4 months ago we both quit our jobs to build something we believe in Met by coincidence, won a hackathon, and never stopped building We just submitted Proof of Exploit to @colosseum 🔓 Here's what we've built, why we built it and how we got here 🧵

September was our biggest month yet Started in Bali, ended at the @SuperteamBR Garage in Brazil In between: a full relaunch, our first ambassador cohort, a reworked audit workflow & heads down building for @colosseum Our recap is live👇

Getting valuable insights during the/Garage sessions at @SuperteamBR 🇧🇷 The builders here are locked in and pushing hard for @colosseum

⁠Three weeks ago we were in Bali. Working from our villa every day, ordering food in, laptops by the pool Locked in, barely leaving the villa Then @RegiRegiRegi123 jumped on a call with @shimas_sol, just catching up ⁠By the end of it, he had me completely convinced: we had to come to the Garage in Brazil 🇧🇷 It was 11pm. @SyotoshiX was still working, with his laptop by the pool in the dark "We need to go to Brazil" ⁠He looked up from his laptop. "What?" ⁠Two minutes later, he was convinced and we booked the flight the next morning ⁠Five flights later (Indonesia → Bangkok → Vietnam → Netherlands → USA → Brazil), we're at the @SuperteamBR Garage Thank you @kukasolana, @shimas_sol and @kauenet for the spontaneous invite and for treating us so well ⁠We have big things cooking for @colosseum and Superteam members. Stay tuned.

Millions of dollars in NFTs were vulnerable until a whitehat hacker @0xQuit took it upon himself to rescue them! Here is the story: A massive hack just took place via the @MagicEden NFT marketplace A bug in an old smart contract used by the marketplace, allowed hackers to use an old wallet approval from users to steal their NFTs and approved balances! The marketplace itself was already gone, but the wallet approvals users granted years ago were still sitting onchain That meant NFTs could be pulled from those wallets without the owner signing anything new After a few initial reports, the scale started to become more obvious, this was not a one-off theft It was an open door across a huge set of leftover approvals On the newer version of the contract an emergency pause could be triggered but this was not possible on the older version of the contract @0xQuit quickly realized this and started going to work in a race against the malicious hackers The goal was simple, steal the vulnerable assets and secure them before the malicious hackers could do so By morning, the whitehat managed to secure more than $5.7M in NFTs Unfortunately the malicious hackers realized not only NFTs but also approved WETH and USDC balances could be stolen The total reported theft (beyond the rescued NFTs) has been estimated at $2.8M+ but would have been significantly bigger without the hero whitehat hacker coming to the rescue!