0xbepresent

8.2K posts

0xbepresent banner
0xbepresent

0xbepresent

@0xbepresent

Smart contract bug hunter | Found +200 H/M | 90+ audits | I like to observe things

dark forest Katılım Ağustos 2010
522 Takip Edilen320 Takipçiler
Sabitlenmiş Tweet
0xbepresent
0xbepresent@0xbepresent·
Stablecoins are becoming a significant absorber of US debt. They mint stable, buy US debt with your dollars, pocket the 4-5 % yield, give you zero, and in the process become a huge, price-insensitive buyer of US debt pushing bill yields down and the dollar up. Bitcoin was created by US gov to save his economy.
English
1
1
3
832
0xbepresent retweetledi
0xbepresent retweetledi
DANISH
DANISH@astrodanish·
Your brain is under attack by a trillion dollar adversary intent on destroying it. This is your David vs Goliath. Resist the algorithm.
English
165
669
5.2K
890.1K
0xbepresent retweetledi
doomer
doomer@doomerfied·
[ DOOMER ] AFTER IRAN, THE US WILL SHIFT ITS FOCUS TO REGIME CHANGE IN THE ETHEREUM FOUNDATION, “WE’VE HAD ENOUGH OF THESE COMMUNISTS,” SAYS DONALD TRUMP: TRUTH SOCIAL
English
85
182
2.4K
260.9K
0xbepresent
0xbepresent@0xbepresent·
Thinking more about that deterministic tools + AI bridge... If AI can reach high confidence on bugs by cross-verifying with tools like CodeQL (querying code paths precisely, no hallucinations), why not speed up judging in audit contests? Attack vector hypothesis → AI runs CodeQL queries + maybe generates/runs PoC tests → flags/validates issues faster. Human judges focus on edge cases & severity debates instead of initial triage. Could make contests way more efficient (fewer duplicates, quicker payouts). Built a tiny prototype with Ouroborus and it already feels promising. x.com/0xbepresent/st…
English
1
0
1
177
0xbepresent
0xbepresent@0xbepresent·
Been vibecoding lately and it's honestly changing how I see smart contract audit. What if we built better bridges between deterministic tools (like Slither) and AI? Created a quick CLI called Ouroborus that pipes Slither findings → AI verification (using CodeQL to double-check issues in the code). Super basic, but context engineering + focused inputs = way less hallucination and sharper focus. Built the whole thing in ~2 days and cool... hacking just got even more interesting and fun. #example-output-with-codeql--function-tree-deterministic-lookup" target="_blank" rel="nofollow noopener">github.com/0xbepresent/ou…
English
1
0
4
330
Bernhard Mueller
Bernhard Mueller@muellerberndt·
I'm trying to keep a positive attitude. But the people in @Reddit subs like /r/HypotheticalPhysics are something else. Even spoon-feeding the theory doesn't help. They immediately enter an aggressive mocking frenzy. One guy literally called me "a little baby who has its first psychosis", shortly before I got banned from the sub. I recommend avoiding those subs. Don't post your ideas there, you will NOT get anything useful out oi it.
English
12
1
24
2.5K
0xbepresent
0xbepresent@0xbepresent·
"There will even be people who continue to defend the system; most aren't ready to be unplugged." x.com/i/status/20186…
GIF
English
1
0
1
283
0xbepresent retweetledi
Bernhard Mueller
Bernhard Mueller@muellerberndt·
The Theory-of-Everything is finally here. Exit the matrix today.
English
91
839
7K
19.4M
0xbepresent retweetledi
Patrik Grobshäuser
Patrik Grobshäuser@ITSecurityguard·
My ClawdBot has HackerOne access now and he sends me money from his adventures. 🤑🤑🤑
Patrik Grobshäuser tweet media
English
15
15
317
51K
0xbepresent retweetledi
Pashov Audit Group
Pashov Audit Group@PashovAuditGrp·
Being a hacker is a lifestyle. Everything can get hacked. Hack it first. Disclose the vulnerability safely and ethically. Move on to the next. Hack things for a living, it's the sh*t🫡
English
5
4
83
2.1K
Gammichan
Gammichan@gammichan·
It's this simple imo
Gammichan tweet media
English
66
34
477
86.1K
0xbepresent retweetledi
Bernhard Mueller
Bernhard Mueller@muellerberndt·
The best way to audit is to build a "mental interpreter" of the entire codebase so you can run it in your head. It can take weeks. But then the bugs start falling out automatically. You might wake up in the morning with a new bug in mind.
English
4
7
104
4.6K
0xbepresent retweetledi
artsch00lreject
artsch00lreject@artsch00lreject·
now tell them jeffrey epstein is satoshi nakamoto
artsch00lreject tweet media
English
553
2.2K
32.8K
1.3M
0xbepresent retweetledi
unvariant.io
unvariant.io@unvariant_io·
Balancer ComposableStablePool was drained in a series of batchSwaps almost a week ago. Plenty of short writeups popped up — most miss the root cause or lack details. We wanted to figure it out and we wrote a full deep-dive along the way: blog.unvariant.io/balancer-hack-…
English
6
10
61
12.4K
0xbepresent retweetledi
🐧
🐧@Pentosh1·
You’re hiding stable coins under your floorboards aren’t you
GIF
English
204
418
7K
354.1K
0xbepresent
0xbepresent@0xbepresent·
Markets about to discover that the cheapest supercomputer runs on food + sleep. AI valuation reset incoming. x.com/StockSavvyShay…
Shay Boloor@StockSavvyShay

$MSFT CEO Satya just made one of the most revealing comments of the entire AI cycle when he said Microsoft has $NVDA GPUs sitting in racks that cannot be turned on because there is not enough energy to feed them. The real constraint is not compute but power & data center space. This is exactly why access to powered data centers has become the new leverage point. If compute is easy to buy but power is hard to get, the leverage moves to whoever controls energy & infrastructure. Every new data center that $MSFT, $GOOGL, $AMZN, $META & $ORCL are trying to build needs hundreds of megawatts of steady power. Getting that energy online now takes years which means the players who locked in power early & built vertically across the stack are the ones with real control. Hyperscaler growth is no longer defined by how many GPUs they can buy but by how quickly they can energize new capacity. Satya’s other point about not wanting to overbuy one generation of GPUs matters just as much. The refresh cycle is shortening as Nvidia releases faster chips every year which means the useful life of a GPU now depends on how quickly it can be deployed into production. When power & space are delayed then that GPU loses value before it ever produces a dollar of compute revenue. Satya just validated why my DCA plan remains overweight in the AI Utility theme. The AI economy will scale at the rate power comes online, not at the rate chips improve. The next phase of AI infrastructure growth will belong to whoever can energize capacity faster than demand expands. Power has become the pricing layer of intelligence: $IREN, $CIFR, $NBIS, $APLD, $WULF, $EOSE, $CRWV

English
0
0
0
83
0xbepresent retweetledi
Schlag
Schlag@Schlagonia·
Well boys, think I figured out (part of) the scam, and it is a doozy. Strap in. TLDR: Stream (xUSD) and Elixir (deUSD), and likely more, are recursively minting each other tokens in order to inflate there own TVL and create a ponzu the likes of which we haven't seen for awhile in crypto. NOTE: In the name of readability and due to X restrictions all txn hashes and addresses will be posted in a follow up tweet for those that wish to follow along themselves. We start our journey on mainnet, watching the flow of USDC funds that have just landed in the Stream xUSD wallet last night. 0x15 - First step is to transfer the USDC out to another Stream controlled address 0x33, in this case to the tune of $4.4m. - 0x33 places a cow swap order to buy USDT, which is paid out to 0x25. - 0x25 takes that USDT and uses it to mint the equivalent amount of deUSD from their on chain minter 0x69 - 0x25 then transfers the deUSD back to 0x33 which in turn transfers it back to the main Stream wallet 0x15. - Stream then takes that deUSD and bridges to AVAX, World chain or any other L2 that has lending markets listing sdeUSD, uses it as collateral to borrow other stables such as USDT or AUSD, swaps to USDC and bridge back to mainnet. This is repeated one or two more times with varying amounts and lending markets, but the end state is Stream mints deUSD, uses that as collateral to borrow stables and mints more. Yesterday they did 3 rounds to mint about 10m deUSD. While degenerate yes, not inherently scammy. Enter Part 2 Usually when leverage looping, the last txn is just to supply the last amount as collateral. But Stream has a special power, which is their wallet receive's all USDC used to mint their "stable" coin xUSD and boy do they use it. So with the final USDC they borrowed they recursively mint their own xUSD coin. Yesterday using the same $1.9m USDC they minted about 14.5m xUSD as shown in the tweet below. This means xUSD is not only not actually backed 1:1 but the protocol itself is the largest holder of the token. It currently controls over 60% of the xUSD in circulation, meaning if we assume all is recursively minted like this then each xUSD is backed by at most $0.40. But for what purpose? Well this is where it gets fun. The main thing to do with xUSD other than hold, is leverage loop it where listed on Euler, Morpho etc. But who would lend millions of stables against a token the protocol just minted out of thin air you ask? 🤔 Well none other than our friends at Elixir who happen to find themselves with an extra $10m newly acquired USDT. 🤯 - Step one is to transfer the $10m USDT to what their "Transparency Dashboard" labels "Elixir's sUSDS Multisig" (lol) 0x73 - Next 0x73 creates a Cow swap order to swap the USDT back to USDC and have it land in 0x1b - 0x1b bridges the $10m USDC to Plume network and then transfers it to a Safe at 0xaF8 - The Elixir Safe then supplies the USDC directly to a Morpho market that lends against, you guessed it xUSD. -This market is hidden from all available morpho UI's and Elixir is the only depositor. There is currently over $70m USDC supplied and >$65m borrowed. - Shortly after each deposit Stream will then come along with its brand new xUSD it minted to itself, borrow the USDC, bridge back to mainnet and we find ourselves back at the start of the story. Funny enough as I was writing this they seem to be kicking off another round starting with another minting of deUSD. While I did not dive fully in yet I would assume most markets that Stream uses to borrow against deUSD are also funded in similar manners, potentially by other partner "stable coins" engaging in the same tactics. It is hard to know for sure how much actual collateral is backing this full system but seems likely to be sub $0.10 per $1. Though what's a bit of leverage when you can each advertise 10-15% TVL growth overnight, just look at this beautiful chart from the Elixir dashboard showing their TVL growing about $60m in just a few weeks. (that amount sounds familiar) The exposure runs rampant through DeFi, not only just holding xUSD or deUSD but depositing into any market or curated vault that lends against them or the other Yield coins that also are at least in part backed by these. Make sure you know where your yield is coming from. Happy Farming.
Schlag tweet mediaSchlag tweet mediaSchlag tweet mediaSchlag tweet media
Schlag@Schlagonia

Now that people seem to be paying attention to what's actually behind the yield coin meta, few more fun facts for you. The Stream xUSD wallet holds 60% of the outstanding xUSD all of which is levered up. While the comingling of funds between their products make it impossible to know how much is recursively minted with its own backing, this includes a $95m position on Plasma Euler. As with most of these positions it would be impossible to actually liquidate given on chain liquidity. Of course they are using an upgradable proxy for the oracle, so need not worry about those things. xUSD largest exposures are - mHYPE (whose liquidity buffer appears to be empty) - RLP whose transparency page numbers don't match the wallets and shows a negative $25m balance on Binance. Other notable exposure is to other yield coins like rUSD, which about 30% of its backing is rUSD itself. As well as deUSD, who has 30% of their backing in mF-ONE. mF-ONE is mostly off chain but claims to have a $16m "liquidity buffer", which is actually 100% deposited to mTBILL. mTBILL is missing about $15m but only has $100k "liquidity buffer" and the other $5m is in BUIDL. In general basically every Midas Transparency page is wrong in some capacity (which is more than you can say for Stream who's still doesn't exist) and every single one you look at has some amount of funds not showing up in the wallets. The daisy chain stretches on farther than you can imagine and with recursive self minting and lending fueling basically all of the "growth". Though good news Midas provides "Independent Verifications and Attestations" which like the one below are 4 lines of arbitrary numbers followed by 120 blank pages. drive.google.com/file/d/1Zj8fAv… Happy Farming.

English
49
87
749
208.5K
0xbepresent retweetledi
Ethereum Intern
Ethereum Intern@ethereumintern_·
Three years ago on this date, Nikolai was found washed up on the beach of Puerto Rico under suspicious circumstances. He was a great man, a legendary cypherpunk developer and a friend. His work included MakerDAO (now Sky), Reflexer, Balancer, Dappsys and more. Rest in peace.
☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️☀️@delete_shitcoin

CIA and Mossad and pedo elite are running some kind of sex trafficking entrapment blackmail ring out of Puerto Rico and caribbean islands. They are going to frame me with a laptop planted by my ex gf who was a spy. They will torture me to death.

English
76
278
2.8K
416.1K