Pinned Tweet
Announcing my rejected talk for @bsidespyongyang:
Is that "web3 enthusiast" follower with the anime PFP acting suspicious?
Find out if you have confirmed North Korean followers at dprkdetector.app.
Heads up - someone is selling alleged @Ledger WalletConnect XSS vulnerability.
Be careful what you click on, an attacker can use a legitimate subdomain to build a credential harvester.
Unverified, but the seller is asking 125k. Consider that when a bug bounty offers you $500.
noid retweeted
“We used our models to understand the device”
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work.
At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated.
We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
The nice thing about @bot is that now with a built-in desktop, you can actually hack around and make a @signalapp "bot" for your groups
Blast was a main character at ETHDenver 3 years ago and now both are winding down.
Insane cycle if you think about it.
Blast will be shutting down.
We launched Blast with the goal of building a self-sustaining chain for users and developers. Unfortunately, the economics of operating the chain no longer make sense: the ongoing costs of maintaining Blast exceed the revenue generated by the L2, and we do not see a credible path to making the chain economically sustainable.
As a result, we've made the difficult decision to wind Blast down.
We're sorry to the users and developers who believed in Blast, built on it, and supported the ecosystem. Our priority now is making the shutdown as smooth and safe as possible.
We're asking all users to withdraw their assets from Blast to Ethereum mainnet, including any balances held in the Blast PWA.
To make this easier, we will be reducing the withdrawal delay to 24 hours.
As part of the shutdown process, we'll first begin withdrawing Blast's Lido assets. This process is expected to take approximately one week. During this period, withdrawals will temporarily be unavailable, even after the withdrawal delay is reduced to 24 hours.
Once that process is complete, withdrawals will resume with the new 24-hour delay.
Users will have until October 26, 2026 to withdraw through the normal Blast interface.
After October 26, assets will remain withdrawable, but users will need to interact directly with the Blast bridge contracts on Ethereum L1. We'll publish detailed instructions before then.
We strongly encourage everyone to withdraw their assets to Ethereum mainnet before October 26.
What kind of third party software are they running on nodes? EDR? Monitoring stuff?
Product B sounds like Jenkins because they mention a "web execution endpoint".
Apparently attackers were inside @Bitget for 25 days before they took $387.5M
@SlowMist_Team and Mandiant traced it to a zero-day in a third-party security protocol utilized by Bitget
Then a second product on Sept 24, using an employee's identity
Still no vendor named 🤯
Are we seriously doing the whole "defcon is cancelled" bit
ETHDenver not announcing whether they're cancelled is straight-up selfish.
We have staff, catering & vendors who rely on this income for their families, often working two jobs to get by. They need confirmation now.
There's several scam sites posting ads on Facebook geo targeting Denver locals to 'get their 2027 ticket'.
@EthereumDenver do the right thing, make an announcement.































