Web3 engineer focused on making Web3 product usable. Building projects, exploring Defi and documenting what I have built and learnt along the way.
Joined January 2021
- Tweets6.2K
- Following1.6K
- Followers1.7K
- Likes16.6K
Alchemist retweeted
We all gotta self-custody our money now, can't trust anything that you can't audit with your own AI.
Thats why we wrote the signing logic for @1shotapi embedded wallet in pure javascript with no dependencies.
Hopefully the browser vendors are a little safer that PHP
Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.
The FBI urges organizations to take the following steps now:
➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
➡️ Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.
➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims.
For the latest information, follow PHP’s announcement on php.net, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
ALT Critical vulnerability alert for PHP Core with CVE-2026-109618 and CVE-2026-109619, CVSS score 9.2, urging immediate patch and threat hunting.
Alchemist retweeted
Let me be completely raw & honest with you beni, nothing in life comes easy.
Winning a hackathon isn’t just about being good at shipping a build. It’s about playing the game smart too. If you haven’t won in months, I highly recommend doing this:
1. Pick teams that actually care about builders.
Don’t just build alone in your room. Talk to their developer team. Find bugs in their tools & tell them. Show them your project before the deadline & ask for feedback. Most judges rush through demos, but if someone on their team likes your work, they will fight for you in the judging room.( This worked 99% times for me 3 different ecosystems ).
2. Use THEIR toolings, not random ones.
Judges want to see you use their tech in action. Did you use their wallet? Their code? Their endpoints or toolings? If you enter an OKX hackathon using tools built for Solana chain, you are wasting your own time. Give them exactly what they want to see.
3. Check out other submissions before submitting.
Search the timeline to see what others made. Pick the top 3 or 4 projects from returning hackaton winners most especially, ask yourself & your coding agent: Is their project better than mine? If yes, don't give up, stay up a few more hours & add a cooler feature that beats them. If your project is clearly better than the top 5 builders on your list, you have a huge chance at winning a prize.
4. Don't quit if you lose.
Don't delete your repos but double down and keep building in public. A great example is what @kenn_ronin did with Muse Mirror. When ecosystem teams see you never quit & keep improving, they will start paying attention to you.
5. Hackathons are just the start.
Hackathons are only for quick money to get you started as a founder. Build something real people actually use, even if it’s just 10 to 50 users. Save the prize money you win, focus on your one best app & attend real-life crypto events to meet people. Even getting a small $50k grant can completely Kickstart your motion or change your life.
I know it can be tough sometimes, having no money, staying up all night & feeling like giving up. But nobody who had won from the past or winning now is smarter or more special than you. Keep your head down & fight.
Alchemist retweeted
NEAR HACKATHON is now live with $250K+ in prizes.
No signup. Just ship a public repo + public demo post between November 1st & Nov 14, 23:59 UTC.
Build on NEAR Intents, chain signatures, chain abstraction, NEAR AI Cloud, & more.
Full details:
Alchemist retweeted
Here is what Pact looks like, end to end on @monad mainnet
A sponsor pays in ETH on Arbitrum. @auroraisnear delivers it as USDC to the event's vault on @monad. The payee signs in with @dynamic_xyz, accepts with a Mera passkey, and gets paid on any network of his choices.
No bridge. No seed phrase.
#MonadMetropolis
One thing I have been very intentional about while building Pact is ensuring that users can interact with the product seamlessly without worrying about blockchain complexity or needing to understand how blockchain works.
An event organizer shouldn’t need to understand wallets, gas, signatures, or smart contracts to create a payment agreement.
A photographer, caterer, speaker, or contractor shouldn’t need to install a browser extension, save a seed phrase, or learn Web3 before they can accept work and get paid.
That’s why we combined @dynamic_xyz and @monad mera.
@dynamic_xyz gives Pact a familiar entry point: people sign in with the email identity they already use. That verified identity lets us securely match a payee to the right agreements, invoices, and payments.
Mera turns that identity into a passkey-secured Pact account. Face ID, Touch ID, or a device passkey becomes the authorization layer for accepting agreements and approving the movement of money.
@dynamic_xyz answers: “Who is this person?”
Mera answers: “Did this person authorize these exact terms?”
Together, they allow Pact to provide verifiable agreements and secure financial authorization without exposing users to the machinery underneath.
No seed phrases.
No wallet extensions.
No gas management.
No blockchain vocabulary in the core flow.
Just sign in, review the agreement, approve it, and get paid.
That’s the kind of blockchain product we’re building with Pact: one where the infrastructure is powerful, but almost invisible.
#metropolis
Alchemist retweeted
🚨New bounty alert🚨
The PayWithBlink Video Challenge is LIVE!
Pay for something with Blink, record your experience, post on X, Instagram & TikTok, and win a share of $300 in prizes! 💸
Ready to show us how you #PayWithBlink? 👀
trytetra.xyz/bounties/pay-wi…
Alchemist retweeted
Join the Blink Video Challenge starting today…
1. Join the challenge: Register on our bounty platform: trytetra.xyz/bounties/pay-wi…
2. Get the full campaign details: Join our Telegram channel: t.me/useblinkapp
Use Blink. Pay with Blink. Show the experience. Win!
Alchemist retweeted
One thing I have been very intentional about while building Pact is ensuring that users can interact with the product seamlessly without worrying about blockchain complexity or needing to understand how blockchain works.
An event organizer shouldn’t need to understand wallets, gas, signatures, or smart contracts to create a payment agreement.
A photographer, caterer, speaker, or contractor shouldn’t need to install a browser extension, save a seed phrase, or learn Web3 before they can accept work and get paid.
That’s why we combined @dynamic_xyz and @monad mera.
@dynamic_xyz gives Pact a familiar entry point: people sign in with the email identity they already use. That verified identity lets us securely match a payee to the right agreements, invoices, and payments.
Mera turns that identity into a passkey-secured Pact account. Face ID, Touch ID, or a device passkey becomes the authorization layer for accepting agreements and approving the movement of money.
@dynamic_xyz answers: “Who is this person?”
Mera answers: “Did this person authorize these exact terms?”
Together, they allow Pact to provide verifiable agreements and secure financial authorization without exposing users to the machinery underneath.
No seed phrases.
No wallet extensions.
No gas management.
No blockchain vocabulary in the core flow.
Just sign in, review the agreement, approve it, and get paid.
That’s the kind of blockchain product we’re building with Pact: one where the infrastructure is powerful, but almost invisible.
#metropolis
Pact's funding flow now works end to end on mainnet ✅
A sponsor opens a funding link and pays from wherever their money is: ETH on Arbitrum, XLM on Stellar.
A community donor can support an event from wherever their money is.
@auroraisnear Intents routes and converts it, and it lands as USDC in the event's own vault on @monad.
No bridging.
Alchemist retweeted
Your first users probably won’t magically find you.
@pareen’s advice: DM 200 people, talk to everyone who replies, and bring the early believers into one group chat.
Listen closely, ship what they ask for, and keep the conversation active.
Alchemist retweeted
Pact's funding flow now works end to end on mainnet ✅
A sponsor opens a funding link and pays from wherever their money is: ETH on Arbitrum, XLM on Stellar.
A community donor can support an event from wherever their money is.
@auroraisnear Intents routes and converts it, and it lands as USDC in the event's own vault on @monad.
No bridging.
The financial operating layer for events, built on @monad for #MonadMetropolis Sponsors fund from any chain via @auroraisnear Intents. Organizers see what's funded vs. due. payees get paid on time. Events aren't paid for once. They're financed over time.
An event can be fully funded on paper and still miss its venue deposit. $30k promised. $16.5k due this week. $13k actually in. Today that gap hides in spreadsheets, bank apps, WhatsApp threads and one person's memory.
→ Map every sponsor dollar to the payment it covers
→ Spot cash gaps before they become missed deposits
→ Sponsors pay with any token, on any chain
→ Funded milestones release to vendors
→ Cancelled? Unreleased funds go back to the sponsor
@monad holds event funds and enforces every allocation, release and refund onchain @auroraisnear Intents turns any-chain deposits into USDC on Monad in one step, so sponsors never bridge
Built for #MonadMetropolis
Alchemist retweeted
Your mind will follow whatever you feed it.
Want better thoughts? Consume better things.
Alchemist retweeted
Another Lost.
congratulations to all the winners👏👏
Introducing the winners of Cycle 2 of the Mini Apps Competition!
The Community Council elected to split 2nd place between two builders this cycle.
The $17,000 prize pool has been redistributed:
🥇 $7,000
🥈 $4,000 each
🥉 $2,000
Thank you to everyone who built and shipped.
You set the bar high for future cycles!
🗓 Cycle 3 dates: Oct 14-Nov 11, 2026.
Full breakdown👇
nimiq.com/blog/mini-apps-com…
@miniappscomp @NimiqCommunity
Alchemist retweeted
Win up to $30 in real USDC. Not points. Not test tokens.
We're running a contest for Patched, built for Monad Metropolis:
monad.patched.world/contest
Come break my app. Ends Oct 11.
$30 USDC contest. 3 days. Anyone can win.
Tiny team building for #MonadMetropolis. One day this prize gets three more zeros.
Brands bid to put their logo on your fit. Money waits in escrow till you show up.
Try it, post, get paid on Monad.
Rules 👇
Alchemist retweeted
Just like I said here 💀
Holla @KizzDaniel for me already 🔥🔥🔥🔥
I get plans on how to get his attention but to actually execute na una I need 🤲🏾
Alchemist retweeted
50 USDC Bounty is Live on Tetra 🚀
The SAFU Mainnet Bounty is Officially Open!
Want to help test @safu_staking? We’re rolling out the first bounty on Tetra for 10 early testers.
The Reward: 50 USDC (5 USDC each for 10 people)
The Mission: Test SAFU on the Stellar mainnet
The Catch: Tell us exactly how it went! We want your raw feedback.
Details here:
trytetra.xyz/bounties/stake-…
Alchemist retweeted
Now you can stack ethereum:0x45804880de22913dafe09f4980848ece6ecbaf78 without an exchange account
shoutout to @MetaMaskDev delegation framework for making this possible
