#TransactionSimulation

[osintelligence]

https://bit.ly/3JAffvf - ZenGo uncovers security vulnerabilities in popular Web3 Transaction Simulation solutions: The red pill attack ZenGo, a leading blockchain wallet provider, has uncovered security vulnerabilities in popular Web3 Transaction Simulation solutions used by many leading vendors, including the Coinbase wallet. With the almost unlimited capabilities introduced by Decentralized apps (Dapps), attackers have exploited the transaction approvals offered to and approved by users, stealing their assets. To address this visibility gap, transaction simulation technology has emerged to evaluate the potential outcome of an intended transaction before it gets sent to the blockchain. ZenGo has assessed the security of these solutions and found them vulnerable to attacks, leading to fixes and multiple bug bounties, and an Ethereum Foundation grant. However, attackers can still deceive anti-malware solutions through the "red pills attack," a new attack vector in the Web3 environment, which ZenGo has found solutions for. At Microsoft’s BlueHatIL conference, ZenGo plans to elaborate on their findings and release a detailed report and testing framework using the Ethereum Foundation grant.