Twitxy Saved

GoPlus Security 🚦

This account is verified because it's an official organization on X. Learn more

@GoPlusSecurity

Protect Your Every Transaction.
User App: chromewebstore.google.com/search/GoPlus 🛡️
Dev Integration: Security Intelligence & SafeToken Protocol 🛡️
On-Chain gopluslabs.io Joined May 2021
1.1K Following 419K Followers 3.9K Posts

Latest posts 5

Pinned post

GoPlus Security 🚦 @GoPlusSecurity
📢GoPlus #DeepScan Comprehensive Upgrade: A New Paradigm of AI-Powered Smart Contract Security.

Smart contracts hold funds — and hackers are already using AI to uncover deep-layer vulnerabilities. One-time audits can no longer keep pace with today's attack-defense dynamics. The industry must evolve toward AI-powered, continuous security: higher efficiency, lower cost, full-lifecycle protection.

GoPlus DeepScan delivers three interconnected modules forming a closed-loop, continuous security service for the entire smart contract lifecycle: AI Contract Audit, Continuous Security Monitoring, and Token Security Self-Check.

Features

AI Auditing
AI-powered deep analysis of contract source code, permission management, and business logic. Systematically detects syntax vulnerabilities and business-logic flaws, and delivers a structured audit report — including security scores, key findings, issue details, and remediation recommendations.

Security Monitoring
Post-audit, always-on assurance for live contracts. Tracks newly disclosed vulnerabilities, on-chain attacks, and status changes in external dependencies (oracles, cross-chain bridges) in real time. AI continuously assesses impact, triggers targeted re-reviews, and issues alerts — moving beyond the "audit as finish line" model.

Token Security Checking
A rapid pre-launch self-inspection tool for tokens preparing to launch or list. Identifies common high-risk characteristics in minutes, including: Honeypot detection, Malicious mint detection, Blacklist mechanism detection, Abnormal buy/sell tax detection, Owner privilege & trading restriction risks.

Benchmark
An open-source benchmark built from real-world attack incidents. Extracts vulnerable contract source code from attacked projects to systematically evaluate AI capabilities in vulnerability identification, attack-path understanding, contextual reasoning, and audit stability. Nearly 100 real, representative attack cases from May 2025 to date, continuously updated.

Use Cases

Developers — Cost-effective, high-efficiency security scanning with audit-grade quality, enabling fast, confident innovation.

Project Teams — Pre-launch scanning as a complement to traditional audits; continuous auditing and monitoring during operations to stay ahead of attackers.

Exchanges — Enhanced pre-listing security review efficiency and capability; continuous monitoring as routine risk control to catch new threats early and minimize post-listing incidents.

Get Started

GoPlus DeepScan is live — try it now: **deepscan.gopluslabs.io**

AI Auditing Benchmark: github.com/GoPlusSecurity…
20 replies 2 reposts 24 likes 9.3K views View on X
GoPlus Security 🚦 @GoPlusSecurity
On certain affected Alpine Linux setups, a logic collision between OpenSSH and the underlying musl libc lets an attacker bypass password auth and potentially reach root by simply feeding 257–1024 characters into the password field.

Recommend upgrading the packages and restarting sshd, or fully disabling password login in `/etc/ssh/sshd_config`.
International Cyber Digest Verified account @IntCyberDigest 3d
The bug is like a joke.

On Alpine Linux, type 257 to 1024 characters of anything and you get root. 💀
View quoted post on X
3 replies 0 reposts 11 likes 3.2K views View on X
GoPlus Security 🚦 @GoPlusSecurity
⚠️ #iPhone Security Warning: Update to the latest iOS version and check your device for malicious apps as soon as possible!

SEAL recently reported asset losses among several users of self-custody wallets on iOS, including multiple Trust Wallet users and one Uniswap Wallet user. Losses reported so far total approximately $561,000.

Based on the information currently available, we suspect these cases may be linked to the recent wave of iOS-related cybercrime. In these iOS attacks, attackers exploit unpatched vulnerabilities in older versions to steal private data and obtain unauthorized privileges, then steal and transfer crypto assets.

Full report: radar.securityalliance.org/seal-weekly-st…
radar.securityalliance.org SEAL weekly stats: 28 Oct - 3 Nov 2026 We triaged 99 total incidents over the past week. Read more for losses by threat category, what we collected, and IOCs.
GoPlus Security 🚦 @GoPlusSecurity Oct 24
Older iOS flaws are being exploited to steal Web3 keys and crypto. #Coruna and #DarkSword fuel exploit trading, malware sales, phishing and trojanized apps. Our report breaks down the attacks, operators, money trails and how to stay safe 👇 x.com/i/article/2113…
View quoted post on X
6 replies 2 reposts 17 likes 10K views View on X
GoPlus Security 🚦 @GoPlusSecurity
Excited to see @SmartXTerminal integrating #GoPlus Token Security 🛡️

Users can spot honeypots, hidden taxes, and risky owner rights before they trade. Glad to help make trading on SmartX safer.
SmartX Verified account @SmartXTerminal 3d
Trading on SmartX just got safer with @GoPlusSecurity 🛡️

Every token now gets a #GoPlus Token Security check before you trade, so you see warnings on honeypots, hidden taxes and risky owner rights before you buy

One more layer in how we keep trading on SmartX secure
View quoted post on X
1 replies 0 reposts 9 likes 2.6K views View on X
GoPlus Security 🚦 @GoPlusSecurity
🚨 GoPlus Security Alert: #Android has released an important security bulletin addressing severe vulnerabilities. Check your device and update immediately!

Affected versions: Android 14, 15, 16, 16 QPR2, and 17.

Check and update:

1️⃣ Go to Settings → About phone → Android version. Check your Android security update / security patch level.

2️⃣ Install your device manufacturer’s system update, then restart. Update to security patch level 2026-11-05 or later.

⚠️ Of the vulnerabilities listed in this month’s bulletin, the 2026-11-01 patch level addresses only CVE-2026-58868. The 2026-11-05 patch level is required to cover all vulnerabilities in the bulletin.
source.android.com/docs/security/…
source.android.com Android Security Bulletin—November 2026  |  Android Open Source Project