- Tweets 45
- Following 95
- Followers 22
- Likes 253
Huge congrats to @ambire for breaking into the Top 3 of our latest Wallet Security Ranking! 🏆
You’re doing a phenomenal job. The progress is clear, the improvements really show, and this result is well deserved.
Congrats to the whole team! 👏
6
18
247
👏
Today we are publishing the first Ill Bloom findings: affected-address checker + on-chain analysis to help users identify exposed addresses and protect their assets.
🔗 illbloom.org
⚠️ We will never ask for seed phrases, private keys, signatures, or approvals, or ask users to send funds to "recover" or protect a wallet.
1
35
Hey @exodus 👋 @coinspect testing team here, doing an address-poisoning security review for our ranking. Is recipient-address detection on your roadmap? Also saw some balance-loading issues while testing, known problem right now?
2
72
🔍🧐🫡
Multiple software wallets are adding address poisoning protection, so we just merged a change to our Wallet Security Ranking checklist: github.com/coinspect/wallet-…
Stay tuned for the next testing round 🗣️
42
Zero donations for 6 days. Closed #25
@coinspect's Wallet Security Ranking: 79 donors, $6k raised
The community shows up late but loud!
1
2
3
77
I just donated on @Giveth! Check out the projects I supported 💜 qf.giveth.io/user/0x462A0d4f…
15
The future of supply chain security starts here. Let’s go!
I present TAINT.
A bug bounty pays for a report that someone must review. TAINT pays for a demonstration.
Software is built from thousands of components written by strangers.
TAINT asks: Can someone get arbitrary bytes into the artifact I trust?
2
33
Alejo Sequeira retweeted
I just published Zeroshot-14B, a small model finetuned with 10,000+ public CVE findings, to increase its ability to find bugs in C/C++/JavaScript code.
Why? Because big models are too expensive and slow. This one is fast, and free. Link in thread...⬇️
4
42
206
24,786
Alejo Sequeira retweeted
Grok says that this post by @liorcito uncovers fresh details on the Balancer V2 exploit—like the attacker's binary search via reverts & decompiled math helper code—not yet buzzing on X. Deep dive into rounding biases & on-chain forensics:
coinspect.com/blog/balancer-…
Right @grok ?
4
7
14
3,139
Phishing and insecure dynamic third-party code as the initial vector for wallet drainers.
Ladies and gentlemen, the decentralized web👇
This is not:
* just a privacy issue
* about "hacking Google"
It is about phishing and insecure dynamic third-party code as the initial vector for wallet drainers.
Open🧵for more examples
47
Alejo Sequeira retweeted
Evolving NPM Supply Chain Attacks
Protect your development and CI/CD environments:
❌ npm i → may pull infected dependencies
✅ npm ci → installs from lockfile, reproducible & safe
4
8
576
Alejo Sequeira retweeted
🚀 Missed our launch? The Learn EVM Attacks Explorer is live!
Experiment with real #DeFi exploits across #Ethereum, Polygon, BNB Chain & more
🪄with one-click (2?) reproducibility, search, and shareable case studies.
Explore, learn, and help build safer protocols👇
9
5
10
3,815
Alejo Sequeira retweeted
1/🧟♂️⚠️ What are Zombie dApps?
When Web3 projects shut down, their domains often expire then attackers re-register them to build “zombie” sites that drain wallets by posing as legitimate shutdown pages.
1
8
7
1,150
Alejo Sequeira retweeted
⚠️ Ciberataque al sistema de RRHH que usa el Servicio Penitenciario Bonaerense. Se trata de una filtración que muestra data sensible de oficiales y personal.
🤠 Sheriff: new #cybercrime intelligence.
🇦🇷 #Argentina: TA leaked the full source code and DB of the SIGERHUM (Human Resources System) from the Buenos Aires Penitentiary Service, exposing personal data of personnel.
⬇️ Details below.
1
4
25
3,814