https://interestingengineering.com/ai-robotics/anthropic-project-glasswing-10000-software-vulnerabilities

0 reply

0 recast

3 reactions

https://gizmodo.com/the-worst-leak-that-ive-witnessed-u-s-cybersecurity-agency-leaves-its-digital-keys-out-in-public-on-github-2000760330

2 replies

1 recast

4 reactions

TL;DW – if you use a Visa card as your Express Transit card in Apple Wallet, switch to a different card or disable the Express Transit feature altogether. https://youtu.be/PPJ6NJkmDAo

2 replies

2 recasts

18 reactions

https://www.bleepingcomputer.com/news/security/trust-wallet-links-85-million-crypto-theft-to-shai-hulud-npm-attack/ @trustwalletapp @officercia $TWT

1 reply

0 recast

3 reactions

BOOTSTRAP 🥾: SUCCESSFUL DEPENDENCIES 💾: INSTALLED NETWORK 📡 : CONNECTED CONTENT 👨🏾‍💻: █████████████████▒▒▒▒ 89% IMPORTANT & EXCITING #DCG201 ANNOUNCEMENTS LATER TODAY $XMR @tbsocialist @zachxbt @officercia

0 reply

0 recast

2 reactions

The @ledgerofficial white hat team discovered a flaw in Tangem cards that makes brute force attacks possible by exploiting vulnerabilities in their secure channel implementation leveraging a “tearing” technique. This allows attackers to bypass the card’s security delay mechanism after failed authentication attempts. The vulnerabilities cannot be patched on existing cards because they’re not upgradable. It is important to note that this attack requires physical access to a Tangem card. https://www.ledger.com/blog-brute-force-attack-tangem @officercia

0 reply

1 recast

2 reactions

If you happen to use PureVPN, they have an IPv6 leak. https://anagogistis.com/posts/purevpn-ipv6-leak/

2 replies

0 recast

5 reactions

Aikido is great I’m excited to have found this tool

0 reply

0 recast

1 reaction

On September 2, 2025, the $Bunni V2 protocol suffered a major exploit resulting in the loss of $2.4M on Ethereum and $5.9M on UniChain. The attack targeted flaws in the liquidity accounting mechanisms of BunniHook, specifically exploiting a precision error by performing multiple carefully sized swaps that yielded more tokenOut than intended. https://www.quillaudits.com/blog/hack-analysis/bunni-v2-exploit @uniswap @officercia @zachxbt

0 reply

0 recast

2 reactions

Mullvad and WireGuard are the only VPNs that GrapheneOS recommends. I will compare Mullvad to Proton VPN since I have to frequently toggle Proton VPN on|off on desktop for sites I use on a daily basis. I'm also excited to test @gnosischain's Hopr's distributed product once it's more consumer ready. https://grapheneos.org/faq#vpn-support:~:text=The%20only%20apps%20we%20can%20recommend%20is%20the%20official%20WireGuard%20app%20and%20the%20official%20Mullvad%20app.

3 replies

0 recast

2 reactions

https://farcaster.xyz/nickysap/0x7220e9ef

0 reply

0 recast

1 reaction

For @safe multi factor verification MFV generating the transaction tx hashes with @openzeppelin Safe Utils on both the device|UI where the tx is created and on separate devices|UIs signing the tx is essential. This way the tx hashes created between devices|UIs can be compared. Otherwise using Safe Utils with data from only 1 source would not detect if that source is showing bad info while displaying a correct tx hash. E.g. 1. Create tx on 1st device with Safe UI 2. Create tx hashes with Safe Utils and Safe UI data 3. Sign on 2nd device with software account, E.g. @metamask 4. Create tx hashes with Safe Utils and MetaMask data 5. Compare tx hashes created from both Safe UI and MetaMask to make sure they're the same Thank you to @so for talking through different tx signing scenarios!

0 reply

0 recast

3 reactions

How big is the security risk if a VSCode extension gets compromised? And is there anything we can do to mitigate the potential risk?

4 replies

0 recast

8 reactions

The best way for most users to multi factor verify MFV their @safe transactions txs on multiple devices outside of a device account DA (@ethos and @ledgerofficial) showing full tx details, is to copy the Tenderly simulation link to a 2nd device than where the tx is created. I'm looking forward to full DA readability with Safes later this year. https://ethereum.stackexchange.com/questions/168674/simulate-safe-transaction-tx-with-tenderly-on-a-different-device-than-where-the/168693#168693

2 replies

0 recast

2 reactions

This is actually pretty wild. The Bybit hackers didn't hack Bybit, they hacked Gnosis Safe – specifically someone on their team with frontend deploy privileges. They could have targeted any of the countless teams using Gnosis Safes. https://x.com/safe/status/1894768522720350673

0 reply

0 recast

6 reactions