We recently started hunting bugs outside of Web3 using @therealgregoAI with impressive results
This is one of the first vulnerabilities we have been able to disclose (with many more to come)
TLDR: Apple's PCC revocation check was a no-op and revoked nodes kept getting the mesh keys for in-flight Apple Intelligence data
Fixed in 26.4. Happy halloween! 🎃
@elonmusk a humble request for full markdown support in X articles as technical write-ups become difficult to accurately comprehend without it
Close to 1,000 people registered for Risky Business, Singapore. Only 110 made it into the room.
Tight curation makes for great conversations, and plenty of great conversations were had.
Thank you to the builders, protocols and capital allocators who kicked off their @token2049 week with us.
See you at the next one. 🫡
One of the top AI hackers on Immunefi @0xriptide:
"AI is bringing back the same bugs we saw five years ago. We're not seeing anything new.
Developers will naturally get lazy and start vibe coding everything.
What will separate teams is how they build. Some will take shortcuts, while others will stay focused on security and building things right."
Full interview below.
A note to those building on chain in 2026:
vibe coding + high code velocity + bull market pace + rapid TVL growth = bugs galore
we see many teams building skyscrapers on sand with a "fix it later" mentality
initially this works and they think they are geniuses
... but eventually
someone will find the big, protocol wrecking, critical bug
capital flight and brand destruction happens overnight
entire savings lost, lives ruined financially, lawsuits filed, death threats received
i've seen it happen time and time again and it will happen to YOU if this is your approach to building on the blockchain
riptide's recommendations:
1) find a balance between securing the code and shipping fast. the security strategy should not be to push critical fixes like OTA updates for an XBOX game when any significant TVL is at risk.
2) invest in top tier human security talent. AI + expert SRs are a force multiplier. get a team that builds with a security first mindset from day 1.
3) properly incentivize responsible disclosure and treat your whitehats like kings. they are your last defense and will go out of their way to ensure your success if treated well
remember that you may only get one shot at building a successful project that makes you millions of dollars ...
best of luck anon
🚨We now have a live website for new guests that would like to come on the podcast! 🚨
You can self-submit and I will review all submissions personally. The idea is to build a queue of potential guests so that I can put out more episodes on a consistent basis going forward.
Check it out here: https://t.co/aDkfYY1YyX
Thank you to the champion @khubak for putting this whole thing together
The funds from the $3.8M NEAR Intents hack were sent back in full.
We are stopping the investigation.
Please use bug bounties instead of disrupting the services.
"How would a human even find this?"
Justus Hanna (@0xriptide) on the $250K bug his AI caught: it chained multiple vulnerability classes with an edge-case timing exploit. The probability of a human reaching that same conclusion? Very low.
🎧 CypherTalk: https://t.co/lUedtarHGW
New @cyphertalkmedia episode: our co-founder @beyer_st sits down with @0xriptide of @therealgregoAI.
Chaining vulnerabilities with AI, the $27.7M exploit it caught, and what's left for the human auditor.