SpaghettETH

Why should you support us and become an official SpaghettETH member? Because you can: - write your own piece on our blog - access to a specific chats - access to all the major ETH events tickets discounts - get advantage of our partnerships - take active part to events in Italy and more. spaghett-eth.com/membership

recently we've started to observe that the DPRK threat actor PolinRider (related to the Contagious Interview guys) is poisoning hundreds of old GitHub repos with "old-looking" but malicious commits that were actually pushed _recently_. i think what is happening overall is the following: 1. devs get compromised via some automatic VS Code task (see e.g. x.com/pcaversaccio/s…), fake npm package (axios is used as an illustrative example: github.com/axios/axios/is…), or similar infostealer vector (this is the current assumption, i do not yet have hard evidence on the exact initial access method) 2. the attacker then sets the author and committer dates to match the date of the last legitimate commit in the repository 3. the infostealer malware takes the last commit, amends it with malicious changes, and (force) pushes it back to the repository (likely also using `--no-verify`), making the modification appear as if it belongs to the original timeline 4. the repos are after shilled to other devs or used as part of future fake interview tasks it's not new news that you can spoof the author and committer date, but i made a short demo repo for anyone to understand how this works: github.com/pcaversaccio/t… a s/o to @KL4R10N for sharing intel & running forensics on it with me

Urgent: the SAFE multisig of the @commonshub_bxl has been drained an hour ago by this address: #tokentxns" target="_blank" rel="nofollow noopener">gnosisscan.io/address/0xfFb3… We lost €110k, all the savings of the community :-( Already reached out to @monerium who has been very reactive. Any one at @gnosischain that could help us?

We are syncing up with @matteotambussi and @SpaghettEth to talk about growing community in Italy, Ethereum in the age of CROPS, and how GrowFi is built to convert onchain yield farming into the real world regenerative assets. ⏰Set your reminder and j oin us this Wednesday at 11am CET x.com/i/spaces/1qxvv…

All @farcaster_xyz roads lead to Rome! @urbeEth ⚒️

La prossima settimana saremo al FarCon Rome con il team di @urbeEth e la global community di @farcaster_xyz! 💜 Voi venite? 🇮🇹 Due giorni, due format distinti: uno per chi costruisce, uno per chi vuole capire dove stiamo andando 👇🏻 4 maggio — Builders Day. Una giornata curata per builder e founder che costruiscono su Farcaster: dev Q&A, project showcase, connessioni IRL. Formato compatto, niente fronzoli, dalle 8:30 alle 18:00. Per chi costruisce o vuole iniziare a farlo. 5 maggio — Summit Day. Talk, panel e conversazioni di visione sul futuro del protocollo. Una giornata per capire dove sta andando il social layer decentralizzato e chi lo sta guidando. I biglietti sono già disponibili su farcon.eu 🎟️ FarCon è un gathering pensato per connettere davvero le persone. E il contesto non potrebbe essere migliore: FarCon si inserisce in una settimana romana densa di eventi crypto — da zk a post-quantum, dalla privacy alla ricerca all'avanguardia. Dal 3 al 14 maggio, Roma ospita 7 eventi in 12 giorni, tra cui @web3privacy, @Logos_network Circle Rome, @KismetCasa zkSummit @zeroknowledgefm, Ethereum PQ Meetup, ZKProof @zkproof e Eurocrypt 2026. Il team di SpaghettETH sarà lì. Se ci sei anche tu, vieni a salutarci — trovaci lì: vibes, codice e ottimo cibo garantiti grazie a @Pizza_DAO.

fam, il 23 maggio sono a Trento per Open Value 2026 🔶 Un side event indipendente del Festival dell'Economia organizzato dagli amici di @SpaghettETH. Una giornata intera su Bitcoin, stablecoin, euro digitale, DeFi e finanza programmabile, panel, workshop e networking. Parlo anche di RWA e cosa sta succedendo quando le istituzioni iniziano a capire davvero cosa sono gli asset digitali 👇 Grazie @matteotambussi per l'invito :)

If #Economics become programmable, everything changes. On May 23 in #Trento, we take a moment to talk about the future of economics with a selected team of academics and builders in blockchain and crypto. Introducing OPEN VALUE — a parallel layer to the Festival dell’Economia @economicsfest . → digital money, tokenized assets → programmable finance → governance & verifiable cities → 101 workshops If you’re in Trento: → save your spot → apply as a speaker openvaluetrento.it co-organized with: Unruly Cap @stefanobernardi , Impact Hub Trento. sponsored by: @YOMI_WEB3, @geodelabs

Come si trasforma la rigenerazione urbana e sociale in un valore per tutta la comunità? 🌿🏛️ A fine febbraio abbiamo portato il primo #ReFi Design Sprint a #Roma con #Ridaje, ospiti di @v_era3 Dall'impatto sul campo a un protocollo aperto. Vi raccontiamo com'è andata. 🧵👇

Pandemic v1 is out. A #local-first, #offline-first app for sharing #audio by proximity, without cloud or platforms. Just people, #music, and shared space. 🔗 linktr.ee/pandemic2026 I'm reaching out to like-minded builders who wants to join the quest.

1/ Last week @SpaghettEth + @ethna_rocks with @YOMI_WEB3 went to Barcelona, hosted by @AKASHAworldBCN , to run "Residency Zero" for @hubs_network_

@SpaghettEth dub.sh/ethbologna_spr…

Who said tech residency? @hubs_network_ @AKASHAworldBCN @ethna_rocks @SpaghettEth @YOMI_WEB3

WE WISH Y'ALL A BUON ANNO NUOVO - can't wait for 2026, where builders gonna build and cookers gonna cook ❤️🤍💚

In October we joined @ETHRome and joined Web3 for Good at @urbeEth Village. November & December we were resting a bit, cooking for 2026, but we were invited by Crypto Florence in Firenze where @mariamagenes1 talked about RWA.

Wrapping this amazing 2025 with joy, ready for an intense 2026! 💫 Here's a super quick summary of what we've cooked this year 👇