Security Engineer @CertiK, Opinions are my own
Joined December 2015
- Tweets85
- Following128
- Followers189
- Likes376
w1sp(Peiyu) retweeted
Looking ahead to tomorrow’s conversation on securing Web3 🔐
Our Sr. Director of Digital Assets Security, Peiyu Wang (@wisp_fly), joins @CoinWOfficial to discuss evolving attack vectors, protocol hardening, and what stronger security looks like for the road ahead.
🎙️ Web3 Security: Are We Really Prepared?
⚡ Explore the evolving threat landscape, emerging risks, and what it takes to build a safer Web3 ecosystem.
🥳 Moderated by Ciaran Lyons, Crypto Multimedia Journalist at @Cointelegraph, featuring Michael Liu, Chief Security Consultant at @CoinWOfficial, and Peiyu Wang, Sr. Director of Digital Assets Security at @CertiK.
🍿 Tune in: bit.ly/3SUuEPU
REKT Spring...?
#CertiKStatsAlert 🚨
Combining all the incidents in April we’ve confirmed ~$651M lost to exploits with
~$3.5M of the total attributed to phishing.
April has had the highest losses recorded since March 2022 (~$715M), excluding Feb 2025 (Bybit).
More details below 👇
Terrifyingly sophisticated attack:
1. Identified the RPC infrastructure used by the DVN, then selectively compromised two independent RPC nodes.
2. Delivered a targeted spoofed response only to the DVN, while returning truthful RPC data to all other IP addresses, including internal monitoring and indexing systems.
3. Implemented operational cleanup and self-destruction mechanisms.
4. Launched DDoS attacks against the uncompromised RPCs to force failover onto the poisoned nodes.
w1sp(Peiyu) retweeted
Wrote up a Ledger Stax vulnerability.
MCU recovery flow exposed a host-controlled reset_handler over USB/BLE, leading to bricking or boot-time code execution.
hhj4ck.github.io/en/ledger-l…
🤖 Made with AI
w1sp(Peiyu) retweeted
🏆 Hacker Awards 2025 – Nominees & Winners
We’re thrilled to announce the nominees for Hacker Awards 2025!
🏅 Top Earner of 2025: @bbarwik – $920k (Biggest Payout: $250k)
🏅 Most Critical Findings: @0xTonraq – 12 criticals
🏅 Most Valid Reports: @0xTonraq – 46 reports
🏅 Top Security Team: @CertiK
🏅 Ultimate Contributor of the Year: @ziko29504803 – 84 programs influenced, Summer Security event winner, HackenProof ambassador
🏅 Top Contest & DualDefense Hunter: @alexbabits
🏅 Breakthrough Hacker of the Year: – Joined April 2025, now top 13!
You’re all legends! Thank you for your contributions to cybersecurity! 👏
w1sp(Peiyu) retweeted
Can a simple animation compromise security? 🤔
Two incidents, from XSS in Lottie-powered doodles to malicious npm packages, show the risks of third-party code.
Read more in our latest blog👇
certik.com/resources/blog/lo…
w1sp(Peiyu) retweeted
Join the next episode of #KseniaConnects as we explore the critical topic of security in centralized finance! 🔒
🧠 Topic: Building Trust in #CeFi: What Makes an Exchange Secure
⏰ Time: Tuesday, 10/06, 13:00 PM UTC
✨ Set a reminder: xitter.cf/i/spaces/1Yqxoog…
🎤 Speaker: Peiyu Wang @wisp_fly, Auditing Partner at @CertiK
👩💼 Moderator: Ksenia, Growth Lead at @BitMartExchange
#Crypto #Blockchain #BitMart
Appreciate the awesome keyboard from @gmgnai (part of the bounty reward)! Great team to work with — happy to contribute to securing the platform.
w1sp(Peiyu) retweeted
Honoured to join Ledger’s 2025 Hall of Fame (first entry since 2022)! Hardest gadget I’ve ever probed—tough for attackers too.
Huge thanks to Vincent (@b0l0k_) and the @DonjonLedger / @Ledger crew for the recognition.
donjon.ledger.com/hall-of-fa…
w1sp(Peiyu) retweeted
🥞@PancakeSwap's Infinity update introduces a modular architecture with Vaults, Pool Managers, and Hooks—unlocking powerful new capabilities for developers.
We highlight key security considerations for building safe, effective hooks👇
certik.com/resources/blog/pa…
w1sp(Peiyu) retweeted
There are a lot amount of people capitalizing on this hack to sell their fancy multisig, semi-custodial, MPC, blah blah blah product to you.
They say that they would've prevented this hack.
Those products make your attack surface LARGER, not smaller.
Do not believe their lies
w1sp(Peiyu) retweeted
Innovative customization is now possible with @Uniswap's V4 hooks, enabling advanced DeFi applications. But with flexibility comes new security challenges.🧐
Explore the risks and best practices for securing Uniswap V4 hooks in our latest blog: 👇
certik.com/resources/blog/un…
I will present the "Web2 Meets Web3: Hacking Decentralized Applications" at the AppSec Village at DEFCON tomorrow. Come check it out! appsecvillage.com/events/dc-…
