tutoriales

tutoriales · 15 min
ByBit, one year on: clear signing, Guardrail and EIP-7702 — what changed in the multi-sig ecosystem
On 21 February 2026 the ByBit hack turns one. Only 3.5 % of the $1.5B has been frozen. What did change: Safe ships Guardrail (August 2025) blocking unauthorised DELEGATECALL, EIP-7702 hits mainnet with Pectra (May 2025), the Ethereum Foundation takes over ERC-7730 from Ledger and pulls Trezor / MetaMask / WalletConnect into an open clear-signing standard. Updated PoC on Sepolia comparing signing with and without Guardrail+clear signing.
25 feb 2026 · Manuel López Pérez
tutoriales · 10 min
Cyber 2025 in review: four cases that explain the year
ByBit, the UK retail wave (M&S/Co-op/Harrods), SharePoint ToolShell and Windows 10 end-of-support. Four incidents with explicit criterion — no exhaustive top list, no ranking — and the operational lesson each one leaves for 2026.
29 dic 2025 · Manuel López Pérez
tutoriales · 11 min
Windows 10 end of support — the day after 14 October
On 14 October 2025 free patches for Windows 10 stop. What the system stops receiving, what consumer ESU offers (free in the EEA, $30 outside), what it costs the enterprise, and which CVEs we are likely to see exploited against the installed base.
15 oct 2025 · Manuel López Pérez
tutoriales · 17 min
ByBit / Safe{Wallet}: how Lazarus stole $1.5B by flipping a flag from operation=0 to operation=1
On 21 February 2025, TraderTraitor drains 401,347 ETH from ByBit's cold wallet. The multi-sig has no bug, the blockchain has no bug: what breaks is the visualisation chain. JavaScript injected into app.safe.global from a Safe developer machine compromised by a malicious Docker project 17 days earlier. The signer sees a routine transfer; what they sign is a delegatecall that rewrites slot 0 of the proxy.
25 feb 2025 · Manuel López Pérez
tutoriales · 10 min
Arup: $25M via deepfake CFO on a video call (Hong Kong, February 2024)
Fifteen transfers, five Hong Kong accounts, $25M gone in a single Zoom session. The finance employee approved the transaction because "the CFO and other colleagues were on the call" — every one of them was a real-time video and voice deepfake. The canonical case of AI-assisted social engineering.
20 may 2024 · Manuel López Pérez

ByBit, one year on: clear signing, Guardrail and EIP-7702 — what changed in the multi-sig ecosystem

Cyber 2025 in review: four cases that explain the year

Windows 10 end of support — the day after 14 October

ByBit / Safe{Wallet}: how Lazarus stole $1.5B by flipping a flag from operation=0 to operation=1

Arup: $25M via deepfake CFO on a video call (Hong Kong, February 2024)