Chabahk

@BlockSecTeam thanks for the thorough writeup! did you review past audits? i've been browsing through them, and @trailofbits seems to have flagged a very closely related issue, but the report does not specify whether it was fixed or not (cc @Montyly)

@wescrook @P3b7_ Isn't a protection to this attack

@P3b7_ Hardware wallets proving why they’re non negotiable

🚨 There’s a large-scale supply chain attack in progress: the NPM account of a reputable developer has been compromised. The affected packages have already been downloaded over 1 billion times, meaning the entire JavaScript ecosystem may be at risk. The malicious payload works by silently swapping crypto addresses on the fly to steal funds. If you use a hardware wallet, pay attention to every transaction before signing and you're safe. If you don’t use a hardware wallet, refrain from making any on-chain transactions for now. It’s still unclear whether the attacker is also stealing seeds from software wallets directly at this stage. Excellent report here: jdstaerk.substack.com/p/we-just-foun…

@NicoSheep @MichaelYoun Non l'angle est parfait justement

@MichaelYoun J’y ai toujours cru mais l’angle est trompeur au finale il ne touche qu’une seule fois

C’est marrant quand c’est Messi (contre le France) en finale de la CdM, là la VAR dit rien ?! Bref… donnons, dès le mois de septembre, la Champions League directement au Real Madrid (ou plutôt au Real VARdrid), on perdra moins de temps devant la télé. 😝 #ATMRMA

@Airdrop_Adv @krishnaeth How much point or volume did you have for information?

@krishnaeth It’s not about the time. I traded heavily using the project.

Hyperliquid $HYPE Airdrop $100K Done!!! 🪂✅ Not gonna lie, this is my first-ever $100K airdrop, and it feels unreal! It’s proof that even the smallest steps can lead to something incredible. I started this airdrop adventure with just $200 I earned from freelancing, never imagining it could grow into this. This just goes to show—stay consistent, keep chasing opportunities, and believe in what’s possible. Your moment to shine could be closer than you think!

🚨 IT IS DONE!! 🚨 @paraswap just burned 10% of its total supply! 200M $PSP 🔥 see txn: etherscan.io/tx/0x3bd9d606f… 🚀🚀🚀

@PolStaking @opensea Listen to this twitter space to learn more! twitter.com/i/spaces/1Mnxn…

Discover ✨PolStaking Artefacts ✨ Tired of getting the same APR? We can give it a ⚡️boost⚡️! By enabling our Artefacts NFTs on polstaking.io, you can get from 5% to 20% increase on your usual rewards! 📈 Available until Sunday on @Opensea: opensea.io/collection/pol…

I created a VSCode extension to simulate your local contracts as if they were already deployed on-chain It also allows you to create "Solidity notebooks". This is useful when you want to throw together some Solidity code and test what it would do It's in beta. Details below

If you want to use a French product go for it! But don’t spread misinfo in the process. Signal is independently audited, open source, and our protocol has been tested for >10yrs. We are serious about responsible disclosure and we prioritize all reports to security@signal.org

I spent the last month building llamafile which is the fattest executable file format ever. It lets you turn LLM weights into runnable llama.cpp binaries using cosmo libc. github.com/mozilla-Ocho/l… Blog post: hacks.mozilla.org/2023/11/introd…

I’ll be serious for a second and take a crack at this. This is how I would describe Ethereum alignment and a lot of people say I’m a trusted source on these matters and then they’re like “omg Gwart launch an L2” and I’m like no I can’t, the mechanism design world needs me, it

@rioujeanpierre @Thinker_View Vous oubliez de préciser qu'il faudra toujours de l'eau pour la majeure partie des réacteurs puisque celui-ci vient en complément des actuels car il utilise leurs déchets

Première mondiale pour le petit réacteur nucléaire de la start-up française Naarea. Le Graal à portée de main. Même plus besoin de cours d'eau à proximité. Les arguments d'antinucléaires vont manquer, à part "j'y crois pas !" sciencesetavenir.fr/nature-environ…

@CupOJoseph C1

Spot the checkmate

A brief thread. 'as const' has more uses than you might think.

Did you know that by changing the URL from ".io" to ".deth.net" on Etherscan, you get a VSCode workspace with the contract code preloaded?

Minting of the 1st card of the collection #Dimension21 tomorrow ✨💎 This animated 🎶 card by @presidentmutant only has a 21 supply, so get ready 👀

In "Uptober" edition of the Paraswap Dao Recap, 📈 💰 80.3 ETH was distributed to about 3.7k PSP Stakers and 618K sePSP1 was paid as gas refunds. 🤝 Dexguru, Defi Saver and 4 others Integrated Paraswap. Paraswap launches ios beta testing. 🧵

@paraswap DAO paid contributors program tagged #Paratrooper renewal proposal is live on Snapshot. This proposal determines what becomes of the initiative and the current cohort. snapshot.org/#/paraswap-dao…

A key way you can make your LLM/RAG chatbot more “advanced” over complex data sources is to add a router - dynamically decide which data to query / which parameters to use using LLMs. It’s a key step towards LLM workflow automation. It sounds simple, but there’s some trickiness: ✅ Figuring out the right prompt (pick one choice? Multiple choices?) ✅ Add in structured output parsing ✅ How to integrate with function calling APIs ✅ [For multi-routing] how to combine results @llama_index has out of the box Router modules, but in the spirit of “do it yourself” we have a tutorial showing how you can tackle these challenges with your own Router module! gpt-index.readthedocs.io/en/latest/exam… Our in-house router modules do this and more (retrieval augmentation, callback handling, etc.). For more details check out the guide: gpt-index.readthedocs.io/en/latest/core…

@vxunderground Rootkits and bootkits

Due to the increasing number of sponsors, and monthly donors, we have some money for a giveaway. - The Art of Mac Malware - Rootkits and Bootkits - The Giant Black Book of Computer Viruses Comment which book you'd like to receive! * Winners will be DM'd. If you do not reply in 24 hours you will forfeit your win and a new winner will be selected. * A physical address must be supplied, failure to provide a valid shipping address will result in a forfeiture of your prize. * We will send the book anywhere in the world, as long as the destination country is not sanctioned (sorry North Korea). * Prize winners will be selected September 6th, 2023.