Working on @Walletbeat 🌸 Who watches the wallets?
Mainnet
Joined January 2022
- Tweets3.5K
- Following1.5K
- Followers1.3K
- Likes23.1K
polymutex 🌸 retweeted
Once again reminding the hardware wallet retards that the risk that becomes real when you leak people’s SHIPPING INFORMATION is not phishing. It’s fucking PHYSICAL ASSAULTS AND KIDNAPPINGS.
We owe you an apology.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.
NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type keyst.one yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email support@keyst.one. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.
polymutex 🌸 retweeted
It was great evaluating @ambire!
IMO, it’s a wallet to watch in the coming months / years. Really happy to see their growth
It’s also clear the team is trying to make progress
There are also easy to achieve improvements in our breakdown that could make a big difference :)
polymutex 🌸 retweeted
Help watch the wallets contributing verified wallet data 👇
Anyone in the Ethereum community can contribute data to Walletbeat to help users understand how CROPS maps to wallets.
At this @EFDevcon workshop, @0xmattmatt will guide you through contributing one verified wallet attribute end to end.
polymutex 🌸 retweeted
How does Ambire stack up against Walletbeat's attributes?
What's good, what could be better, and where are the gaps?
A Walletbeat thread 🧵
polymutex 🌸 retweeted
Vitalik will demo Kohaku privacy (Railgun, Privacy Pools, Tornado) using Ambire at Devcon
cfp.devcon.org/devcon8/talk/…
polymutex 🌸 retweeted
@TrustWallet is now listed on @walletbeat!
Great timing as I heard the team is looking for feedbacks 🤓
polymutex 🌸 retweeted
Software supply chain directly impacts wallets' security, and therefore user funds' security. A compromised dependency in a wallet means a compromised wallet, which means compromised users.
@polymutex joins @EFDevcon to explore how should wallets protect against software supply chain attacks
Catch this lightning talk on the Open and Verifiable Stack 👇
Privacy is where wallets have to make the most progress.
Was true when I started working on Walletbeat, still true now.
Turns out it's not just the hardest part of wallet dev, it's also the hardest part of wallet rating :)
Huge work by @0xMattmatt pouring over network data.
Over the past few weeks, @walletbeat has been finalizing the full ratings of the top 5 wallets
The last piece was Privacy. How well does your wallet protect it?
Most aren't doing well (surprised?)
Plenty of room for improvement! Let's push the wallet ecosystem forward :)
This but for every @Walletbeat attribute
Who's building this?
polymutex 🌸 retweeted
Solving CROPS' last-mile problem
Walletbeat contributor @polymutex will take the stage at @EFDevcon on Futures Worth Building track 👇
In this talk, polymutex introduces Walletbeat as a public good that aims to shine a light on CROPS' last mile: the access layer.
polymutex 🌸 retweeted
Walletbeat is heading to Mumbai for @EFDevcon!
We’ll be showcasing how we evaluate Ethereum wallets, what goes into their ratings, and how our findings are helping improve the wallet ecosystem.
Come visit us at our booth!
See how wallets get rated, what the data means, and what wallets have changed because of it 👇
It's the tool not the people
xitter.cf/polymutex/status/21121…
Not blaming any individuals, I'm blaming the tool the org uses: Flowcrypt. I haven't used it, but my guess is it does inline decryption of PGP-encrypted payloads, but doesn't warn that the reply isn't being re-encrypted on the way out when its recipient isn't using Flowcrypt.