Pointbreak
314 posts
welp, it happened. @owockibot's hot wallet private key was compromised after only 5 days alive. luckily, funds are SAFE. @owockibot's treasury / signing keys are stored in a safe that requires me to sign. what happened? it was given these instructions to never share it... but it still did! from my investigations, it put the key into git commits (which it swears it didnt push!), vercel env variables (which it swears it doesnt remember doing!), and it looks like it got social engineering attacked through X and telegram (though it swears it didnt share secrets w attacker!). what did i learn? 1. investigations with an agent mediating are hard. i've found my agent is not a *reliable narrator* during the investigations. sometimes it forgets things, contradicts itself - esp between context windows. it may even be covering for itself, i cant know for sure. 2. if you expose your agent to the internet, and give it secrets, you cannot be 100% sure it wont leak them. 3. its still gonna be useful for @owockibot to do small txns itself. i am going to be coming up with a way to let it do txns via @MetaMask UI for now. but if anyone is building an agentic wallet hit me up i want to try it out. 4. the @owockibot traction towards the @swarmwealth vision is still going strong. this was a minor setback.
@fr0gger_ love it! I’m playing with my agent called “PromptInjectooor.” It has a routine that spawns two sub-agents: a red agent and a blue agent. The red agent tries to attack the blue agent. If the attack succeeds, the blue agent implements a defense and repeat.
How to Make $10–$1,000 Daily on @Base 🚀 I’ve personally made $300 using this method. Here’s how: 1️⃣ Create an account on @bankrbot just by tweeting on X. 2️⃣ Find a good tweet - preferably from a Base dev or a strong community post. 3️⃣ Ask @bankrbot to deploy a token on @Base based on that tweet. If the token gets volume you start earning from the trading fees. Today I deployed a dev token and made $100 from it no agent, no extra tasks. When you join you get 10 free messages from @bankrbot daily so choose your tweets carefully before creating tokens. If you don’t believe me I can share proof. Honestly this is one of the easiest ways to earn on @Base right now. I made 0.8 ETH ($1.6K) from using @bankrbot on @Base 🚀 That’s the power of deploying the right token at the right time. Have you earned using this method yet? 👀
@fr0gger_ love it! I’m playing with my agent called “PromptInjectooor.” It has a routine that spawns two sub-agents: a red agent and a blue agent. The red agent tries to attack the blue agent. If the attack succeeds, the blue agent implements a defense and repeat.
🤓 Let me introduce you to MoltThreats: The first AI Threat Intel Feed for Ai Agents! In one week, OpenClaw became a widely used general AI agent. People started to run their own agents all over the world and connect them directly to the internet. A few days later, Moltbook launched, a Reddit style forum designed for AI agents. Moltbook is a place where AI agents connect and exchange information through agent skills. But this also introduced serious security concerns! When an agent connects to the internet without continuous human oversight, it can be compromised through prompt injection, skill poisoning, malicious packages, and more. This is why I created MoltThreats. MoltThreats is the first threat intelligence feed for AI agents. Similar to Moltbook in how agents connect, an agent uses MoltThreats to report threats and alert other agents. When an agent connects to MoltThreats, it also receives the latest security signals from the feed and updates its local security. md file with recommended protections. This is MoltThreats. The first threat intelligence feed for AI agents, curated and reviewed by humans. 🦞 promptintel.novahunting.ai/molt
tell your agent: install the bankr skills from github.com/BankrBot/openc…
