ZeroDayDev

227 posts

ZeroDayDev banner
ZeroDayDev

ZeroDayDev

@ZeroDayDevApp

Mobile app for hands-on Exploit, Rust, Solidity, DeFi & security challenges. Stored locally. No data. No AI. iOS and Android devices. Threema: NP4FDTDH

Katılım Mart 2026
320 Takip Edilen90 Takipçiler
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
@TakSec @0xSabir What was the testing method? Were there benchmarks, or just personal playground testing?
English
1
0
0
33
Mike Takahashi
Mike Takahashi@TakSec·
5 Ways to Obfuscate Prompt Injection + Jailbreaks In my experience, these have the highest % success rates: 1. camelCase Turns natural language into token soup that can bypass filtering. 2. Hex encoding Simple, old-school, hides dangerous keywords from pattern matching. 3. Negative Squared Unicode Unicode variants like 🅰 🅱 🅲 can alter tokenization while still being human-readable. 4. Reverse Text Reversing prompts can confuse detection logic while remaining recoverable by models. 5. Braille uncommon Unicode range with weak moderation coverage. One of the best tools for experimenting with these transformations is: P4RS3LT0NGV by @elder_plinius (link in comments) It supports ciphers, encoding, Elvish, NATO Alphabet, and much more. Prompt injections do not always look like prompts 👾
Mike Takahashi tweet media
English
3
10
38
1.7K
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
SlowMist traces the Black May supply chain attacks back to a GitHub breach. After TeamPCP open-sourced Shai-Hulud, attackers hijacked high-trust release channels, harvested CI credentials, and spread laterally across ecosystems. The full postmortem shows how one compromised upstream dependency can cascade into coordinated multi-chain exploits. slowmist.medium.com/black-may-seri…
English
0
0
0
68
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
Everyone in NYC is opening a Pilates studio. Pilates are everywhere. NYC has SLT, Solidcore, JETSET, New York Pilates, Club Pilates. This is not wellness anymore, this is a leveraged bubble.
English
0
0
0
22
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
Ethereum L2 Zero Network is shutting down, redirecting resources to Zerion's wallet and API business. Another data point in the ongoing L2 consolidation wave as teams reassess standalone chain economics versus platform-level infrastructure.
English
0
0
0
15
Harpreet
Harpreet@harpreetchatha_·
ClickUp unleashed AI on their blog & this is how it went. The dip keeps dipping.
Harpreet tweet media
Zeb Evans@DJ_CURFEW

Today we reduced headcount by 22%. The business is the strongest it's ever been. So I think it's important to be direct about what I'm seeing and why. First, I made this decision and I own it. I did it because the way to operate at the highest level of productivity is changing, and to win the future, ClickUp needs to change with it. Second, this wasn't about cutting costs. Most savings from this change will flow directly back into the people who stay. We'll be introducing million-dollar salary bands. If you create outsized impact using AI, you'll be paid outside of traditional bands. Most importantly, I have the deepest gratitude for those affected. We're doing this from a position of strength specifically so we can take care of people properly. Everyone affected receives a package aimed at honoring their contributions and easing the transition. I only see two options: wait for this to play out gradually in the market or be honest about what I'm seeing and act proactively. THE 100X ORGANIZATION The primary change is that we're restructuring around what I call 100x org. The goal is 100x output. The roles required to build at the highest level are fundamentally different than they were a year ago. Incremental improvements to existing systems won't get us there. We need new ones. That means creating enough disruption to rebuild rather than iterate on what's already broken. The common narrative is that AI makes everyone more productive. It doesn't. Many of the workflows of today, if left unchanged, create bottlenecks in AI systems. These roles will evolve. But waiting for that to happen naturally means falling behind now. The 100x org is actually heavily dependent on people - infinitely more than today. This is only possible with 10x people that have embraced and adopted new ways of working. THE BUILDERS, AGENT MANAGERS, AND FRONT-LINERS — THE BUILDERS: 10X ENGINEERS I don't think most companies have internalized what's actually happening with AI in engineering. The common narrative is that AI makes all engineers more productive. That may be true in isolation, but at an organization level - that is the farthest thing from reality. Here's what we've validated recently at ClickUp: the great engineers, the ones who can orchestrate, architect, and review, are becoming 100x engineers. They're not writing code. They're directing agents that write code. The skill is judgment. AI makes the best engineers wildly more productive, and everyone else using AI slows these engineers down. Think about it - the bottlenecks are (1) orchestration - telling AI what to do, and (2) reviewing - what AI did. Everything is leapfrogged and no longer needed. So who do you want orchestrating and reviewing code? And how do you want your best engineers to spend their time? If your best engineers are spending time reviewing other people's code, then this is inherently an inefficient bottleneck. These engineers can review their agent's code much faster than reviewing human code. The new world is about enabling your 10x engineers to become 100x. The wrong strategy is to push every engineer to use infinite tokens. Companies doing this are celebrating 500% more pull requests. But customer outcomes don't match the volume of code being generated. I call this the great reckoning of AI coding, and every company will face this soon if not already. More code is just another bottleneck to the best engineers, and ultimately to your company's impact as well. — THE BUILDERS: 10X PRODUCT MANAGERS Product management and design roles are merging. Designers that have customer focus, become more like product managers. And product managers that have intuition for UX become more like designers. The bottleneck of user research is gone. It takes us just one mention of an agent to kickoff research and analyze results. The bottleneck of product <> design iteration is also gone. The product builder iterates on their own, along with agents and skills that ensure alignment with quality and strategy. Also controversial today - I believe that the wrong strategy is to have your PMs shipping code - that just introduces another bottleneck that the best engineers will waste their time on. To be clear, PMs should be coding but they should do this in a playground to iterate, validate, and scope. That code should not go to production. Everything outside of managing systems, orchestrating AI, and reviewing output becomes a bottleneck. That's why the other roles that are critical along with these are the systems managers (to reduce bottlenecks) along with a bottleneck you can't replace - customer meeting time. — THE SYSTEM MANAGERS Ironically, the people that automate their jobs with AI will always have a job. They become owners of the AI systems - agent managers. We have many examples of these people at ClickUp. The underlying systems in which we operate are absolutely critical to get right. I think most companies are delusional to think they can iterate on existing systems and compete in this new world. You must create enough disruption so that old systems are deprecated entirely. If there's any definition for 'AI native' that's what it is. — THE FRONT-LINERS In a world that will become saturated with AI communication, the human touch will matter more than anything to customers. This is a bottleneck that you shouldn't replace - even when agents are high enough quality to do video meetings. One-on-one meeting time with customers is something that shouldn't be automated. The systems around the meetings should be - so that front-liners spend nearly 100% of their time with customers. REWARDING 100X IMPACT In a world where companies are able to do so much more with less, where does that excess money go? In our case, much of the savings in this new operating model will flow directly back to those that enabled it. We must reward people that create productivity accordingly. This aligns incentives on both sides. Plus, in a world where your best people create 100x impact, you can't afford to lose them. You should aim to retain these employees for decades. The context they have and their ability to efficiently orchestrate and review will be nearly impossible to replace. Compensation bands of today should be thrown out the door. We're introducing $1 million cash/year salary bands with a path available to nearly everyone in the company if they produce 100x impact by creating or managing AI systems. THE FUTURE Nearly every company will make changes like these. The ones that do it proactively will define what comes next. The future is not fewer people. It's different work, new roles, and better rewards for those who embrace it. We're already seeing entirely new roles emerge, like Agent Managers, that didn't exist a year ago. ClickUp is positioning to lead this shift, not just internally, but for our customers too. I've never been more certain about where we're headed.

English
37
24
638
153.1K
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
If you don't see responses like this, are you even in Cybersecurity?
ZeroDayDev tweet media
English
0
0
0
12
ThePrimeagen
ThePrimeagen@ThePrimeagen·
100x eng 3.65 work days = 1 year traditional work
ThePrimeagen tweet media
Zeb Evans@DJ_CURFEW

Today we reduced headcount by 22%. The business is the strongest it's ever been. So I think it's important to be direct about what I'm seeing and why. First, I made this decision and I own it. I did it because the way to operate at the highest level of productivity is changing, and to win the future, ClickUp needs to change with it. Second, this wasn't about cutting costs. Most savings from this change will flow directly back into the people who stay. We'll be introducing million-dollar salary bands. If you create outsized impact using AI, you'll be paid outside of traditional bands. Most importantly, I have the deepest gratitude for those affected. We're doing this from a position of strength specifically so we can take care of people properly. Everyone affected receives a package aimed at honoring their contributions and easing the transition. I only see two options: wait for this to play out gradually in the market or be honest about what I'm seeing and act proactively. THE 100X ORGANIZATION The primary change is that we're restructuring around what I call 100x org. The goal is 100x output. The roles required to build at the highest level are fundamentally different than they were a year ago. Incremental improvements to existing systems won't get us there. We need new ones. That means creating enough disruption to rebuild rather than iterate on what's already broken. The common narrative is that AI makes everyone more productive. It doesn't. Many of the workflows of today, if left unchanged, create bottlenecks in AI systems. These roles will evolve. But waiting for that to happen naturally means falling behind now. The 100x org is actually heavily dependent on people - infinitely more than today. This is only possible with 10x people that have embraced and adopted new ways of working. THE BUILDERS, AGENT MANAGERS, AND FRONT-LINERS — THE BUILDERS: 10X ENGINEERS I don't think most companies have internalized what's actually happening with AI in engineering. The common narrative is that AI makes all engineers more productive. That may be true in isolation, but at an organization level - that is the farthest thing from reality. Here's what we've validated recently at ClickUp: the great engineers, the ones who can orchestrate, architect, and review, are becoming 100x engineers. They're not writing code. They're directing agents that write code. The skill is judgment. AI makes the best engineers wildly more productive, and everyone else using AI slows these engineers down. Think about it - the bottlenecks are (1) orchestration - telling AI what to do, and (2) reviewing - what AI did. Everything is leapfrogged and no longer needed. So who do you want orchestrating and reviewing code? And how do you want your best engineers to spend their time? If your best engineers are spending time reviewing other people's code, then this is inherently an inefficient bottleneck. These engineers can review their agent's code much faster than reviewing human code. The new world is about enabling your 10x engineers to become 100x. The wrong strategy is to push every engineer to use infinite tokens. Companies doing this are celebrating 500% more pull requests. But customer outcomes don't match the volume of code being generated. I call this the great reckoning of AI coding, and every company will face this soon if not already. More code is just another bottleneck to the best engineers, and ultimately to your company's impact as well. — THE BUILDERS: 10X PRODUCT MANAGERS Product management and design roles are merging. Designers that have customer focus, become more like product managers. And product managers that have intuition for UX become more like designers. The bottleneck of user research is gone. It takes us just one mention of an agent to kickoff research and analyze results. The bottleneck of product <> design iteration is also gone. The product builder iterates on their own, along with agents and skills that ensure alignment with quality and strategy. Also controversial today - I believe that the wrong strategy is to have your PMs shipping code - that just introduces another bottleneck that the best engineers will waste their time on. To be clear, PMs should be coding but they should do this in a playground to iterate, validate, and scope. That code should not go to production. Everything outside of managing systems, orchestrating AI, and reviewing output becomes a bottleneck. That's why the other roles that are critical along with these are the systems managers (to reduce bottlenecks) along with a bottleneck you can't replace - customer meeting time. — THE SYSTEM MANAGERS Ironically, the people that automate their jobs with AI will always have a job. They become owners of the AI systems - agent managers. We have many examples of these people at ClickUp. The underlying systems in which we operate are absolutely critical to get right. I think most companies are delusional to think they can iterate on existing systems and compete in this new world. You must create enough disruption so that old systems are deprecated entirely. If there's any definition for 'AI native' that's what it is. — THE FRONT-LINERS In a world that will become saturated with AI communication, the human touch will matter more than anything to customers. This is a bottleneck that you shouldn't replace - even when agents are high enough quality to do video meetings. One-on-one meeting time with customers is something that shouldn't be automated. The systems around the meetings should be - so that front-liners spend nearly 100% of their time with customers. REWARDING 100X IMPACT In a world where companies are able to do so much more with less, where does that excess money go? In our case, much of the savings in this new operating model will flow directly back to those that enabled it. We must reward people that create productivity accordingly. This aligns incentives on both sides. Plus, in a world where your best people create 100x impact, you can't afford to lose them. You should aim to retain these employees for decades. The context they have and their ability to efficiently orchestrate and review will be nearly impossible to replace. Compensation bands of today should be thrown out the door. We're introducing $1 million cash/year salary bands with a path available to nearly everyone in the company if they produce 100x impact by creating or managing AI systems. THE FUTURE Nearly every company will make changes like these. The ones that do it proactively will define what comes next. The future is not fewer people. It's different work, new roles, and better rewards for those who embrace it. We're already seeing entirely new roles emerge, like Agent Managers, that didn't exist a year ago. ClickUp is positioning to lead this shift, not just internally, but for our customers too. I've never been more certain about where we're headed.

English
113
68
2.7K
173.6K
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
THORChain lost $10.7M to a malicious node that exploited a GG20 threshold signature flaw to reconstruct a vault's full private key. MPC implementations remain a critical attack surface for cross-chain protocols. If a single node can leak enough key shares to rebuild the master secret, the security model collapses. cointelegraph.com/news/thorchain… #web3security #DeFi
English
0
0
0
27
0xasen
0xasen@asen_sec·
Now that Code4rena is winding down, feels like a good time to snapshot my profile. 18 protocols secured. $66K earned. Top 2 this year. #76 all-time. It was a good run. 🫡
0xasen tweet media
English
10
1
172
5.4K
Okada_Research
Okada_Research@Okada_DeFi0x·
@lowercaseboot What specific L1s do you see outperforming Ethereum's current scaling trajectory, and on what metrics?
English
2
0
1
501
boot
boot@lowercaseboot·
This is honestly cooked. If the core thesis of Ethereum has pivoted into scaling an L1 that is strictly worse than all other L1s then we may as well pack it up. This is happening off the back of DeFi basically becoming a non-starter for investment with extreme vulnerabilities of smart contract risks exposed by AI. Solana also pivoting away from memes/mass crypto lay offs from Tier 1 companies leaves us in a state of "what the hell is happening" here for the foreseeable future. Are we just left with RWAs, stable coins and privacy now? What is even the point of blockchain at this point?
Ignas | DeFi@DefiIgnas

$ETH went from a consensus hold to a contrarian bet in 2-3 years. Some of this was market driven, some was self-inflicted: 1) The EF pushed the L2 scaling roadmap after failing to scale the L1. It doesn't matter whether that came from lack of motivation, skills, or available tech and research at the time. Now the EF is scaling the L1, but even with gas limit increases, Ethereum will never be faster or cheaper than most competitors. And that's okay, because maximizing decentralization and censorship resistance requires tradeoffs. The problem is that market participants are giving it lower valuation multiple than in the past. And it's dead annoying though that full ERC-20 deposits to CEXs still take ~13 minutes (no 1-slot confirmation) and that approve + action still requires two txs across DeFi, despite years of 'account abstraction' upgrades. Watching EF members leave one by one isn't helping the sentiment either. 2) Ethereum can be slower and pricier than other chains, but the market now wants revenue to back valuations. $HYPE is generating 2x-3x the fees of Ethereum despite trading at ~5% of its market cap. Even more humiliating is $TRX, up 5x while ETH is down 40% over 5 years. Ethereans mocked TRX as a copy/paste vaporware scam, but Tron dominates retail stablecoin payments... The sector EF pushed for years and failed to capture, because Ethereum was simply too expensive and slow for adoption. Ouch. I believe Ethereum had it good with the ultrasound money narrative. Quickly deflating supply is the sexiest narrative that even BTC bulls would love. But it needs a massive pick up in txs numbers to generate the fees that burn ETH. And Glamsterdam just cut fees by ~78% (gas limit will go from 60M to 200M per block), which means transactions need to pump by 4.6x just to keep the burn flat. If onchain activity doesn't pick up to compensate, Ethereum's revenue drops further. Sure, Ethereum still dominates TVL but the ratio dropped from 96% in Jan 2021 to 52% today. And even with that, TVL monetization mostly flows to protocols and stablecoin issuers, not the L1. L2s aren't taxes either. ---- So what's the bullish case for Ethereum here? EF has partly got the message. The cypherpunk manifesto is personally very appealing to me, with its mission to promote privacy, self-sovereignty, and independence in an increasingly unstable world. I hope that recent departures from the EF is simply a realignment period. Pivoting to L1 scaling is the also right move, but UX needs to drastically improve, especially as more corpo-slop chains and institutions enter the market. EF is taking the quantum threat seriously, unlike the mixed reaction from Bitcoin core devs. But that all takes time, and if the market's demand for revenue doesn't subside, Ethereum simply needs to bring more users and transactions to the chain. The real ultrasound money narrative, while being the most decentralized chain, would do the trick. But we're far from ETH being deflationary again.

English
24
1
73
22.2K
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
It’s time to bring back privacy and decentralization as the primary focus. Crypto drifted so far into speculation people forgot the original goal was building systems cypherpunks would actually want to use.
Laura Shin@laurashin

I think Ethereum’s original sin was not considering tokenomics with every move it made from Dencun on. The ultrasound money thesis was a good one and with Dencun (or the L2 roadmap generally) they should have stopped to say that this was going to hurt the ultrasound money thesis and consider how to preserve it. Most people, like David, don’t want to believe in something that isn’t also putting up points on the scoreboard. When the main offering becomes ideology/communism and money/tokenomics/capitalism are overlooked, the peasants are going to revolt — as they’ve been doing for two years now. Look at the public reaction to Tomasz: broad praise, a sense of hope, excitement, the price pumping … only for him to be gone a year later with the new ED being someone who cannot even be found online except for a Wayback Machine url with his name that has some really questionable statements on it (and I should say the EF denied that this website, which was taken down a few weeks after he was appointed to the board, is his). They’re going to be really mad at me for even mentioning that but in the place of a void, these are the kinds of things people will glom onto. Then there was the manifesto — I mean, mandate, which they backtracked on forcing people to sign. (Btw, this is the second bit of news that seems to relate to Bastian. And now the third would be all these departures. There’s nothing else for us to point at and say about him — when I searched for his name on Google News just now only 14 links came up. He seems to be some kind of invisible hand behind the scenes.) I don’t think ideology and capitalism/tokenomics/number go up are mutually exclusive. I think you can have CROPS values and also consider how each step of the roadmap affects the tokenomics and even have teams for BD/ecosystem growth. It feels like the EF doesn’t realize the moment that crypto is in. The competition is only just starting. We are in the phase of real world adoption. The Ethereum Foundation’s CROPS principles are great ones, and they are worth fighting for. But the EF seems to want to sit back on its laurels and act above it all when all its competitors are all getting down and dirty on the field to gain market share. Maybe it is the right approach. I don’t know. I’m just saying that more competitive people won’t align with it. And so they will leave … and community members will as well. I personally don’t think it’s good for Ethereum if its most competitive people depart. Ethereum’s unwillingness to stop the brain drain will only benefit its competitors — or spawn new ones. Giving a shit about price and tokenomics and BD doesn’t hurt CROPS. It just helps ensure that these principles get spread to more people and that other chains that don’t have these principles don’t get a leg up. All the commentary may be pointless. It seems Vitalik tried what everyone wanted and it didn’t align with his vision, so he brought in a new person he felt more comfortable with. It makes me sad to see people become so disaffected with Ethereum, but maybe this is V’s Brian Armstrong/no politics at Coinbase moment where he lays down what the EF will work on and asks everyone else to leave. That was the right move for Coinbase, but I view them as fundamentally different issues. We’ll see whether Ethereum maintains its lead with a foundation that isn’t willing to fight for it.

English
0
0
0
17
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
With AI, every person will be able to one shot their own L1 in the future. It will be an entirely different landscape. “Make an L1 with encrypted mempools, optimistic parallel execution, threshold cryptography, tail-fork resistance, sub-second finality, and no trusted hardware make no mistakes”
English
0
0
0
124
Laura Shin
Laura Shin@laurashin·
One more thought on this. Vitalik was a child when the early Internet was being formed, and I wonder if part of his distain for trying to be competitive is that he may not remember all the companies in the early days of the Internet that had comfortable leads and eventually went to zero. Maybe he has a false sense of security based on how long Ethereum has been dominant. But most people in the space know that competition is only just starting. Maybe he knows it too and thinks he has a winning strategy. He is very smart, smarter than most of us, so maybe he is just more visionary than the rest of us. However, being good at research and competing on business are two different skill sets. Hopefully it is just that he’s more visionary than the rest of us, but in the meantime, for those of us who care about Ethereum, it’s going to be very nerve-racking watching how this plays out.
Laura Shin@laurashin

I think Ethereum’s original sin was not considering tokenomics with every move it made from Dencun on. The ultrasound money thesis was a good one and with Dencun (or the L2 roadmap generally) they should have stopped to say that this was going to hurt the ultrasound money thesis and consider how to preserve it. Most people, like David, don’t want to believe in something that isn’t also putting up points on the scoreboard. When the main offering becomes ideology/communism and money/tokenomics/capitalism are overlooked, the peasants are going to revolt — as they’ve been doing for two years now. Look at the public reaction to Tomasz: broad praise, a sense of hope, excitement, the price pumping … only for him to be gone a year later with the new ED being someone who cannot even be found online except for a Wayback Machine url with his name that has some really questionable statements on it (and I should say the EF denied that this website, which was taken down a few weeks after he was appointed to the board, is his). They’re going to be really mad at me for even mentioning that but in the place of a void, these are the kinds of things people will glom onto. Then there was the manifesto — I mean, mandate, which they backtracked on forcing people to sign. (Btw, this is the second bit of news that seems to relate to Bastian. And now the third would be all these departures. There’s nothing else for us to point at and say about him — when I searched for his name on Google News just now only 14 links came up. He seems to be some kind of invisible hand behind the scenes.) I don’t think ideology and capitalism/tokenomics/number go up are mutually exclusive. I think you can have CROPS values and also consider how each step of the roadmap affects the tokenomics and even have teams for BD/ecosystem growth. It feels like the EF doesn’t realize the moment that crypto is in. The competition is only just starting. We are in the phase of real world adoption. The Ethereum Foundation’s CROPS principles are great ones, and they are worth fighting for. But the EF seems to want to sit back on its laurels and act above it all when all its competitors are all getting down and dirty on the field to gain market share. Maybe it is the right approach. I don’t know. I’m just saying that more competitive people won’t align with it. And so they will leave … and community members will as well. I personally don’t think it’s good for Ethereum if its most competitive people depart. Ethereum’s unwillingness to stop the brain drain will only benefit its competitors — or spawn new ones. Giving a shit about price and tokenomics and BD doesn’t hurt CROPS. It just helps ensure that these principles get spread to more people and that other chains that don’t have these principles don’t get a leg up. All the commentary may be pointless. It seems Vitalik tried what everyone wanted and it didn’t align with his vision, so he brought in a new person he felt more comfortable with. It makes me sad to see people become so disaffected with Ethereum, but maybe this is V’s Brian Armstrong/no politics at Coinbase moment where he lays down what the EF will work on and asks everyone else to leave. That was the right move for Coinbase, but I view them as fundamentally different issues. We’ll see whether Ethereum maintains its lead with a foundation that isn’t willing to fight for it.

English
31
13
201
41.8K
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
/goal make Web3 secure.
English
0
0
0
13
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
Privacy protocols are easier to understand when you can actually use them. We forked Tornado Cash onto Sepolia so zerodaydev users can learn ZK proofs by experimenting on testnet. sepolia.etherscan.io/address/0xf64f…
English
0
0
2
81
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
Modern crypto drainers don't exploit code vulnerabilities. They exploit approval flows. Flare's teardown of the Lucifer DaaS platform shows how phishing kits scale wallet theft through automated transaction crafting and user-facing deception. The attack surface isn't the contract - it's the signature prompt. bleepingcomputer.com/news/security/…
English
0
0
0
34
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
Syndicate Labs is winding down after five years, citing a shrinking rollup market now dominated by Arbitrum and Base (68% combined share per L2Beat). The closure signals consolidation pressure on infra startups as the EVM L2 landscape matures around a handful of winners.
English
0
0
1
28
Everclear
Everclear@EverclearOrg·
Today we’re sharing difficult news: we have made the decision to wind down Everclear (Foundation / Labs and building the product).
English
51
26
303
84K
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
Map Protocol lost 96% of its value after an attacker tricked the Butter Network cross-chain bridge into minting a quadrillion more MAPO tokens than the legitimate supply. Cross-chain bridges remain the highest-risk surface in DeFi. Mint logic that doesn't verify supply caps is a guaranteed exploit vector. #web3security #DeFi cointelegraph.com/news/map-proto…
English
0
0
0
18
ZeroDayDev
ZeroDayDev@ZeroDayDevApp·
GitHub breach via malicious VS Code extension: ~3,800 internal repos accessed after employee install. Supply-chain risk now extends to developer tooling itself - IDE extensions can carry full repo access, session tokens, and commit signing keys. Vet every extension like production code. bleepingcomputer.com/news/security/…
English
0
0
1
33