Nicolas Christin

New research alert 🚨 from my group, “Blockchain Address Poisoning” (Tsuchiya et al.), to appear at @USENIXSecurity 2025 (arxiv.org/abs/2501.16681)! As a follow-up, we also developed a real-time detection system: cryptotrade.cylab.cmu.edu/poisoning/ and @toxin_tagger (1/7)

So I made it to the Pittsburgh local news 😀

@__apf__ We, French people... can do that? I wish I had known!

my husband once had a French roommate who, when confronted over any behavior, would tell us that his behavior was normal in France. being rather credulous at that age, everyone accepted it. since then I have come to know many French people and Sébastien you were full of shit

The system is back up and, guess what, successful attacks continue apace…

Anyway, I digress. Read Jenny's paper. It's illuminating. Older people are far from being digitally illiterate, and we are not serving their needs well at the moment. And we have to fix this, sooner rather than later. (5/5)

A lot of us have completely moved all asset management online. I haven't been to my bank since 2005. Yet, a lot of estate planning does not account for, or even reflect that new reality. (4/5)

My student Jenny Tang just presented our work at #chi26. We have been interested in post-mortem management of online accounts (1/5) andrew.cmu.edu/user/nicolasc/…

Following up on my earlier post, we're starting something quite exciting at CMU @CyLab cylab.cmu.edu/news/2026/03/2…

@azaztrader01 @etherscan It's an excellent piece from a journalistic standpoint (even setting aside the shout-out): 1) they cited the work properly, it's really rare to have journalists actually link to the original article. 2) the piece is technically sound and well researched. Again, rare!

@nc2y @etherscan That's a solid feature. How did it feel seeing your work highlighted like that?

Looks like our address poisoning work is quite prominently featured in this @etherscan blog post. Nice write up btw.

My colleagues at @CarnegieMellon @CyLab and I wrote a position paper/manifesto about our view of the future for cyber autonomy (in short: how AI is impacting computer security). doi.org/10.1184/R1/317…

I very rarely come 'round these parts anymore, but, I just wanted to congratulate freshly-minted Dr. @quarbby on an amazing dissertation/defense and on a wonderfully inspiring life story. Fantastic work, Lynnette!

🚨ALERT🚨 #ETHEREUM, 2026-01-04 21:50 (UTC) $18,500.00 was sent to the lookalike address (0x4cb1...) Details on cryptotrade.cylab.cmu.edu/poisoning/ethe…

Lujo Bauer has been named a 2025 ACM Fellow for contributions to access control, usable security and privacy, and the security of machine learning. Congratulations! @TheOfficialACM ece.cmu.edu/news-and-event…

When it pours it rains

Somebody is going to have a very merry Christmas. Somebody else is going to have a very bad Christmas (HT: @toxin_tagger). 50M bucks. Geez.

@CodeWizard58045 @SoskaKyle Yes. Same website, BSC tab. It's a bit outdated right now, we're updating our chain.

@SoskaKyle Is there victim at the bsc network too? how can i see victim of bsc by address poisoning

1.1 million USDT phished on Ethereum yesterday! The attackers look for small transfers from whales and use GPU farms to brute force look-a-like addresses to fool the whale into sending funds to the attacker. Please be careful and always double-check addresses!

Wee!