PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to Hack Crypto Exchange Wallets

hackenproof.com | blog | #web3 | #burp-suite | #vulnerability-research | #crypto-exchange | #wallets | #rounding-bug
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A rounding flaw in crypto exchange wallet transfers between spot and futures accounts can inflate balances without limits; a step-by-step exploitation walkthrough built on Burp Suite.
Published
Collected

Related coverage

blog · certik.com
Clear Signing Under the Hood: A Technical Guide to ERC-7730
What the ERC-7730 standard does, how it works under the hood, and the security trade-offs that come with it.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
blog · hackenproof.com
Aptos Move Smart Contract Security: How Object Refs Leak and Global Storage Breaks
Unchecked borrow_global_mut, leaked object refs, and Block-STM races break Aptos protocols. See the $25.5M Thala exploit and an Aptos/Supra audit checklist.
blog · hackenproof.com
Sui Move Smart Contract Security: How Shared Objects Leak and Ownership Breaks
Sui’s VM protects owned objects, not shared ones. See how shared-object, Kiosk, and PTB bugs break protocols, plus a full Sui Move audit checklist.
blog · hackenproof.com
Smart Contract Security in 2026: Risks, Best Practices, and Audits
Top smart contract security risks in 2026, best practices that prevent exploits, and when to audit your contracts. A practical guide for founders and CTOs.
blog · hackenproof.com
Global Crypto Regulations for Centralized Exchanges: EU, USA, Asia, Latin America & UAE Guide
A compliance map for centralized exchanges across the EU, US, Asia, Latin America and the UAE: MiCA, DORA, licensing and AML regimes, and why security testing now sits inside regulatory duties.
Back