Alex Guerrero - ValueCode ⚡️ @value_code

Web Security Expert & Blockchain Investigator at @HypernativeLabs | Whitehat Hacker Specializing in Crypto Scams & Bug Bounties New York Joined June 2009

Tweets

4K
Followers

1K
Following

1K
Likes

814

Lookonchain @lookonchain

9 months ago

Absolutely insane — the total stolen funds from the Balancer exploit have now surged to $116.6M. 💀 x.com/lookonchain/st…

Lookonchain @lookonchain

9 months ago

Update: The Balancer exploit is still ongoing, with stolen assets across multiple chains now exceeding $98M. ⚠️ Stay safe and secure your funds! debank.com/profile/0xaa76… debank.com/profile/0x8727… debank.com/profile/0x0453… x.com/lookonchain/st…

62 63 445 569K 78

200 262 2K 863K 169

View Details

Adi | Resolved Markets @AdiFlips

9 months ago

Update: the balancer hacker has added console logs onchain. there is also a good probability that the hackers vibe coded the attack or used LLMs. Here's why I think that: >hackers usually never leave console.log in production code. >when console.log does appear on-chain, it’s almost always a mistake. >a mistake like that only happens if the coder forgot to delete debug lines. >forgetting to delete debug lines = copy-pasted straight from an LLM. >LLMs love to add console.log("Step 1") to “help you follow”. >So when the log says garbage like Done with amts1, it’s mostly AI slop.

Adi | Resolved Markets @AdiFlips

9 months ago

Here's everything you need to know about the Balancer Hack: 1. The attack targeted Balancer's V2 vaults and liquidity pools, exploiting a vulnerability in smart contract interactions. Preliminary analysis from on-chain investigators points to a maliciously deployed contract that

86 176 928 391K 568

136 81 1K 685K 576

View Details

Suhail Kakar @SuhailKakar

9 months ago

balancer went through 10+ audits. the vault was audited 3 separate times by different firms still got hacked for $110M this space needs to accept that 'audited by X' means almost nothing. code is hard, defi is harder it is unfortunate but hope the team recovers

137 116 1K 203K 174

View Details

Alex Guerrero - ValueCode ⚡️ @value_code

9 months ago

@civilianweb3 Hi

0 0 2 15 0

View Details

SlowMist @SlowMist_Team

9 months ago

🚨SlowMist TI Alert🚨 MistEye has detected potential suspicious activities related to @Balancer. A loss of approximately $70.58M. As always, stay vigilant! etherscan.io/tx/0xd15520726… etherscan.io/tx/0x6ed07db1a…

11 10 59 75K 11

View Details

Aggr News @AggrNews

9 months ago

DEFI PROTOCOL BALANCER POTENTIALLY EXPLOITED: ONCHAIN

112 101 594 552K 62

View Details

ksa 🏴‍☠️ @kosa12m

9 months ago

still thinking about this

237 2K 53K 2.3M 4K

View Details

Blockchain Life 2026 @BlLife_Forum

9 months ago

⚡ Head of BD at @CertiK MENA, @lakshyakj joins the 15th anniversary Blockchain Life in Dubai 15,000+ attendees from 130 countries | Oct 28-29 🌍 Join the largest edition in its history: blockchain-life.com/?utm_source=sp…

0 5 18 3K 1

View Details

hexens @hexens

9 months ago

We recently had the opportunity to audit @zksync's Airbender codebase, and we were genuinely impressed. The code was clean, well-structured, and thoughtfully engineered. ZKsync’s approach to scaling Ethereum with advanced ZK-rollup infrastructure is raising the bar for the entire space. Proud to contribute to the security of such high-impact technology.

12 18 143 53K 8

View Details

BlockSec Phalcon @Phalcon_xyz

10 months ago

.@MIM_Spell was attacked hours ago, resulting in a loss of ~$1.7M. The root cause stems from the flawed implementation logic of the cook function, which allows users to execute multiple predefined operations in a single transaction. Specifically, the actions share a common status, which may lead to the bypassing of the insolvency check. The details are as follows: 1. When action = 5 (ACTION_BORROW), a borrowing operation is executed, and status.needsSolvencyCheck is set to true. 2. When action = 0, the internal function _additionalCookAction is called to update the status. However, this function is an empty function and defaults to returning status.needsSolvencyCheck = false, thereby overwriting the previous check flag and skipping the final insolvency check. The attacker called the cook function on 6 different addresses, passing in actions = [5, 0], obtained 1,793,755e18 MIM, and subsequently profited through swaps. Attack TX: app.blocksec.com/explorer/tx/et…

6 24 93 12K 68

View Details

Philakone @PhilakoneCrypto

11 months ago

This bull market has been the opposite of what I was expecting. I'm so pissed off and upset. Unfortunately, I longed Eth at $4,800 with leverage 20X and got liquidated. Therefore, I'm forced to move back home to Canada to live with my parents. This is my last post ever. Goodbye.