resident dj at l2beatz

Diessbach bei Büren, Schweiz
Joined January 2024
if you do not follow me you WILL turn into this
2
5
282
this is why i love working at the layer 2 beating company
Introducing Safe Rollup. Ethereum-anchored, operator-controlled. Safe as in Safe multisig, not safe funds. Safe Rollup gives institutions the credibility of Ethereum and the control of a database. Live on Sepolia today. saferollup.fyi
7
476
incident response: unbranded tally form with 'paste seed phrase'
Replying to @payy_link
Note: The claims form requires entering your Payy Wallet seed phrase. This seed phrase was only used in the Payy app, and without it we cannot identify the amount you had in your wallet due to the privacy architecture of Payy.
2
6
409
from the team that brought you: - private payments without privacy - non-custodial credit card but custodial - zk without zero knowledge - ethereum l2 without ethereum DA the app was good ux though
3
2
4
179
aztec's two gtm issues in the current meta: - their prev two immutable proof systems had crit bugs right after deployment - their founders/marketing are not constantly lying
7
3
2
76
12,329
another weak privacy protocol, another public data explorer to expose the weakness: sekuba.github.io/payy-graph/… incidentally this is also one of the few places that still hosts the offchain data that was public before they got hacked
Replying to @bkiepuszewski
I managed to get in touch with one such secret user, and they showed me that indeed the links can be fully reconstructed from Payy data for any address. So much for privacy there….
4
12
617
how does this work legally for zodl wallet? because i can send to near intents from a shielded zec balance
4
5
157
1-click api terms (the api zodl uses for near intents): docs.near-intents.org/securi… our review that shows that zodl does not leak anything to 1-click or near intents: l2beat.com/privacy/projects/…
1
1
64
current zama txes are 95% public. so people are not able to use it as a privacy protocol, or maybe do not care. that is not optimal for a privacy protocol. sekuba.github.io/zama-graph/ be gentle to that little explorer, it strictly displays only public onchain data
Replying to @bkiepuszewski
But is there a way to use Zama so that indeed the amounts are hidden ? And what exactly is the use case for hiding just the amounts and not the links ?
2
3
16
615
here is the link from the challenge: sekuba.github.io/zama-graph/…
2
32
> do not use ai for this challenge > we can’t do it anymore, we have forgotten how > bartek with the honorary etherscan platinum life++ subscription:
In the next six threads, I will try to show you my non-AI-assisted attempt to deanonymize the source of funds in the latest @l2beat privacy treasure hunt (xitter.cf/l2beat/status/21049183…). Enjoy 🧵 1/6
9
221
ethlabs lwk should lab more, like laBEAT
kinda disappointed seeing @ethlabs_org still claiming that the FCR is live and used on CCIP today when it's still not, so here's a short lesson on how to check the chain (and how CCIP works) 👇
1
4
373
...and 463 registered! ranked by incoming contacts (number of senders that have performed a handshake with this tag, usually for sending tokens)
1,500 tags reserved on zk.money in 24 hours. Names are first come, first served and resolve through @ENSdomains. If you want a specific one, now is the time.
1
14
554
updated the data above! @jaosef leading now
1
36
best writeup so far! although the agent fell for a lil trap in challenge 6 hehehe, zcash still safu
5
254
yes, was surprised how small the anon set on monero is in practice l2beat.com/privacy/projects/…
Replying to @MoneroIsBetter
These hackers never use monero They know it’s not actually private and the liquidity is too low they will just lose lots and lots and lots of money doing pointless swaps
1
2
6
602
Monero (@monero) may be a good standard for private money, but practical privacy depends on how you actually use it, including swapping in and out. As always, we used @ethereum L1 as the start and destination for this privacy experiment. @cakewallet is used as the private wallet for both blockchains. The finding: the default settings do NOT hide you from the centralized exchanges doing the swaps, from anyone who can see your network traffic, or from a future quantum computer. We just added this route to the L2BEAT Privacy dashboard. 3 of 5 adversaries can easily find your trail.
1
42
was preparing to roast an app, all respectful with tons of data and constructive criticism, and then it gets hacked the literal day of having finished the research :[ maybe bad apps are just not gud pic unrelated
2
9
167