..where?

Just managed to take it apart, is my Ledger safe?

I’m honestly interested in this topic, but disappointing read since it doesn’t provide the right level of understanding on how big of a problem these malicious hooks are. What we want to know is the share of total volume that gets routed on malicious hooks. The raw count of malicious hooks deployed is totally meaningless cause anyone could deploy thousands of them for very cheap and create 0 additional malicious impact. It’s a misleading metric. Can you share the volume metrics? Or maybe the 84k hooks is a subset that is above some floor volume to make them somewhat meaningful? Genuinely curious

scammers pay google victims are free users why fix?

Serious question following the ColdCard incident: "Should we remove seed phrase generation from hardware wallets?" My take: for individuals who already put a lot of efforts to secure their setup, it's a clear benefit to use a simple set of dice and generate the entropy yourself. Very often, simplicity is synonym with security. What other non essential features are hurting users' security? Not financial advice, this technique has its own fuck up risks!

Happy ETH anniversary! networked.art/11x11/token/19…

I’m mentoring at @ETHGlobal this weekend. Come say hi!

Vous trouvez ça normal @M6 @FIFAWorldCup que les supporter français ne puissent pas regarder le live français de la coupe du monde depuis l'étranger? Bring back the free (as in freedom) and open internet!

bots

Give me a minute to deploy 2665 new OApps with 10/10 DVN but 0 MC and make it the new industry standard Statistics

I did analyze the supply of KernelDAO: Bridge on the block prior to the attack and it has 0 supply so it's technically a mint but I see your point, there is probably internal accounting that tracks supply without bothering with the token representation until it's transferred out. Would be interesting to confirm

2 DVNs on Ethereum, there are so many version of WBTC, not sure how much the OFT wrapper is used in DeFi

Checked some other popular OFTs (LayerZero based crosschain tokens) @EtherFi requires 2 DVNs confirmation @ethena requires 3 DVNs confirmation @USDT0_to requires 2 DVNs confirmation Even ZRO from @LayerZero_Core themselves requires 2 DVNs before executing a transfer. Two questions will need answers: (1) how and why did Kelp oversee this critical configuration? (2) how did @aave and DeFi in general allow interoperating rsETH at such a scale given this poor configuration?

Great time at Rekt Security Summit going through what we put in place at @Corkprotocol in the past 6 months.

"Audit-and-pray is dead; the new standard is Active Defense" I’ll be sharing my experience joining, securing and launching @Corkprotocol at the Rekt Security Summit tomorrow!

Just tested globalphone(dot)me, built by my two friends @mmilien_ and @yssf_io! You get paid to be available for a phone call

Yearly family DeFi onboarding on @base

I just got my Edge vMapped from @JoinEdgeCity 🔥🏝️

This button in the @LayerZero_Core documentation is something we need on all websites

Blockchain developer attending @EFDevcon? I selected the 10 events you don't want to miss next week ⬇️ Which ones are you're attending?

mom after you explain her you’re not actually inviting her to a concert and it’s yet another crypto thing she will never quite understand

Tag the person who should lead smart contract at @Corkprotocol 👇 We’re building DeFi’s programmable risk layer: a protocol for trading and hedging tokenized risk across vaults, stablecoins, LSTs, and RWAs. We build secure smart contracts. We have a world class team. We are democratizing DeFi. If you want to be part of it, this is your moment! • 1 ETH referral bounty for any hire that comes through your intro • I’ll be meeting candidates at Devconnect Argentina Backed by @a16zcrypto, @SteakhouseFi, @OrangeDAOxyz + others. Apply here → applicantai.com/cork-protoco…

Michael Burry one week ago when he couldn't find the xUSD/sUSDS Cork pool

Was surprised to see a 4+ years old contract get hacked today. Turns out, two of the contracts involved were deployed 2 years ago by a factory contract that is also ~2 years old. Let's wait for the post mortem to understand what exactly happened there, which contract was vulnerable and how long the vulnerability has been lurking in the dark

Also enjoying Patagonia at @JoinEdgeCity? Come get my @poapxyz!

Who is responsible for user security? User and wallet:

Patagonia to lock the fuck in 🔒

Back in June, first time ski touring

Found another list you don't want to find the name of your project on..

Thank you for the incredible support Anna! The Cork team is amazing. Can't wait to see what we build!! One of my favourite moment of the past few weeks where we came together around this table to debate about security. More soon on this cool DeFi role play game I crafter in the plane between Paris and Florence...

Thrilled to announce I’ve joined @Corkprotocol as CTO. After a great run working for top web3 projects, traveling to conferences, and winning hackathons, it’s clear where I want to focus: bringing TradFi onchain. 🧵 Let me share what convinced me to join Cork (+ we are hiring) What makes me especially excited to build Cork is the market growth for tokenized assets. We’re entering a new phase of scale: • real world assets: $3B → $25B in 3 years, • stablecoins: $260B total market, • vault protocols like @MorphoLabs & @veda_labs: triple-digit growth As DeFi is rapidly becoming TradFi’s technology backbone, this transition needs to happen with the same rigor, transparency, and automation that underpin traditional financial markets. Cork is the solution, serving as a programmable risk layer for onchain assets such as vault tokens, yield-bearing stablecoins, and liquid (re)staking tokens. Prior to joining Cork, I cofounded and was the CTO of @Nefture, a security product aiming to protect DeFi. Through this experience, I came to deeply understand one of the biggest challenges of DeFi, security. More recently, I expanded my horizon and worked on: • building a DeFi locker on Linea with @StakeDAOHQ, • building a secure reward distribution system on Arbitrum with @cedelabs, • analyzing Permit2 phishing scams with @RevokeCash, • auditing an ERC4626 vault for @trumarket_tech, • building UniV4 hooks at UHI @AtriumAcademy • won 6 hackathons (@ETHGlobal, @alephhackathon), with projects actively developed like PolySwap (grant by @CoWSwap) and @BackupBuddy_io, well on its way to make wallet recovery secure and accessible, • attended confs and popup cities, making amazing friends and deepening my understanding of the ambitious vision for @Ethereum. Best examples being @Zuitzerland where I spent a month learning about d/acc. It’s this journey, when meeting @robdogeth at @EthCC, that allowed me to understand the important and inevitable vision of @Corkprotocol. I’m incredibly excited to contribute to Cork’s vision of institutional-grade risk management for onchain finance. The next trillion in liquidity will require transparent risk layers, and that’s what we’re here to build. We’re working on cutting-edge DeFi and building a top-tier team. This is why I’m excited to be building here. If this is interesting to you, come build with me. We’ll be hiring a senior smart-contract developer to support our build (see link in the comments). Follow @Pybast & @Corkprotocol to see what we're cooking!

Waking up to another crypto crash. No leverage.

This is a list you don't want to be part of..

@EFDevcon 2025 will be the last time you can give a good excuse for not having a secure backup of your wallet

"eagle is probably a golf thing and Mezcalpapi probably didn’t adopt an actual eagle"

I think you guys can step it up a notch by making star wars clone merch