https://harrydenley.com/writing Harry Denley is a security researcher in EVM crypto. Write-ups on phishing kits, wallet drainers and sweepers, on-chain incidents, and the tools used to take them apart. en Tue, 06 Oct 2026 11:00:00 GMT https://harrydenley.com/hedo-a-desk-with-a-mood https://harrydenley.com/hedo-a-desk-with-a-mood Tue, 06 Oct 2026 11:00:00 GMT Hedo is a Tamagotchi that trades on his own. An AI agent posts every signal, his mood sets the order, and he's saving up for a girlfriend. ethereum trading web3 https://harrydenley.com/onchain-air-a-radio-for-the-chain https://harrydenley.com/onchain-air-a-radio-for-the-chain Tue, 01 Sep 2026 11:00:00 GMT Onchain Air is a 24/7 Icecast station for Ethereum. Royalty-free music, then spoken gas, stablecoin flow, vault drains, and security headlines you can leave running while you work or train. ethereum radio security https://harrydenley.com/stonkers-finance-memecoin-backed-nft-hands https://harrydenley.com/stonkers-finance-memecoin-backed-nft-hands Mon, 24 Aug 2026 11:00:00 GMT Stonkers mints crayon businessman NFTs on Robinhood Chain. 75% of the mint buys a leverage-weighted memecoin hand; burn the NFT to redeem the stored claims. nft defi web3 https://harrydenley.com/goodbye-sniko https://harrydenley.com/goodbye-sniko Tue, 27 May 2025 13:38:49 GMT My old Twitter account @sniko_ is gone and the handle has been re-registered. Looking back at what I did with it, the press that picked up my tweets, the legacy blue check, and my new account @0x11b6. twitter x security ethereum https://harrydenley.com/exfil-data-googlesheets https://harrydenley.com/exfil-data-googlesheets Tue, 10 Jan 2023 23:00:00 GMT How data can be covertly exfiltrated from Google Sheets using built-in formulas—and how to detect it. security data-exfiltration google-sheets https://harrydenley.com/faking-twitter-unfurling-part-2 https://harrydenley.com/faking-twitter-unfurling-part-2 Thu, 01 Sep 2022 23:00:00 GMT How Twitter link previews (unfurling) can be spoofed to mislead users—and why you shouldn’t blindly trust them. security phishing social-engineering https://harrydenley.com/sanctioned-addresses-on-ethereum https://harrydenley.com/sanctioned-addresses-on-ethereum Tue, 19 Apr 2022 23:00:00 GMT There are sanctioned addresses at the smart contract level on Ethereum. But what are they? compliance security analysis https://harrydenley.com/evodefi-bridge https://harrydenley.com/evodefi-bridge Fri, 18 Mar 2022 23:00:00 GMT I have started looking at different cross-chain bridges to understand how different bridges have different setups and understand if the risks are properly… security blockchain https://harrydenley.com/an-analysis-of-crypto-donations-to-ukraine https://harrydenley.com/an-analysis-of-crypto-donations-to-ukraine Sat, 05 Mar 2022 23:00:00 GMT Analysing the onchain behaviour on Ethereum for Ukraine donations. The purpose of this is to discuss only the cryptocurrency events that occured after… analysis ukraine donations blockchain https://harrydenley.com/changing-the-tech-powering-my-website https://harrydenley.com/changing-the-tech-powering-my-website Sat, 26 Feb 2022 23:00:00 GMT Moving away from Jekyll and now using Gatsby! Over the weekend, I decided to change my website build process from Jekyll to a Gatsby build. technology https://harrydenley.com/bad-actors-abusing-blockexplorers-to-trick-you https://harrydenley.com/bad-actors-abusing-blockexplorers-to-trick-you Thu, 24 Feb 2022 23:00:00 GMT A reliable source of truth, or are they? Blockchain index services rely on contract Events to help archive data and give you a record of a transaction in a… smart contract blockchain security phishing https://harrydenley.com/2021-the-second-half-in-review-crypto-hacks-scams-shutdowns https://harrydenley.com/2021-the-second-half-in-review-crypto-hacks-scams-shutdowns Wed, 05 Jan 2022 23:00:00 GMT Take a look at the second half of 2021 and reviewing the security events that happened in the industry. year in review security https://harrydenley.com/faking-twitter-unfurling https://harrydenley.com/faking-twitter-unfurling Tue, 02 Nov 2021 23:00:00 GMT Do you trust links? Well, you shouldn’t. Do you trust this link: Twitter says this link should take you to Uniswap, nobody would be none-the-wiser because we… security phishing https://harrydenley.com/so-you-wanna-build-your-own-pfp-nft-project https://harrydenley.com/so-you-wanna-build-your-own-pfp-nft-project Wed, 22 Sep 2021 23:00:00 GMT NFTs (Non-Fungible Tokens) saw a meteoric rise in popularity this year, and many projects have been published with communities forming around them. fun nft https://harrydenley.com/do-you-trust-links-well-you-probably-shouldnt https://harrydenley.com/do-you-trust-links-well-you-probably-shouldnt Fri, 17 Sep 2021 23:00:00 GMT Back in 2018, I published a research article about how many click-throughs we managed to track through to scams utilising popular link shorteners. security phishing https://harrydenley.com/investigating-twitter-reply-scam-rings https://harrydenley.com/investigating-twitter-reply-scam-rings Wed, 04 Aug 2021 23:00:00 GMT With the surge of mainstream interest in cryptocurrency, many scams occur on one of the most popular places to discuss crypto: Twitter. security phishing https://harrydenley.com/protect-yourself-against-2fa-hacks https://harrydenley.com/protect-yourself-against-2fa-hacks Tue, 20 Jul 2021 23:00:00 GMT Bolster your 2FA security controls. In this article, we aim to explain to you how you can implement more security controls to better protect your… security phishing 2fa https://harrydenley.com/2021-first-half-in-review-major-blockchain-crypto-hacks-scams-shutdowns https://harrydenley.com/2021-first-half-in-review-major-blockchain-crypto-hacks-scams-shutdowns Wed, 07 Jul 2021 23:00:00 GMT The world of cryptocurrency is as dangerous as ever and it’s hard to ignore. To catch up, check out my previous 2020 in Review. The world of cryptocurrency is… year in review security https://harrydenley.com/twitter-beeple69m-bot https://harrydenley.com/twitter-beeple69m-bot Tue, 20 Apr 2021 23:00:00 GMT Beeple is a 3D artist, and has been releasing art every single day for the past 13 years. He has recently started selling his art (some as 1/1) as NFTs. twitter https://harrydenley.com/how-to-beat-an-ethereum-based-sweeper-and-recover-your-assets https://harrydenley.com/how-to-beat-an-ethereum-based-sweeper-and-recover-your-assets Thu, 15 Apr 2021 23:00:00 GMT How to beat the bad actors draining your wallet. When your secrets get compromised, bad actors will often put a sweeper on your account to take advantage of… security blockchain recovery https://harrydenley.com/bad-actors-abusing-erc20-approval-to-steal-your-tokens https://harrydenley.com/bad-actors-abusing-erc20-approval-to-steal-your-tokens Wed, 24 Feb 2021 23:00:00 GMT Be careful with what parameters you call approve() with!. A lot of tokens on Ethereum use the ERC/EIP20 standard. This is a standard interface for the token… smart contract blockchain security phishing https://harrydenley.com/2020-in-review-major-blockchain-crypto-security-incidents https://harrydenley.com/2020-in-review-major-blockchain-crypto-security-incidents Thu, 21 Jan 2021 23:00:00 GMT After a tumultuous 2019, was 2020 better or worse? Let’s review. To catch up, check out my previous 2019 in Review. If 2019 could be classified as a wild… year in review security https://harrydenley.com/malicious-crypto-apps-are-ramping-up-on-google-play https://harrydenley.com/malicious-crypto-apps-are-ramping-up-on-google-play Mon, 11 Jan 2021 23:00:00 GMT Malicious cryptocurrency apps on Google Play are stealing user secrets at scale—here’s how they work and how to stay safe. security phishing applications https://harrydenley.com/how-to-ensure-you-re-running-the-legitimate-version-of-metamask https://harrydenley.com/how-to-ensure-you-re-running-the-legitimate-version-of-metamask Thu, 17 Dec 2020 23:00:00 GMT I’ve written this as a reaction to the recent news of an attack on a member of the community resulting in a loss of ~$8,000,000 in personal funds. security phishing https://harrydenley.com/hackthebox-money-flowz-osint-challenge https://harrydenley.com/hackthebox-money-flowz-osint-challenge Thu, 29 Oct 2020 23:00:00 GMT Frank Vitalik needs to do a better job covering their tracks. HackTheBox is an online platform that allows its users to analyze, train, and enhance their… writeup https://harrydenley.com/working-with-binance-to-return-10-000-of-stolen-crypto-to-a-victim https://harrydenley.com/working-with-binance-to-return-10-000-of-stolen-crypto-to-a-victim Wed, 22 Jul 2020 23:00:00 GMT Previously, I was able to return $4k of stolen funds to a user. I recently made another recovery to the tune of over $10k. security phishing recovery https://harrydenley.com/the-twitterhack-postmortem https://harrydenley.com/the-twitterhack-postmortem Wed, 15 Jul 2020 23:00:00 GMT Hundreds of millions of users were exposed to crypto scam tweets from compromised Twitter accounts. What happened? security phishing analysis https://harrydenley.com/2020-so-far-personal-information-dumps-and-cryptocurrency https://harrydenley.com/2020-so-far-personal-information-dumps-and-cryptocurrency Fri, 10 Jul 2020 23:00:00 GMT This year is shaping up to be an interesting year in terms of security exploits and domain compromises. year in review security https://harrydenley.com/intercepting-and-saving-5-000-worth-of-phished-crypto https://harrydenley.com/intercepting-and-saving-5-000-worth-of-phished-crypto Tue, 30 Jun 2020 23:00:00 GMT A special occurrence. I managed to rescue $5k of stolen funds and return it to the owner. This is a special occurrence. We write a lot about phishing, but… security phishing recovery https://harrydenley.com/phishing-campaigns-take-aim-at-web3-defi-applications https://harrydenley.com/phishing-campaigns-take-aim-at-web3-defi-applications Tue, 23 Jun 2020 23:00:00 GMT MakerDAO, Uniswap, Synthetix and have been mimicked in a recent wave of phishing sites. This is the second collaboration piece with PhishFort. In the first… security phishing blockchain https://harrydenley.com/discovering-fake-browser-extensions-that-target-users-of-ledger-trezor-mew-metamask-and-more https://harrydenley.com/discovering-fake-browser-extensions-that-target-users-of-ledger-trezor-mew-metamask-and-more Mon, 13 Apr 2020 23:00:00 GMT Using a familiar phishing method to target new brands. We keep an eye on the type of attacks that come to cryptocurrency users on a daily basis and often… security phishing browser extensions https://harrydenley.com/2019-in-review-major-blockchain-crypto-security-incidents https://harrydenley.com/2019-in-review-major-blockchain-crypto-security-incidents Mon, 30 Dec 2019 23:00:00 GMT A look back at some of the crypto hacks, scams, and arrests that happened this past year (2019). year in review security https://harrydenley.com/dapp-key-management-us-and-security https://harrydenley.com/dapp-key-management-us-and-security Sun, 24 Nov 2019 23:00:00 GMT What to look for when using private keys with your dApp. Key management is a big concern in the cryptocurrency industry as keys give access to addresses, and… security https://harrydenley.com/nigeria-indonesia-the-us-and-vietnam-are-among-the-highest-victim-rates-for-crypto-scams https://harrydenley.com/nigeria-indonesia-the-us-and-vietnam-are-among-the-highest-victim-rates-for-crypto-scams Wed, 20 Nov 2019 23:00:00 GMT An analysis of over 100,000 click-throughs to popular crypto scams, via Dune Analytics Big thank you to Dune Analytics for providing the tools to help me… security phishing analysis https://harrydenley.com/research-into-trust-trading-scams-on-twitter https://harrydenley.com/research-into-trust-trading-scams-on-twitter Mon, 12 Aug 2019 23:00:00 GMT Over 300 Twitter accounts are trying to steal your money. During the 2017-18 bull market, we saw a lot of people promoting trust-trading scams (specifically… security phishing https://harrydenley.com/disclosure-key-generation-vulnerability-found-on-walletgenerator-net-potentially-malicious https://harrydenley.com/disclosure-key-generation-vulnerability-found-on-walletgenerator-net-potentially-malicious Thu, 23 May 2019 23:00:00 GMT If you have used a private key generated on WalletGenerator.net after August 17, 2018, move your funds immediately to a secure address. security phishing https://harrydenley.com/discovering-fake-trezor-metamask-and-mycrypto-android-apks https://harrydenley.com/discovering-fake-trezor-metamask-and-mycrypto-android-apks Tue, 30 Apr 2019 23:00:00 GMT These fake apps will get you if you’re not careful. Always verify at a trusted source. These fake apps will get you if you’re not careful. Always verify at a… security phishing applications https://harrydenley.com/be-careful-with-your-kyc-documents https://harrydenley.com/be-careful-with-your-kyc-documents Wed, 03 Apr 2019 23:00:00 GMT Stop handing out your information without doing your due diligence. Stop handing out your information without doing your due diligence. KYC is a process known… security https://harrydenley.com/hunting-huobi-scams https://harrydenley.com/hunting-huobi-scams Wed, 13 Mar 2019 23:00:00 GMT Huobi-related scams aren’t seen very often, but they’re still just as dangerous as every other scam. security phishing https://harrydenley.com/the-dangers-of-malicious-browser-extensions https://harrydenley.com/the-dangers-of-malicious-browser-extensions Mon, 21 Jan 2019 23:00:00 GMT Be careful with what you install. Recently, I came across a project that promises to give you cashback on each transaction — including trading on centralized… security phishing browser extensions https://harrydenley.com/unique-phishing-method-to-look-out-for-the-fullscreen-api https://harrydenley.com/unique-phishing-method-to-look-out-for-the-fullscreen-api Mon, 31 Dec 2018 23:00:00 GMT Using the browser API to fool you into giving up your details. A lot of websites in the cryptocurrency scene— especially products that need you to enter… security phishing https://harrydenley.com/the-trust-trading-scam-kit https://harrydenley.com/the-trust-trading-scam-kit Mon, 10 Dec 2018 23:00:00 GMT Before you read this, REMEMBER NOBODY IS GIVING AWAY FREE MONEY. Recently I came across a server hosting around 60 trust-trading domains and the server was… security phishing https://harrydenley.com/using-phishing-tools-against-the-phishers-and-uncovering-a-massive-binance-phishing-campaign https://harrydenley.com/using-phishing-tools-against-the-phishers-and-uncovering-a-massive-binance-phishing-campaign Mon, 01 Oct 2018 23:00:00 GMT Jeremiah O’Connor (security researcher at Cisco) forwarded me a domain that has been phishing for Binance logins — logins-binance.com12754825.ml. security phishing https://harrydenley.com/cryptophishing-twitter-bot https://harrydenley.com/cryptophishing-twitter-bot Fri, 31 Aug 2018 23:00:00 GMT A bot that tweets malicious domains and infra used in cryptocurrency phishing campaigns. A bot that tweets malicious domains and infra data used to phish… twitter phishing https://harrydenley.com/dissecting-some-of-the-latest-cryptocurrency-exchange-phishkits https://harrydenley.com/dissecting-some-of-the-latest-cryptocurrency-exchange-phishkits Wed, 08 Aug 2018 23:00:00 GMT It’s been about a year since I started taking a major interest in phishing within the cryptocurrency scene, namely Ethereum. security phishing https://harrydenley.com/you-need-to-stop-trusting-links https://harrydenley.com/you-need-to-stop-trusting-links Thu, 02 Aug 2018 23:00:00 GMT Here’s a walk-through of the popular links that people often fall for. A little while ago, we started noticing suspicious domains with legitimate-looking… security phishing https://harrydenley.com/dissecting-a-hitbtc-phishing-site https://harrydenley.com/dissecting-a-hitbtc-phishing-site Sun, 29 Jul 2018 23:00:00 GMT Welcome to part 2 of 1000 of “Harry follows phishers” One of our bots recently found a new, relatively sophisticated HitBTC phishing kit. security phishing https://harrydenley.com/following-an-ethereum-phishing-scam-down-the-rabbit-hole https://harrydenley.com/following-an-ethereum-phishing-scam-down-the-rabbit-hole Sun, 15 Jul 2018 23:00:00 GMT I was browsing etherscan.io comments recently while hunting for scammers and came across a suspicious account — one with a MyEtherWallet logo avatar and the… security phishing https://harrydenley.com/web3-rpc-api-postman https://harrydenley.com/web3-rpc-api-postman Tue, 10 Apr 2018 21:00:00 GMT I tried searching for something that had all the web3 RPC endpoints in one place so I can test/play with whatever on my local node. fun https://harrydenley.com/how-to-ensure-safety-using-etherdelta https://harrydenley.com/how-to-ensure-safety-using-etherdelta Sun, 24 Dec 2017 12:00:00 GMT Recently EtherDeltas' DNS was compromised which meant when you went to etherdelta.com it didn't resolve to a server they controlled. security https://harrydenley.com/setting-up-an-ethereum-node https://harrydenley.com/setting-up-an-ethereum-node Thu, 08 Jun 2017 21:12:34 GMT The following will take you through my steps of setting up an Ethereum node, then spawning an RPC server to be able to use (primarily) web3.js to communicate… fun infrastructure https://harrydenley.com/another-mysql-daemon-already-running-with-the-same-unix-socket https://harrydenley.com/another-mysql-daemon-already-running-with-the-same-unix-socket Wed, 02 Jul 2014 16:51:09 GMT I recently had the experience of a server shutting down ungracefully, and caused MySQL to completely fall over and die. mysql https://harrydenley.com/copying-remote-files-to-local-machine https://harrydenley.com/copying-remote-files-to-local-machine Sat, 21 Jun 2014 15:06:46 GMT I recently bought a mac, and i prefer to my Windows machine, as I wasn't a fan of Win8. scp