I am a security researcher (and developer) in the cryptocurrency field. Working with the folks at MyCrypto.
- EtherAddressLookup — a multi-purpose Chrome browser extension for the Ethereum ecosystem.
- EtherSecurityLookup — a Chrome browser extension to detect impersonation scams on Twitter.
- Defiscan — a simple interface lets you easily search a 0x address or ENS name and displays a portfolio view of various protocols that the address has interacted with.
- ENSPortal — an interface to register ethereum-name-system subdomains to your blockchain address.
- @CryptoPhishing — a bot that tweets malicious domains and infra data used to phish cryptocurrency from people.
- LGBT-Rainbow-Images — a tool to add a rainbow effect to your images with the LGBT flag.
- Web3 RPC API now in Postman
- How to ensure safety using EtherDelta
- EAL1.12 and Quiknode - pulling chain-data with web3js
- Ethereum logo, SVG.
- Setting up an Ethereum node
- Copying remote files to local machine
In the media
- Working With Binance to Return $10,000 of Stolen Crypto to a Victim
- The #TwitterHack Postmortem
- Intercepting and Saving $5,000 Worth of Phished Crypto
- Phishing Campaigns Take Aim at Web3 DeFi Applications
- Discovering Fake Browser Extensions That Target Users of Ledger, Trezor, MEW, Metamask, and More
- 2019 In Review: Major Blockchain/Crypto Security Incidents
- Nigeria, Indonesia, the US, and Vietnam are among the highest victim rates for crypto scams
- Research into Trust-Trading Scams on Twitter
- Disclosure: Key generation vulnerability found on WalletGenerator.net—potentially malicious.
- Discovering Fake Trezor, MetaMask, and MyCrypto Android APKs
- Be careful with your KYC documents
- Hunting Huobi, MyEtherWallet, and Blockchain.info Scams
- The dangers of malicious browser extensions
- Unique phishing method to look out for: the fullscreen API
- The Trust-Trading Scam Kit
- Using phishing tools against the phishers— and uncovering a massive Binance phishing campaign.
- Dissecting some of the latest cryptocurrency exchange phishkits
- You need to stop trusting links
- Dissecting a HitBTC phishing site
- Following an Ethereum phishing scam down the rabbit hole
- White hat hacker rescues $7,500 of stolen Ethereum
- Expert Recovers $4K From Shoddy Crypto Phishing Scam
- Google Chrome Store was told about fake Bitcoin apps before $113,000 theft
- Brave Browser’s Affiliate Link Controversy, Explained
- Google takes down 22 more extensions that were impersonating popular crypto wallets
- Exclusive: Google removes 49 Chrome extensions caught stealing crypto-wallet keys
- 49 New Google Chrome Extensions Caught Hijacking Cryptocurrency Wallets
- Google Removes 49 Phishing Extensions That Steal Cryptocurrency Data
- Network of Fake Bitcoin QR Code Generators Stole $45,000 in March
- Key Management: UX and Security
- New report: Most crypto scam victims are in Indonesia, Nigeria, the US, and Vietnam
- The Bitcoin bull is causing a spike in Twitter scams
- Researcher Discovers Serious Vulnerability in Paper Crypto Wallet Site
- Computer Researcher Finds Wallet Vulnerability That Gave Same Key to Multiple Users
- Popular paper wallet app falls prey to mysterious vulnerability
- Potentially malicious vulnerability found on WalletGenerator.net
- Website for storing digital currencies hosted code with a sneaky backdoor
- Wallet Generator site may have run potential backdoor
- Google distributed malicious Chrome app designed to steal your cryptocurrency
- Crypto malware targeting MyEtherWallet claims 230 victims
- Google Deletes Crypto Malware Targeting Blockchain.com, MyEtherWallet Users
- KYC Data Could Be Exposed To Malicious Attackers With Poorly-Secured Web Designs
- Using phishing tools against the phishers— and uncovering a massive Binance phishing campaign - by Harry Denley
- Security Researcher Tears Up a Binance Scam Site to Find the Hackers
- A Classic Scam Finds New Life Stealing Bitcoin on Twitter
- Cryptocurrency scams on Twitter are so common, this guy built a tool to help detect fraudsters