MITM-PixNFC. Technical article shows how a MITM attack against Pix tap-to-pay can swap the dynamic QR during APDU exchanges (UPDATE BINARY), silently redirecting payments without breaking crypto. We detail the flow, a PoC with NFCGate, CRC recalculation, and defenses: per-transaction signature, nonce, timestamp, counter, and strict AID/offset checks.

github.com/penegui/MITM-PixNFC

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.