Std.CVE-2025-62458 | Microsoft Windows up to Server 2022 Win32k heap-based overflow (EUVD-2025-202252 / Nessus ID 277997) VVulDB Updatesvor 4 Std.CVE-2025-62457 | Microsoft Windows up to Server 2025 Cloud Files Mini Filter Driver out-of-bounds (Nessus ID 277996) VVulDB Updatesvor 4 Std.CVE-2025-62456 | Microsoft Windows up to Server 2025 Resilient File System heap-based overflow (Nessus ID 277996)
+5
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4150139/sichere-programmierung/solana-durable-nonces-the-transaction-that-never-expires/