I break things and code stuff to break more

ЕГГОГ!
Joined March 2008
Tired of not understanding s**t about what calls your fav DApp is making? Decoding with cast commands? ABI-hunting on Etherscan? Some time ago I released Web3 Decoder, a Burp Suite extension to make your life a bit easier. I just released a big update! github.com/nccgroup/web3-dec…
1
5
6
399
And everything coded without LLMs! Well... ok, no.
1
37
LLMs allowing you to revisit projects you had abandoned seems like a dream! Hope this ext. is useful to some of you folks. If you find some common unsupported multicall/proxy/wallet/nested patterns, feel free to create an issue so we can add support for them!
22
Gryphus ☣ Mario retweeted
🎣 Just released: GoPhish MCP Server! ✨ Features: 🎯 Campaign management (CRUD + analytics) 👥 Groups, templates, pages, SMTP profiles 📊 Advanced analytics & reporting 🔍 Smart search & utilities github.com/dan1t0/gophish-mc… #GoPhish #MCP #AI
1
5
8
834
The final part of our State of the Art of Private Key Security in Blockchain Operations series is live! 🔐 [4/4] Approvals & Policies Talking about Approvals (by humans) & Policies (what can be signed): 🔗 nccgroup.com/research-blog/s… 🧵 A quick recap of the full series 👇
4
5
3
464
Whether you're worried about the keys on your project, or about managing institutional funds, I hope you can get some (good) ideas from these posts!
51
[3/4] Private Key Storage & Signing Modules A look into the pieces that actually hold and use private keys. HSMs, Enclaves, and types of storage for operational keys (including where you should never store them) 🔗nccgroup.com/research-blog/s…
46
[2/4] Common Custody Solutions Architectures Showcasing some of the common architecture designs (off-chain centralized, off-chain MPC, on-chain) and their core components 🔗 nccgroup.com/research-blog/s…
36
[1/4] Concepts, Wallet Types & Signing Strategies Foundations of key management: Multisig, MPC, offchain vs onchain, and how these models shape custody design. 🔗 nccgroup.com/research-blog/s…
40
Part 3 of our Private Key Security for Blockchain Operations series is live! This one dives into the heart of custody solutions — the Private Key Storage & Signing Module 🔐 Do's and Don'ts of private key storage! 🔗 nccgroup.com/research-blog/s…
1
51
In case you missed the earlier parts 👇 [1/4] Concepts, Wallet Types & Signing Strategies 🔗 nccgroup.com/research-blog/s… [2/4] Common Custody Architectures 🔗 nccgroup.com/research-blog/s…
34
We just published the first two posts of our "State of the Art of Private Key Security in Blockchain Operations" series! 🔹 [1/4] Concepts, Types of Wallets & Signing Strategies 🔹 [2/4] Common Custody Solutions Architectures nccgroup.com/research-blog/s… nccgroup.com/research-blog/s…
39
Gryphus ☣ Mario retweeted
We @VennBuild just discovered a critical backdoor on thousands of smart contracts leaving over $10,000,000 at risk for months Along with the help of security researchers @dedaub @pcaversaccio, the seals team @seal_911 and others, we managed to rescue the majority of funds before the attacker could make their move. This is the story of how a sophisticated attacker (cough Lazarus) put backdoors in thousands of contracts and ALMOST got away with it 🧵
52
114
44
774
133,543