Vitali Gorgut  🥇

@bernd_eth @cosmoslabs_io Amazing! Congratulations, Bernd! 😎💪

Feels good to do my part to help secure @cosmoslabs_io!

@claudedonze @bookingcom Was going to book one today, good to know, thanks! Also never relied on them much

Careful using @bookingcom at the moment. 2 Hotels I’ve booked in the last 2 weeks have lost access to their Booking accounts and lost customer data. Hearing the same from others

@0xAlexHex probably waiting for a bigger fish 😉 cuz it could be a harm for reputation too

I sent private key with 20 usd in ETH to chatgpt a few weeks ago, and it wasn't corrupted yet... Interesting

🚨 Make sure to withdraw funds and revoke approvals on Balancer V2 contracts

Thanks for telling the story — grateful to be on this journey with you 🙌 Excited for the future and all the travels ahead ✈️

@n4nika_ Congrats on a fantastic year! You've been killing it, and it's clear how much hard work you've put in. Keep succeeding!🚀

It feels crazy to say but today, exactly one year ago, I went into web3 security fulltime. The year since then has been one of the most eventful and overall best ones of my life. I worked my ass off, traveled to new places, met amazing people and couldn't be happier with how far I got. In proper 1-year recap fashion, a small list of achievements: * Won 2 contests * 10 top10 placements * Worked with the best client imaginable @daosdotfun * Became ZR @zenith256 * Did private audits with @sherlockdefi * $ amounts earned I couldn't have dreamt of before Big shoutout to my good friend @J4X_Security for being the reason I got into this field in the first place and also to all the wonderful people I met along the way: @KrisApost1, @dethSCA, @MartinMarchev, @nmirchev8, @zigtur, @lovethewired, @GalloDaSballo, @MarioPoneder, @bernd_eth, @0xSorryNotSorry, @AlexGorgut, @gorgut_, @p_misirov, @xb0g0, @windhustler, @deadrosesxyz, @xmxanuel (and many more)

Be aware of the @suidefai $aiSUI IDO happening on @polkastarter today. The team has reportedly banned multiple people who asked them questions about the project and called these questions FUD. Historical data shows similar patterns in 78% of identified rug pulls.

@cleanunicorn Interesting. I am wondering how exactly this Private Key got into Claude's suggestions.

8/8 This scam highlights the importance of examining not just external transactions, but also the "Advanced mode" for INTERNAL transactions. Tools that let you trace the full execution path are essential. Spread this message for a secure crypto space!

7/8 If you replicate this on Remix or test it locally, it might seem like you can win. That's because you're likely not replicating the hidden New call made via an external contract via delegatecall to another contract. The attacker's external contract is the key to the deception. The contract ensures that the caller of Try function is actually a user and not another contract: require(msg.sender == tx.origin).

🚨 If you are on @etherscan, beware of a "Game" scam contract circulating on the #Ethereum mainnet targeting those who know Solidity but don't look closely enough. You CANNOT win the advertised 50 ETH. But you will lose your ETH. 1/8 Here's a breakdown: #Solidity #SmartContract #SecurityAudit

The same malicious contract is being deployed and verified on Etherscan 24/7.

Can you identify what's wrong with this smart contract? The code might seem legit, but it is a trap as there is already one victim who thought he might win 50 ETH. etherscan.io/address/0xC6B7… - do not interact with it, it's malicious.