Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Web2 bug repellant instructions

osec.io | blog | #web3 | #xss | #csrf | #marketplace | #frontend-security | #nft

Summary

OtterSec surveys Web2 attack surface in Web3 apps — XSS via unsanitized NFT metadata on Rocki, malicious approval prompts, CSRF/XSS sinks — with practical mitigations.
Published
Collected

original ↗

Related coverage

  1. Exploiting Web3's Hidden Attack Surface: Universal XSS on Netlify's Next.js Library (samcurry.net)
  2. The goldmine of insecure WebView integrations (osec.io)
  3. Unverified evaluations in Dusk’s PLONK (osec.io)
  4. Unfaithful claims: breaking 6 zkVMs (osec.io)
  5. ERC-4337 paymasters: better UX, hidden risks (osec.io)
  6. Solana: the hidden dangers of lamport transfers (osec.io)

back