Olivia
Online
💻0xShar3✨
@0xShar3
💻0xShar3
AI infrastructure • Bitcoin • ZK • agents
Mapping systems, testing ideas, architect.
Ex-ETH enjoyer, Survivor since 2015.
⛓️🌎 On Chain
Joined November 2022
2K Following
729 Followers
1.7K Posts
Pinned Tweet
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
Why is there still no search bar in Grok conversation history on X ???
When you’ve got 150+ chats with Grok you end up scrolling like it’s 2012.
This is basic stuff. ChatGPT has it, Claude has it, even Gemini has it…
@elonmusk @benjitaylor @nikitabier @singhai @dinkin_flickaa
Can we please get a Search tab in the history ? 🙏
Who else is tired of searching manually ?
Who to follow
₿ROTHER 🥷
@StarknetBro
A global brotherhood with shared purpose. Together we rise.
join tg https://t.co/FCNupnUbZe
Trinityy
@0xTrinityy
Web3 Dev - Smart-contract - Zk Based - Ethereum and L2s / prev @kasarLabs
King_Zai
@Zai_Takashi
Crypto & NFT Investor, USAF Vet, $PENGU $DOGE $ETH $XRP, MemeLord, Seizon Spaces Host, Trump Supporter, AbstractChain, Pokémon Collector
Lmao at @unisat_wallet. Yesterday they rushed a new security.md claiming that memory leaks are out of scope and won't be rewarded.
Writing legal threats to researchers while secretly using their intel to patch your code is a wild strategy. Are user funds SAFU or just your bug bounty budget?
@UTXO_Punk veni vidi faili
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@adam3us Hack summer 🌻
Si vous avez utilisé unisat d'une quelconque manière, faites les updates si vous souhaitez jouer à la roulette russe, ou migrez vos assets sur un autre wallet plus sécurisé dès que possible
Leur github a accueilli 400 commits dans toute son histoire, dont 25% ont été effectués cette semaine.
Ça sent pas la sérénité, la tisane et le massage de la nuque en supplément
@slashbin_FR Pas que unisat c'est toute l'industrie ordinals construit sur un château de carte all wallet is broken
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@grok So the vendor weaponized their security.md to avoid acknowledging researchers, only to immediately leak a 1-day exploit to attackers via uncoordinated commits. From an institutional security perspective, can a team employing these shadow tactics be trusted to secure millions in Taproot assets? What does this indicate about their internal security culture?
@opreturnwars Wallet is broken by design too
@ianai_lab If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@RSGOgreatAgain If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@Bracket333 If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@Relentless_btc If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@master3_0 @LeonidasNFT If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@yanroto88 If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@DOG_OF_BTC @Cryptolution If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
@30Npres If the industry and users still aren’t asking the right questions, this could just end up being the final nail in the coffin...
https://t.co/atrzJSDLb5
They just handed attackers the perfect playbook.
UniSat’s vault encryption was ridiculously weak (weak KDF).
Private keys and seed phrases sitting in plaintext in RAM memory.
Any website could talk directly to the extension.
unisat dot io had automatic trust without real user approval.
Permissions were leaking.
They fixed all of it… IN PUBLIC.
With ultra-detailed diffs that now double as an attack roadmap.
Meanwhile:
500,000 users are still running the OLD version.
The patched release is still stuck in pre-release.
The patch didn’t just close the holes.
It showed attackers exactly where to look…
while most users remain exposed.
It’s opening a patch gap and starting the clock.
Pure insanity.
That gives you a pretty good idea of the real level of security maturity behind an industry that claims to protect billions in user funds.
@lopp @chainalysis @udiWertheimer
Last Seen Users on Sotwe
Trends for you
Most Popular Users
Elon Musk
@elonmusk
241.2M followers
Barack Obama
@barackobama
119.1M followers
Cristiano Ronaldo
@cristiano
112.9M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.3M followers
NASA
@nasa
92.3M followers
Justin Bieber
@justinbieber
91.5M followers
KATY PERRY
@katyperry
89M followers
Taylor Swift
@taylorswift13
82.9M followers
Lady Gaga
@ladygaga
74.4M followers
Virat Kohli
@imvkohli
71.9M followers
Kim Kardashian
@kimkardashian
70.4M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
64.9M followers
Bill Gates
@billgates
64.6M followers
The Ellen Show
@theellenshow
62.4M followers
Selena Gomez
@selenagomez
62.1M followers
CNN
@cnn
61.8M followers
X
@x
60.8M followers