Butkus

13K posts

Butkus banner
Butkus

Butkus

@ButkusD_

CPO @dec_masters | 3x Founder | Crypto class of 2017

Miami, FL Katılım Ağustos 2011
1.1K Takip Edilen1.5K Takipçiler
Butkus retweetledi
nader dabit
nader dabit@dabit3·
This is crazy. The hacker installed a dead-man's switch that will wipe your computer if you revoke the GitHub token they stole from you. Revoking the token is what triggers the wipe.
nader dabit tweet media
TANSTACK@tan_stack

SECURITY ADVISORY — TanStack npm packages A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package. Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down. Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys. If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised: • Rotate cloud, GitHub, and SSH credentials immediately • Audit cloud audit logs for the last several hours • Pin to a prior known-good version and reinstall from a clean lockfile Detection — the malicious manifest contains: "optionalDependencies": { "@tanstack/setup": "github:tanstack/router#79ac49ee..." } Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root). Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level. Full technical breakdown, complete package and version list, and rolling status updates: github.com/TanStack/route… Credit to the security researcher for responsible disclosure.

English
145
1K
9.6K
1.7M
Butkus retweetledi
Stratosphere 💫
Stratosphere 💫@StratosphereVIP·
Miami @consensus2026 just getting started 🌴 Our opening VIP dinner really set the tone Thank you to @wallstreetbets x @orangie x @PotionAlpha x @pudgypenguins @creatorfun x @scale x @DeLoreanlabs Definitely the most curated room in Miami A pleasure connecting with the legends: - @iandebode - President, Ondo Finance - @JustinBarlow - Executive Director, Sei Foundation - Charles Liu - Strategy & Operations, @Revolut - @LucaNetz - CEO, @pudgypenguins - @0xLoMel - President, @IglooInc - @jonathankingvc - Senior Manager, Investments, @cbventures - @Pedromiranda - Head of Consumer, Solana Foundation - @ChrisBarrett - Senior Director of Communications, @chainlink - Victoria Anderson - Head Of Growth, @Bitwise - @beatricecollet - COO, Chiliz - Eleonora Kolesnikova - @Trezor - Greg Meehan - @coingecko - @vesper792 - Ecosystem Lead, Meteora - @henrymcphie_ - CEO, Streamex - @ROCKST4R - Head of Marketing, Cysic - @FlowTraderTM - Head of BD, Ostium Labs - @catdaly - CMO, Space and Time - @imprfekt - CEO, Streamflow - Taran Dhillon - Head of Digital Assets, @kula_dao - @farokh - President, Myriad Markets - @jonah_b - Blockchain Capital - @lannaroche - Antler - Ben Rubin - Head of BD, @BloFin_Official - @ch_egan - Head of Influencer Partnerships, @bitget and more More dinners + office visits all week DM if you want to join 👀
Stratosphere 💫 tweet mediaStratosphere 💫 tweet mediaStratosphere 💫 tweet mediaStratosphere 💫 tweet media
English
59
19
211
149.8K
Butkus
Butkus@ButkusD_·
Coinbase fired 14% of their employees because of AI Reducing management layers No pure managers, only player-coaches - getting hands dirty together Lean teams, AI native people only Non-tech people are writing code (this is a scary part from security perspective) If your company doesn't have an AI mandate and getting everyone to vibe coding level by EOY, you're late
Brian Armstrong@brian_armstrong

This is an email I sent earlier today to all employees at Coinbase: Team, Today I’ve made the difficult decision to reduce the size of Coinbase by ~14%. I want to walk you through why we're doing this now, what it means for those affected, and how this positions us for the future. Why now Two forces are converging at the same time. We need to be front footed to respond to both. First, the market. Coinbase is well-capitalized, has diversified revenue streams, and is well-positioned to weather any storm. Crypto is also on the verge of the next wave of adoption, with stablecoins, prediction markets, tokenization, and more taking off. However, our business is still volatile from quarter to quarter. While we've managed through that cyclicality many times before and come out stronger on the other side, we’re currently in a down market and need to adjust our cost structure now so that we emerge from this period leaner, faster, and more efficient for our next phase of growth. Second, AI is changing how we work. Over the past year, I’ve watched engineers use AI to ship in days what used to take a team weeks. Non-technical teams are now shipping production code and many of our workflows are being automated. The pace of what's possible with a small, focused team has changed dramatically, and it's accelerating every day. All of this has led us to an inflection point, not just for Coinbase, but for every company. The biggest risk now is not taking action. We are adjusting early and deliberately to rebuild Coinbase to be lean, fast, and AI-native. We need to return to the speed and focus of our startup founding, with AI at our core. What this means To get there, we are not just reducing headcount and cutting costs, we’re fundamentally changing how we operate: rebuilding Coinbase as an intelligence, with humans around the edge aligning it. What does this mean in practice? - Fewer layers, faster decisions: We are flattening our org structure to 5 layers max below CEO/COO. Layers slow things down and create coordination tax. The future is small, high context teams that can move quickly. Leaders will own much more, with as many as 15+ direct reports. Fewer layers also means a leaner cost structure that is built to perform through all market cycles. - No pure managers: Every leader at Coinbase must also be a strong and active individual contributor. Managers should be like player-coaches, getting their hands dirty alongside their teams. - AI-native pods: We’ll be concentrating around AI-native talent who can manage fleets of agents to drive outsized impact. We’ll also be experimenting with reduced pod sizes, including “one person teams” with engineers, designers, and product managers all in one role. In short: AI is bringing a profound shift in how companies operate, and we’re reshaping Coinbase to lead in this new era. This is a new way of working, and we need to leverage AI across every facet of our jobs. To those who are affected I know there are real people behind these decisions — talented colleagues who have poured themselves into this company and our mission. To those of you who will be leaving: thank you. You’ve helped build Coinbase into what it is today, and I am sincerely grateful for everything you've done. All impacted team members will receive an email to their personal account in the next hour with more information, and an invitation to meet with an HRBP and a senior leader in your organization. Coinbase system access has been removed today. I know this feels sudden and harsh, but it is the only responsible choice given our duty to protect customer information. To those affected, we will be providing a comprehensive package to support you through this transition. US employees will receive a minimum of 16 weeks base pay (plus 2 weeks per year worked), their next equity vest, and 6 months of COBRA. Employees on a work visa will get extra transition support. Those outside of the US will receive similar support, based on local factors and subject to any consultation requirements. Coinbase prides itself on talent density. Our employees are among the most talented people in the world, and I have no doubt that your skills and experience will be highly sought after as you pursue your next chapters. How we move forward To the team that is staying, I know this is a difficult day. We’re saying goodbye to colleagues and friends you've been in the trenches with. But here’s what I want you to know as we move forward together: Over the past 13 years, we have weathered four crypto winters, gone public, and built the most trusted platform in our industry. We’ve made it this far by making hard decisions and by always staying focused on our mission. This time will be no different – nothing has changed about the long term outlook of our company or industry. And most importantly, our mission has never been more important for the world. Increasing economic freedom requires a new financial system, and we’re building it. The Coinbase that emerges from this will be more capable than ever to achieve our mission. Brian

English
1
0
2
154
Butkus
Butkus@ButkusD_·
Pengu opening in Consensus Miami
Butkus tweet media
Indonesia
0
0
1
91
Butkus
Butkus@ButkusD_·
You're as fast as your LLM
English
0
0
2
76
Butkus retweetledi
Abdel
Abdel@rockkdev·
New Robinhood phishing chain that's kinda beautiful: 1. Attacker creates an RH account using the Gmail dot trick of your email (same inbox, different address) 2. Sets device name to HTML 3. RH's "unrecognized activity" email renders the device name unsanitized (html injection) The result is a real email from noreply@robinhood.com, DKIM pass, SPF pass, DMARC pass, with a phishing CTA Just because it's real, doesn't mean it's safe... $HOOD
Abdel tweet mediaAbdel tweet mediaAbdel tweet media
English
181
366
3.8K
3M
Butkus retweetledi
curb
curb@CryptoCurb·
"so you staked your ETH on the Ethereum blockchain to earn yield?" "yes, Dave" "except you didn't want your capital to be locked up so you actually staked it with a liquid staking protocol called Lido?" "that's correct, Dave" "and Lido gave you a liquid staking receipt token called stETH in return?" "yes, Dave" "and then you didn't think that was enough, so you juiced the yield even further by depositing your stETH receipt tokens into a restaking protocol called Eigenlayer?" "you are correct, Dave" "and now you didn't want to lock up your capital, so you actually restaked with a liquid restaking protocol called KelpDAO who provided you with a liquid restaking receipt token called rsETH?" "you got it, Dave" "and then that was surely not enough juice, so you then deposited your rsETH tokens into a lending protocol called AAVE so that you could open a leveraged looping position that borrows ETH against the rsETH collateral and restakes the ETH into rsETH which is then deposited as collateral, except it turns out rsETH used a cross-chain bridge called LayerZero whose security is held together by a 1/1 toothpick, which was obviously hacked by north koreans causing rsETH to become undercollateralized and now these looping positions are stuck and unprofitable, and everyone is pointing fingers at each other, and also DeFi is a very serious industry" "you are 100% correct, dave" jfc.
curb tweet media
English
405
1.1K
8.2K
745.6K
Butkus retweetledi
Erik Voorhees
Erik Voorhees@ErikVoorhees·
In crypto and defi (ie in honest markets), when a component fails, those closest to the component—whether wildly negligent or innocent victim—suffer the loss, and are burdened with that responsibility. Unequal, but proper. In tradfi and banking (ie in coercively manipulated markets), when a component fails, the entire society is forced under the burden of its resolution. Costs are socialized. Equal, but improper. The former, with time, becomes self-correcting, self-improving, and crucially, retains vitality. The latter, regardless of time, becomes stagnant and soulless, and here everyone can wallow in an equivalent grey. Any man of agency should prefer the former, taking care over that to which he is proximate. It is from this that the virtue of markets emerges.
English
134
287
1.7K
216.3K
Butkus retweetledi
Arbitrum
Arbitrum@arbitrum·
The Arbitrum Security Council has taken emergency action to freeze the 30,766 ETH being held in the address on Arbitrum One that is connected to the KelpDAO exploit. The Security Council acted with input from law enforcement as to the exploiter’s identity, and, at all times, weighed its commitment to the security and integrity of the Arbitrum community without impacting any Arbitrum users or applications. After significant technical diligence and deliberation, the Security Council identified and executed a technical approach to move funds to safety without affecting any other chain state or Arbitrum users. As of April 20 11:26pm ET the funds have been successfully transferred to an intermediary frozen wallet. They are no longer accessible to the address that originally held the funds, and can only be moved by further action by Arbitrum governance, which will be coordinated with relevant parties.
English
1.8K
1K
7.1K
5.4M
Butkus retweetledi
Andy
Andy@andyyy·
Wow, KelpDAO comes out and says: > 2 of LayerZero’s RPCs were hacked > it was LayerZero internal compromise that led to the exploit > they took fast action to prevent another $75m vulnerability > the 1/1 DVN was the suggested setup from LayerZero & even after they asked further about it during the transition to L2s, it was kept the same > blames LZ for the setup My goodness. Absolutely no one taking any responsibility and no real detail on the loss socialization for Aave users still. I think we are all underestimating how long the WETH & stablecoin pools may be frozen.
Kelp@KelpDAO

x.com/i/article/2046…

English
46
45
506
69.8K
Butkus retweetledi
BuBBliK
BuBBliK@k1rallik·
VERCEL GOT HACKED ShinyHunters - the group behind the Ticketmaster breach - is selling Vercel's internal database for $2M on BreachForums here's why every developer should care: - they have NPM tokens and GitHub tokens - Vercel owns Next.js - 6 million weekly downloads - one malicious push = global supply chain attack - Vercel confirmed the breach today, April 19 - they literally DMed the hackers on Telegram asking them to stop rotate your env variables RIGHT NOW
BuBBliK tweet mediaBuBBliK tweet media
Vercel@vercel

We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems, impacting a limited subset of customers. Please see our security bulletin: vercel.com/kb/bulletin/ve…

English
288
1.7K
10.2K
2.4M
Butkus
Butkus@ButkusD_·
1 hack a day the whole month of April
Jeremy@Jeremybtc

Kelp DAO appears to have been exploited for $293 MILLION in the last hour, making it the biggest DeFi hack of 2026. And it's far from being the only one this month. Over $600M stolen from DeFi in the last 2 weeks across over 10 different protocols, and AI is only making it easier for hackers. > Kelp DAO: attacker exploited the LayerZero bridge to drain 116,500 rsETH ($293M), then used it as collateral on Aave to borrow ETH, leaving Aave with bad debt as $AAVE dumps. > Drift Protocol: $285M drained by North Korean hackers using AI powered social engineering, they spent months building trust with insiders before executing in 12 minutes. > Rhea Finance: $18M stolen through fake token pools that tricked the protocol's oracle into approving withdrawals. > Grinex: $15M stolen, sanctioned Russian exchange suspended all operations and blamed "Western intelligence". > Hyperbridge: attacker minted 1 billion fake bridged DOT with a notional value over $1B, but only extracted about $237K because liquidity was thin. > BSC TMM pool: $1.67M drained through reserve manipulation. > Aethir: $423K lost in an access control exploit on their GPU network. > Dango: $410K stolen through a smart contract bug in their bridge aggregator. > Silo Finance: $392K gone from a misconfigured oracle. > CoW Swap: frontend hijacked through DNS attack, site redirected to a phishing page. > Zerion: hit by North Korean social engineering, credentials stolen. The attack surface is expanding faster than the defenses. This is only going to get worse.

English
0
0
1
288
Butkus retweetledi
Creator
Creator@creatorfun·
10k+ signed up while in stealth. No marketing. No posts. Just word of mouth. This is our first post and the start of a new chapter.
Creator tweet media
English
8
6
107
7.6K
Butkus retweetledi
Creator
Creator@creatorfun·
$CRX TGE is happening in 24 hours. Creator's Official Platform Currency. Available Everywhere. creator.fun
English
153
54
629
77.9K
Butkus retweetledi
Creator
Creator@creatorfun·
After 8 months of development. Creator is launching. Sign up on the waitlist to reserve your membership. Claim your username -> Deposit Sol -> Trade tokens. Trading goes live when the countdown hits zero. The iPhone moment for Solana is Here. creator.fun
English
268
86
827
114.2K
Butkus retweetledi
Coin Bureau
Coin Bureau@coinbureau·
🚨 FAKE LEDGER APP ON APPLE STORE WIPES OUT ENTIRE BTC HOLDINGS A fake Ledger Live app on Apple’s Mac App Store just wiped out a user’s life savings. American musician Garrett Dutton lost 5.92 $BTC ($424K) after downloading what looked like the official app and entering his 24-word seed phrase. On-chain investigator ZachXBT traced the stolen Bitcoin exchange deposit addresses and publicly questioned how the app made it through Apple’s gatekeeping. No comment yet from Apple.
Coin Bureau tweet mediaCoin Bureau tweet media
English
491
1.1K
4.4K
780.1K
Butkus
Butkus@ButkusD_·
@slashapp What does it do different or will do different than other stablecoin apps?
English
0
0
0
138
Slash
Slash@slashapp·
A higher standard in business finance. Now live on mobile.
English
49
17
391
136.4K
Butkus retweetledi
Ejaaz
Ejaaz@cryptopunk7213·
this is HUGE... anthropic just launched AWS for ai agents. it's openclaw on steroids and they make money while your agents think! the idea is genius: Claude Managed Agents automates the 6-12 months of engineering required to deploy apps, the numbers speak for themselves: > app development: $50,000 --> $100 (500x reduction) > time-to-build: 6 months --> under 1 hr Rakuten used this and shipped a new product in just 5 DAYS to 1 BILLION+ users 🤯 crazy part: anthropic now makes money while your agents THINK Sentry processes 1 million+ bug reports. if each agent session is 10 minutes that's 166,000 session-hours... at $0.08 that's $13,000 per run in session fees alone lmao anthropic built the best coding agent, banned openclaw 3rd-party agents... then released their own and will print money on this fucking ruthless
Claude@claudeai

Introducing Claude Managed Agents: everything you need to build and deploy agents at scale. It pairs an agent harness tuned for performance with production infrastructure, so you can go from prototype to launch in days. Now in public beta on the Claude Platform.

English
20
25
249
39.7K