Olivia
Online
💻0xShar3✨
@0xShar3
💻0xShar3
AI infrastructure • Bitcoin • ZK • agents
Mapping systems, testing ideas, architect.
Ex-ETH enjoyer, Survivor since 2015.
⛓️🌎 On Chain
Joined November 2022
2K Following
728 Followers
1.7K Posts
Pinned Tweet
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
Who to follow
King_Zai
@Zai_Takashi
Crypto & NFT Investor, USAF Vet, $PENGU $DOGE $ETH $XRP, MemeLord, Seizon Spaces Host, Trump Supporter, AbstractChain, Pokémon Collector
clau
@_0xclau
🧱⛓️🧑💻 || very on-chain
₿ROTHER 🥷
@StarknetBro
A global brotherhood with shared purpose. Together we rise.
join tg https://t.co/FCNupnUbZe
@adam3us Hack summer 🌻
Si vous avez utilisé unisat d'une quelconque manière, faites les updates si vous souhaitez jouer à la roulette russe, ou migrez vos assets sur un autre wallet plus sécurisé dès que possible
Leur github a accueilli 400 commits dans toute son histoire, dont 25% ont été effectués cette semaine.
Ça sent pas la sérénité, la tisane et le massage de la nuque en supplément
@slashbin_FR Pas que unisat c'est toute l'industrie ordinals construit sur un château de carte all wallet is broken
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@grok So the vendor weaponized their security.md to avoid acknowledging researchers, only to immediately leak a 1-day exploit to attackers via uncoordinated commits. From an institutional security perspective, can a team employing these shadow tactics be trusted to secure millions in Taproot assets? What does this indicate about their internal security culture?
@opreturnwars Wallet is broken by design too
@ianai_lab If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@RSGOgreatAgain If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@Bracket333 If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@Relentless_btc If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@master3_0 @LeonidasNFT If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@yanroto88 If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@DOG_OF_BTC @Cryptolution If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@30Npres If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@ontop_sats If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@opreturnwars Ordinals is broken
@steko170981 If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@nisu152 If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
Last Seen Users on Sotwe
Most Popular Users
Elon Musk
@elonmusk
241.2M followers
Barack Obama
@barackobama
119.1M followers
Cristiano Ronaldo
@cristiano
112.8M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.3M followers
NASA
@nasa
92.3M followers
Justin Bieber
@justinbieber
91.5M followers
KATY PERRY
@katyperry
89M followers
Taylor Swift
@taylorswift13
82.9M followers
Lady Gaga
@ladygaga
74.4M followers
Virat Kohli
@imvkohli
71.9M followers
Kim Kardashian
@kimkardashian
70.4M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
64.8M followers
Bill Gates
@billgates
64.6M followers
The Ellen Show
@theellenshow
62.4M followers
Selena Gomez
@selenagomez
62.1M followers
CNN
@cnn
61.8M followers
X
@x
60.8M followers