Filter
Exclude
Time range
-
Near
May 13
🚨🚨🚨Security Alert: BoostHook Leveraged Long Exploit BoostHook suffered an exploit on Ethereum mainnet, resulting in attacker profit of ~20.9329 WETH, at least 38.3274 ETH in realized protocol bad debt, and another 32 ETH of debt left open across surviving positions. 🔍 Root Cause The attacker used a 120 WETH Morpho flash loan to manipulate the ETH/PERP Uniswap v4 pool price, then opened nine leveraged positions through `BoostHook.openLong()` at inflated pricing. `BoostHook` recorded the positions without enforcing a strong post-open solvency check, and after the attacker dumped PERP back into the pool, `BoostHook.afterSwap()` liquidated only five positions due to `MAX_LIQS_PER_BLOCK = 5`, leaving four toxic positions open. 🧾 On-chain Details • Victim contracts: `0x3db1ebb71c735980d12422f153987d89f4d7eacc` (`BoostHook`) `0x000000000004444c5dc75cb358380d2e3de08a90` (`Uniswap V4: Pool Manager`) `0x4ae2458e6d087aaa3625d81242f22f0b513bca07` (`BoostStaking`) • Attacker addresses: `0xb0a019dd22c363e82fa4f96ae1e4b993341f5104` `0xb64bff7b5199abcbb98fee2bf4014265fca85a6d` • Attack txs: etherscan.io/tx/0xb45cc4d9c1… 🛡️ Takeaway Leveraged position entry must enforce post-open solvency and debt-coverage invariants, not only swap slippage checks. Protocols should defend against same-transaction price manipulation and avoid liquidation caps that allow multiple toxic positions to survive during an attack path.
4
12
38
11,936
Here’s a “cheat sheet” of @cookiedotfun DAO @almanak campaign multipliers so you can level up faster. ActionMultiplier / PointsNotes Posting content connecting wallet (Mindshare)Base reward (no multiplier)You earn SNAPS simply by posting & engaging. Lock ≥ $500 in Almanak vaults (Capital Mindshare)Up to ~5× boostDepositing capital triggers higher multiplier. Stake $COOKIE (Diamond/Platinum tier)Up to ~5× boostStaking gives another layer of multiplier. Referrals / bringing in capital via othersUp to ~10× boostReferral bonus adds heavy multiplier potential. Tips Multiply actions together: e.g., vault deposit AND staking will stack multipliers. Prioritize connecting your wallet posting early for mindshare. Then add capital staking to unlock capital-mindshare and max out multipliers. @almanak_ua @almanak_vn @almanak_ru @almanak_jp @almanak_kr @almanak_tr @Almanak_cn
Why Almanak is my favorite project on @cookiedotfun and why more people should really be talking about it. I’ve been spending time exploring different projects on Cookie, and while there are a lot of fun and creative ones, Almanak stood out for a very specific reason . it actually solves a real problem for on-chain builders. Most projects just show data. @almanak helps you understand it. It gives teams deep insights into what’s actually happening on-chain not just charts or fancy metrics, but real performance indicators that guide decisions. That’s what I love about it. It’s practical. It’s something every serious project could benefit from. If you’re building in Web3, you know how hard it is to connect user behavior with growth or revenue. Almanak makes that process clear and actionable. What really makes it special is how it focuses on sustainability. In a space where most people chase hype and short-term trends, Almanak is quietly building something that will help projects last. It’s not about token pumps or vanity stats , it’s about growth backed by data. I think more people should give it attention on @cookiedotfun. It represents what the next wave of Web3 should look like , data-driven, transparent, and built for long-term value. So yeah, for me, @almanak isn’t just another project on @cookiedotfun It’s the one that feels like it has a real mission behind it. And I’ll keep talking about it because it deserves more eyes. If you haven’t checked it out yet, do it. Real builders will get why it stands out.
2
3
700
Ec1ipse Ore Mining Pool Update: Migrate to Earn Passive Staking Rewards Staking rewards launch 10/26 | 5pm UTC. If you have a Stake or Boost currently active, YOU MUST MIGRATE to start earning rewards. With ore-hq-client v4.0.0 , boost rewards up to 10x through Passive Yield Staking: - 4% for ORE - 8% for ORE-SOL LP - 8% for ORE-ISC LP Upgrade Now: 1. Update ore-hq-client: `cargo install ore-hq-client` 2. Stake directly on the web: stake.ec1ipse.me Legacy Staking is being retired, but withdrawals are always available. Don’t miss out on passive yield—migrate today. #PassiveYield #BoostStaking @OREsupply @HardhatChad @bigtimetapin @neil_shahani
5
19
977
Talking about mass adoption..! @GdrToken #BoostStaking #CRO #CroFam Earn.., while driving..! #SafeDrivingIncome Go check. #DYOR
2
1
3