@TheKnapsy

Director @sigp_io. Over a decade in web2 security. Currently securing critical blockchain protocols.

knapsy.github.io/
Joined January 2009
  • Tweets6.1K
  • Following460
  • Followers613
121Media
42
474
40
6,456
234,902
Michal retweeted
Sigma Prime
@sigp_ioSep 22
Secstant found a bug in IPFS: a 14 byte block could take down a node 🐛 Malformed blocks got decoded on goroutines with no recovery, so one unauthenticated gateway request killed the whole daemon. Reported to @IPFS, fixed by @ipshipyard in kubo 0.43.0. Advisory 👇
2
5
41
1,571
Michal retweeted
Sigma Prime
@sigp_ioSep 21
Introducing Secstant by Sigma Prime. Pointing LLMs at your code isn't enough to secure it. The cost adds up, the review has no direction and false positives pile up. We built Secstant to fix that. It's already found bugs in repos from NASA and IPFS, all fixed upstream. Here's how 👇
6
25
4
94
7,543
Michal retweeted
Sigma Prime
@sigp_ioJul 15
AI is accelerating development cycles. We’re accelerating security review cycles to keep up. @realbigsean____ explains how we’re moving security into the development loop. sigmaprime.io/blog/collapsin…

Collapsing the Security Review Cycle | Sigma Prime

How rolling commit reviews and integrated security engineers can reduce audit wall-clock time for AI-accelerated development cycles.

sigmaprime.io
1
4
24
1,682
Michal retweeted
Sigma Prime
@sigp_ioJun 17
AI is just a tool, an extremely powerful tool. But human expertise and intuition is what turns it into a massive security advantage. Deep dive here - sigmaprime.io/blog/ai-as-a-f…

AI as a Force Multiplier for Security Engineers | Sigma Prime

AI has not replaced auditors. It has made strong auditors faster and more powerful, while also amplifying attackers.

sigmaprime.io
3
16
2
81
6,407
The day after the CEO lays off a ton of staff and says: “Non-technical teams are now pushing code to production with AI” @coinbase has a major outage on their trading engine, and even their status page doesn’t work. 😂
Steven
@DogetoshiMay 8
Their status page is also down 😭
322
1,517
198
15,263
988,002
Michal retweeted
Sigma Prime
@sigp_ioMay 8
We're back from Svalbard, and Glamsterdam is coming! The Lighthouse team just returned from Soldogn Interop in Svalbard after a week of @ethereum protocol work under the midnight sun.
4
5
1
38
1,615
Michal retweeted
Sigma Prime
@sigp_ioMay 5

The $579M Opsec Wake-Up Call

Article · @sigp_io
2
8
2
25
1,655
Michal retweeted
Sigma Prime
@sigp_ioFeb 27
Lighthouse v8.1.1 (Scary Terry) is out! This is a mandatory upgrade for all users on prior versions due to a security fix. Please upgrade ASAP. Further details to follow. Also fixes VC head monitor timeouts, DataColumnsByRange duplicate bug, and a slow memory leak. github.com/sigp/lighthouse/r…

Release Scary Terry · sigp/lighthouse

Summary Lighthouse v8.1.1 is a patch release that includes an important security fix, along with several networking and validator client bug fixes, sync observability metrics, and dependency update...

github.com
1
17
3
47
6,142
Michal retweeted
Sigma Prime
@sigp_ioFeb 25
We’re hiring a Cryptographer / Security Engineer to audit cryptographic protocols in Web3 systems. The ideal fit has advanced knowledge of elliptic curves, pairing-based cryptography, and zero-knowledge systems, with strong systems programming skills in Rust, Go and Solidity.
18
15
3
204
12,428
Michal retweeted
Chainlink
@chainlinkJan 20

The Chainlink Endgame: Integrating the World Into the Tokenized Asset Economy

Article · @chainlink
97
363
34
1,457
166,470
Michal retweeted
Boris Cherny
@bchernyJan 2
I'm Boris and I created Claude Code. Lots of people have asked how I use Claude Code, so I wanted to show off my setup a bit. My setup might be surprisingly vanilla! Claude Code works great out of the box, so I personally don't customize it much. There is no one correct way to use Claude Code: we intentionally build it in a way that you can use it, customize it, and hack it however you like. Each person on the Claude Code team uses it very differently. So, here goes.
1,307
6,933
1,280
54,225
8,235,393
Ethereum is going to power the global financial system. The ticker is $ETH.
83
162
25
1,315
88,696
It was a big few days at DSS for the Sigma Prime team. Proud to once again support this event as a sponsor and see our team contributing on stage. Shoutout to @ethzed, @kirkthebaird, @TheKnapsy, and @ToonVH_ Great sessions. If you missed them or want to rewatch, recordings below 🍿
5
10
31
2,084
Balancer’s recent $100M exploit wasn’t about negligence or bad code. It’s a reminder of the limits every protocol faces with today’s fragmented security stack. Even mature teams using audits, bounties, and monitoring can still face blind spots because the tools don’t talk to each other. Full write-up at Immunefi - immunefi.com/blog/expert-ins…

How fragmented security enabled the $100m Balancer exploit

In November 2025, Balancer was exploited for over $100 million through a precision-loss bug in composable stable pools. This isn't a coding blunder on Balancer's end, but a coordinated failure...

immunefi.com
21
8
1
76
16,989
🧠 Did you know you can pipe into Claude Code? Like: cat logs.txt | claude -p "analyze for..." strings bin.bin | claude -p "explain X" etc...
9
32
1
267
25,540
Now in #mimikatz 🥝, #mstsc credentials (passwords / PIN codes) for RDP / Remote Desktop Client - ts::mstsc - on client credentials - ts::logonpasswords - on server credentials Does not rely on previously injected hook/library, useful on jumping servers > github.com/gentilkiwi/mimika…
21
434
26
1,079
So #mimikatz wanted passwords, and Terminal Server has some for us🥝 Cleartext passwords *decrypted* on a fully, up to date Windows 2019 Server No library, no previous code injection, and doesn't use junk part of memory😉 Ping @jonasLyk, still in testing ... 🤪
22
541
36
1,419
I was told you like SCCM passwords & #mimikatz 🥝 Did you know SCCM *endpoints* can keep credentials of all your Network Access Accounts? Time to try the new dpapi::sccm command and to check privileges associated to them 😉 > github.com/gentilkiwi/mimika…
9
282
8
666
I just found this on a pentest, my password can run OS commands.... WTF 😬
27
79
8
590
Load more