ttyler9 retweeted
I have been debating for months with fellow security people who say AI hacking will not be a big deal.
My argument has consistently been that so much of the fruit is not just low-hanging, but sitting on the ground. That the internet is powered by fragile software, managed by regular people who make mistakes. And that extraordinary harm can come from exposing our flawed systems to more scrutiny.
This is a case in point. Billions in losses from one guys laptop.
How many similar situations do you think there are in the world? Across all our systems globally. That have trillions of dollars and in fact the entire economy running through them?
And that’s just misconfigurations! That’s not even counting AI finding new stuff.
The only reason things were stable before is because there were a tiny number of attackers and far too much surface area to cover. AI just changed all the math.
This has only just begun.
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
ttyler9 retweeted
Anthropic has replaced Git internally.
The titans are falling.
New on our Engineering blog: Creating in-house source control.
In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale.
Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: anthropic.com/engineering/re…
ttyler9 retweeted
🚀 Learn MCP — a hands-on workshop for building a Model Context Protocol server on Cloudflare Workers.
Connect AI to real tools, APIs, and data with global deployment, serverless scale, and built-in security.
Start now → learnmcp.examples.workers.de…
ttyler9 retweeted
Big news! 🚀 We've got @OpenAI newest open models on Workers AI!
Access the new models with reasoning capabilities at @cf/openai/gpt-oss-120b and @cf/openai/gpt-oss-20b.
✨Support for the new Responses API
✨120B model is designed for complex tasks, deeper context understanding, and enhanced reasoning capabilities.
✨20B model is an efficient model for conversational AI and creative content gen.
Read the blog & changelog 👇
ttyler9 retweeted
Cloudflare is the only DDoS vendor that could handle multiple simultaneous current-record DDoS attacks and not be crippled. Is your provider ready for what’s coming?
ttyler9 retweeted
Big day for @Cloudflare as we launch our newest compute primitive, Containers! A bit of history: In 2020, we acquired S2 Remote Browser tech and faced the challenge of migrating it from AWS to our edge. To run a Chromium-based browser securely, we split our team: half focused on the Remote Browser app, half built a robust, independent container platform to support it.
We knew some workloads needed to be close to users but didn’t fit our Workers isolate model. This platform became a game-changer, empowering dozens of internal teams to build features like Workers CI/CD, Browser Rendering, Key Transparency, Workers AI, and more.
But we kept asking: Is this the right primitive for our users? Workers remains the go-to for globally distributed, effortlessly scalable compute at a great price. Initially, many use cases we heard were for single-node webservers that didn’t need region earth. Then we got excited as users started asking for latency-sensitive, real-time applications and the ability to run agents close to the users they serve.
Cloudflare Containers are here to deliver for those high-performance, user-proximal workloads. Excited to see what you build with it!
ttyler9 retweeted
Cloudflare Containers are now available in public beta. Deploy simple, global, and programmable containers alongside your Workers: cfl.re/4kNjs06
ttyler9 retweeted
1/ Very excited that @Cloudflare Log Explorer is now GA! Cloudflare's various products (security, CDN, developer platform) produce a *lot* of logs (we serve >100M HTTP reqs/sec at peak). But previously, you mostly had to send those logs somewhere else to analyze them.
ttyler9 retweeted
If you got caught in the Heroku outage, and in particular if your stack is JS/TS, consider giving Cloudflare a go.
Everyone goes down from time to time, but the fact the status page was also down is just wild. As a bonus, the platform is awesome, quick to learn, and rapid 🚀
ttyler9 retweeted
Just moved @Ringblaze website to @Cloudflare and it's so fast!
I moved the website from Google Cloud to Cloudflare Pages and was amazed at how easy the process is.
ttyler9 retweeted
Built Cloudflare Agents to enable autonomous AI workflows that operate entirely at the edge—each agent runs on Cloudflare Workers with sub-millisecond cold starts, leveraging Durable Objects for stateful coordination and seamless communication across distributed components. This means agents can interact with APIs, transform data, maintain context, and trigger downstream logic in real time without centralized compute.
No containers, no cold boot lag, and no infrastructure to manage—just define your workflows, deploy globally, and let agents run persistently and intelligently across the Cloudflare network, handling everything from API orchestration to conditional logic with edge-native speed and reliability.
ttyler9 retweeted
Just shipped my first AI agent on Cloudflare using their new Agents SDK. Real-time updates via WebSockets, built-in state management with Durable Objects, and serverless inference with Workers AI.
Feels like the future of autonomous apps. Zero infra headaches, just code and deploy.
ttyler9 retweeted
.@openai now supports remote MCP servers — which you can deploy on cloudflare in just a few clicks
auth and transport included with agents sdk ✨
ttyler9 retweeted
This is incredibly important for the future of an agentic web. If bots are going to do more for us, we need to reliably identify them. Here’s the open standard we’re working with the IETF to implement. blog.cloudflare.com/web-bot-…
ttyler9 retweeted
if you're building a multi-tenant application that needs to support custom (vanity) domains, you don't need to roll it all yourself. just use cloudflare for saas
it's only $.10 per custom hostname — ssl management, cdn, etc built in, and will scale endlessly
ttyler9 retweeted
Cloudflare is teaming up with Anthropic, Asana, Atlassian, Block, Intercom, Linear, PayPal, Sentry, Stripe, and Webflow to launch new remote MCP servers, built on Cloudflare.
blog.cloudflare.com/mcp-demo…
ttyler9 retweeted
A better architecture is what allows @Cloudflare to stay way ahead of the new wave of massive (5 Tbps+) DDoS attacks. No other vendor is in the same league.
ttyler9 retweeted
.@Cloudflare just released a tool to convert any project from Vercel to Cloudflare hosting. github.com/ygwyg/diverce
Cloudflare compute usually costs a fraction of Vercel's.
Very impressed!
ttyler9 retweeted
We (@cloudflare) are going to deploy an automatic WAF rule that blocks requests w/ that can bypass Next.js auth middleware, including unpatched versions.
You can also create a WAF rule right now on *any* plan by heading to <website> > Security > WAF > Create rule in the dash:
If your are using @nextjs you can create a simple firewall rule @Cloudflare to patch your project. We are working on adding a built in rule.
ttyler9 retweeted
Started diving deeper into Cloudflare after discovering @ashleypeacock and his book.
I'm convinced Cloudflare is uniquely positioned as the leading platform to power the next AI wave.
@Cloudflare @CloudflareDev























