
QR Code Deep Link Drainers: Hidden Crypto Approvals
The pixelated ambush. Learn how cybercriminals leverage custom QR codes and mobile application deep links to bypass traditional browser protections and inject instant token drainers.

DeFi and Protocols Writer
Boni is a crypto and DeFi writer at DEXTools News focused on analysing trends, protocols, and opportunities across decentralized finance. He covers lending, perpetual DEXs, yield, and tokenomics, explaining how protocols work and where the real risks and edges sit, with an emphasis on mechanics over speculation.
454 articles published

The pixelated ambush. Learn how cybercriminals leverage custom QR codes and mobile application deep links to bypass traditional browser protections and inject instant token drainers.

The illusion of logging out. Learn how WalletConnect session hijacking allows malicious platforms to maintain background connections and drain assets after you disconnect.

Trapped on Solana. Explore how token developers abuse native blockchain administrative authorities to freeze wallets, hijack metadata, and siphon millions of dollars from unsuspecting memecoin traders.

The democratization of cybercrime. Discover how Drainer-as-a-Service (DaaS) allows low-skill scammers to deploy sophisticated wallet-draining operations, siphoning hundreds of millions of dollars from the Web3 ecosystem.

The ghost in the ledger. Discover how address poisoning campaigns exploit zero-value ERC-20 transfers to poison your transaction history and trick you into sending real funds to hackers.

Ethereum's Pectra upgrade brought the revolution of EIP-7702, but it also armed hackers with the ultimate weapon: sponsor-funded sweeper bots that drain compromised wallets without needing native gas.

The ultimate smart contract vulnerability. Learn how hackers leverage the CREATE2 opcode to bypass wallet warning systems and pre-generate address-draining traps.

Ethereum has scaled, but at the cost of extreme fragmentation. Learn how Caldera's Rollup Engine and new Metalayer allow projects to launch custom chains and link them natively.

Building an independent blockchain used to take years and millions of dollars. Discover how Rollup-as-a-Service (RaaS) is making app-chain deployment as easy as launching a website.

New blockchain protocols no longer need to bootstrap their own trust. Learn how Actively Validated Services (AVSs) rent Ethereum-grade security natively.

Changing your country of residence to escape crypto taxes sounds like an easy win, but exit taxes and complex residency tests can turn your move into an audit trap.

Leveraged crypto perpetual futures and options carry unique tax obligations. Learn how the IRS treats funding rates, liquidations, and the Section 1256 tax split.