rufus898

1/ How MetaMask Swaps really works: a clear and complete explanation. Spoiler alert...probably not the way you think or the docs suggest. The SEC's complaints look reasonable once you cut through the, um, lets-call-it-ignorance that abounds. We are going to work through a single swap and look at all the steps. Key features include: - closed source code - things that don't appear on etherscan - smart contracts executing binary blobs - custodial control over assets Blog is a bit more detailed as, you know, this is Twitter. medium.com/chainargos/how…

CertiK recently identified a series of critical vulnerabilities in @krakenfx exchange which could potentially lead to hundreds of millions of dollars in losses. Starting from a finding in @krakenfx's deposit system where it may fail to differentiate between different internal transfer statuses, we conducted a thorough investigation with three key questions: 1/ Can a malicious actor fabricate a deposit transaction to a Kraken account? 2/ Can a malicious actor withdraw fabricated funds? 3/ What risk controls and asset protection might be triggered by a large withdrawal request? According to our testing result: The Kraken exchange failed all these tests, indicating that Kraken’s defense in-depth-system is compromised on multiple fronts. Millions of dollars can be deposited to ANY Kraken account. A huge amount of fabricated crypto (worth more than 1M+ USD) can be withdrawn from the account and converted into valid cryptos. Worse yet, no alerts were triggered during the multi-day testing period. Kraken only responded and locked the test accounts days after we officially reported the incident. Upon discovery, we informed Kraken, whose security team classified it as Critical: the most serious classification level at Kraken. After initial successful conversions on identifying and fixing the vulnerability, Kraken’s security operation team has THREATENED individual CertiK employees to repay a MISMATCHED amount of crypto in an UNREASONABLE time even WITHOUT providing repayment addresses. In the spirit of transparency and our commitment to the Web3 community, we are going public to protect all users' security. We urge @krakenfx to cease any threats against whitehat hackers. Together, we can face risks and safeguard the future of Web3. #Web3 #Security #Transparency

According to CoinPost, DMMBitcoin, a cryptocurrency exchange under Japanese securities company DMM, was suspected of being hacked, and $300 million worth of Bitcoin may have been stolen. DMMBitcoin said it would purchase Bitcoin equivalent to the outflow amount and guarantee the full amount of Bitcoin held by customers. coinpost.jp/?p=534799

$200 #BITCOIN GIVEAWAY 🚨 2 winners will win $100 of Bitcoin, courtesy of Cake Wallet! Rules: - Like and retweet 🔁 - Follow @cakewallet & @missteencrypto - Comment “CAKE” 🎂 Ends in 48 hours, good luck! 🍀

so a couple days ago i made a shitpost about tipping chatgpt, and someone replied "huh would this actually help performance" so i decided to test it and IT ACTUALLY WORKS WTF

🚨Attention #OSINT community🚨 We're thrilled to announce THREE exclusive remote positions in the #Misinformation & #Disinformation field📢 1. Human Domain Response & Communication Expert 🔗 osint-jobs.com/career/human-d… 2. Media Analyst Africa (2 x) 🔗 osint-jobs.com/career/media-a… 1/2

More items were added to Sov's Compendium 📖 Subscribe to my telegram channel to receive alerts when I add things or check out the recently added section of the compendium anytime. t.me/sovscompendium

💻Introducing the Cielo web app. Onchain Discovery as a Service. 👉Apply for the private beta whitelist: 🔗spearmint.xyz/p/cielo

Fiat people think that it's a flaw in Bitcoin that it doesn't allow this insane level of indebtedness. They've been brainwashed to think debt is what creates economic activity when it just allows the fiat cartel to be parasitic on producers by creating debt out of thin air.

In recent months we (me & @pessimistic_io) have been actively developing our own Slither (by @trailofbits) detectors to help with code review and audit process! This repo contains everything you may require to work with them - hope it will help you! github.com/pessimistic-io…

Yep. To correct a long series of abuses, I am introducing legislation that removes the Chairman of the Securities and Exchange Commission and replaces the role with an Executive Director that reports to the Board (where authority resides). Former Chairs of the SEC are ineligible.

More items were added to Sov's Compendium 📖 Subscribe to my telegram channel to receive alerts when I add things or check out the recently added section of the compendium anytime. t.me/sovscompendium

@JasonYanowitz humble farmer

Dropping something big tomorrow. Comment "humble farmer" if you want access. I’ll send it to you first thing in the AM 🧑‍🌾

🟩📊🌀excited to announce the launch of the Paradigm Data Portal 🟩📊🌀 TLDR: we are assembling a bunch of public crypto datasets for researchers and tool builders short thread

1/ Not sure how this space missed this but @fluffypony (Riccardo Spagni), the founder & lead maintainer of @monero $XMR outed himself as an informant for Interpol after he was detained by U.S. Marshals pending extradition. Evidence strongly suggests he helped them track Monero.

OSINT TIP #140🔥 @Similarweb - measure of the digital world, their analysis can be smartly used to discover new #OSINT surface! Ranking of the top sites for diff. countries gives the opportunity to find targets to help in further OSINT investigations. similarweb.com

DexGuru Meta aggregation currently support routes provided by ✅1inch v5 ✅ 0x ✅ Paraswap ✅ Kyberswap ✅ Openocean

Let's talk about #GPT and #OpenAI :) We're building JobStash using GPT-3.5 under the hood, and currently it's helping us extract structured data from Job posts that are notoriously hard to parse. We can get from a long blurb of text, to this:

I dumped a live Ethereum contract into GPT-4. In an instant, it highlighted a number of security vulnerabilities and pointed out surface areas where the contract could be exploited. It then verified a specific way I could exploit the contract