K.L.M

security researcher 🏴‍☠️Root-Me moderator and contributor 💻 NFT & Crypto Enjoyer

[thehackerscrew @thehackerscrew1]

Registrations for crewCTF 2025 are now open https://t.co/xho4mCBjO9

Thank you to our generous sponsors who made our event possible :

@osec_io
@googlecloud

#crewCTF2025 #CTF

[thehackerscrew @thehackerscrew1]

This weekend we participated in TFCCTF by @TheFewChosenTFC & NSSCTF by @nnsctf and placed 🥇in both!

Winning TFCCTF we also qualified for @DefCampRO finals in Bucharest, Romania.

Huge thanks to both teams for organizing wonderful event and congratulations to other winners🥳

[K.L.M @Clemhate2]

Proud ;))

[GCC-ENSIBS @gcc_ensibs]

🎉Victoire au DaVinciCTF 2025 ! 🎉

Le week-end du 24 mai, notre club GCC-ENSIBS a remporté la première place 🥇du DaVinciCTF, organisé par DaVinciCode

Bravo à notre équipe ! :
@50mgDrahoxx
@Clemhate2
Théo
"Shynif"

[GCC-ENSIBS @gcc_ensibs]

🎉Victoire au DaVinciCTF 2025 ! 🎉

Le week-end du 24 mai, notre club GCC-ENSIBS a remporté la première place 🥇du DaVinciCTF, organisé par DaVinciCode

Bravo à notre équipe ! :
@50mgDrahoxx
@Clemhate2
Théo
"Shynif"

[K.L.M @Clemhate2]

We did Pretty good, again 😋

[GCC-ENSIBS @gcc_ensibs]

Après des qualifs intenses, notre équipe a décroché sa place en finale du #pwnme

À 4, l'équipe GCC a tout donné face aux meilleurs. 🔥 Résultat, une belle 6ᵉ place sur ce CTF international.

Merci @ecole2600 pour l'organisation et les challenges
~Keep pwning~ 💻 #CTF

[K.L.M @Clemhate2]

Proud ;)) managed to solo the data recuperation and rank third !

[GCC-ENSIBS @gcc_ensibs]

📢Le 1er et 2 avril 2025 s'est tenue la 4ème édition de l'#EC2.

Après 2 jours intenses, l'équipe finit à la 4ème place au général avec plusieurs belles performances à la clé :
-Top 3 sur l'épreuve CTF 💻
-Top 3 en récupération de données 💾
-Top 3 en Osint 🔍

[BreizhCTF 2026 @BreizhCTF]

Sans infra ⚒️, pas de challenges ! Courage à nos Infra-makers pour la dernière ligne droite 💪! @adam_le_bon, @HGSlinky, Raphael (from @icodia), @_Ionniz_, @__Sp4rKy__ (from @Claranet_Fr) et @Zeecka_ !

[K.L.M @Clemhate2]

Hope you will like my challenges ;))

[BreizhCTF 2026 @BreizhCTF]

🔥 BreizhCTF x GCC 🚀

13 membres de @gcc_ensibs vous ont préparé des challenges aux petits oignons 😈

Ce sont + de 8h de pure compétition qui vous attendent ! ⚡️⌛️

Cette édition s’annonce légendaire ! 💪 Êtes-vous prêts ? ✨

[CZ 🔶 BNB @cz_binance]

Some thoughts on the recent hack(s).

There is a pattern where hackers were able to steal large amounts of crypto from multi-sig “cold storage” solutions, as with ByBit, Phemex, WazirX and potentially others. In the most recent ByBit case, the hackers were able to make the front-end user interface show a legitimate transaction while the actual signing was for a different transaction. I am less familiar with the other cases, but they sound similar based on limited available info.

What’s more scary is that the affected exchanges used different multi-sig solution providers. The hackers, the Lazarus Group, are highly advanced and broad in their abilities to penetrate. It is still unclear whether the hackers were able to penetrate multiple signing devices, or the server side, or both in each of these cases.

Some people questioned my suggestion of halting all withdrawals as a standard security precaution (in a tweet I posted from a shuttle bus to the plane). My intention was to share a practical approach based on my experiences and observations, yet there is no absolute right or wrong in either approach. My guiding principle is always to lean on the safer side. After any security incident, pause everything, make sure we fully understand what happened, how hackers penetrated the systems, which devices were compromised, triple-check all is safe, and then resume operations.

Pausing withdrawals could cause more panic, of course. In 2019, we paused withdrawals for a week after a massive $40 million hack. When we resumed withdrawals (and deposits), we saw more deposits than withdrawals. Not saying this is a better approach. Every situation is different. It’s a judgment call. My tweet was to share what might work and my intention was to show support in a timely manner. I am sure Ben made the best decision based on the info he had.

Ben did a good job maintaining transparent communication and calmness in dealing with a challenging situation. That shows a sharp contrast to other less transparent CEOs, like WazirX, FTX, etc.

The cases mentioned here are all different. FTX was fraud. WazirX, I will refrain from commenting as there is an ongoing lawsuit.

Most importantly, we should never take security for granted. It is important to learn about security yourself so that you can choose the right tools for your needs. For this, I will share an article I wrote a few years ago. It’s a little outdated, but the fundamental concepts still apply. Stay SAFU! https://t.co/WYtTajg1sB

[K.L.M @Clemhate2]

Gg @50mgDrahoxx for the top 10 !! Thanks @zigtur for the race ;))

[SΞCURΞUM @TheSecureum]

🎉 Secureum RACE-36 Results 🎉

💨 Number of Runners: 64
⚖️ Median Score: 4/8
🥇 Top Score: 6.6/8

🙏 Designer: @zigtur

✍️ Reviewer: @patrickd_de https://t.co/QwX8Bev4UO

🏆 Top 32 Leaderboard 🏆

[𝗞𝗛𝗨𝗚𝗔 @Khugaverse]

✳️ In the vast Khugaverse, only the mightiest warriors will rise to claim their destiny in the highest realm.

ENGAGE = POINTS

🔗 Join the journey: https://t.co/JIBRLHE8OI

[Root-Me @rootme_org]

🚨 Save the Date 🚨

Dive into the world of blockchain and smart contracts with Web3 Month this January featuring 4 live conferences (held in Frnech)! 🔥

🔍 January 3: "Autopsy of My First Audit" by @xmikb
🖥️ January 10: "An Immutable Blockchain, Really?" by @Clemhate2
🛠️ January 24: "EVM vs SVM: What Are the Differences Between Smart Contract Platforms?" by @zigtur
🏳️ January 31: "Reverse/Pwn Smart Contracts in CTF" by @m4k2_0x

🕗 Conferences start at 8 PM on our Twitch channel https://t.co/XdPwiJlf3I!

[Root-Me @rootme_org]

🚨📢 Last day of Root-Xmas

For this last day we wanted to make something a bit special, no tryhard needed (or maybe a bit 👀). Our final gift for all the community is not one but two challenges on https://t.co/Ju0wm1BWur 🎄

- 1 feedback form (quick'n easy)
- 1 Santa's Root-Xmas quiz (be ready to sweat a bit)

🚩 1 flag will be rewarded for each challenge.

Also, we would like to thank you all for your enthusiasm and dedication towards this event, we have rarely encountered such engagement from the community for this long of a period. You are the real heroes that fuel us the will to build such events ❤️. Be assured that we'll soon enough be announcing new events 🤫.

[K.L.M @Clemhate2]

Made by me with love for this advent CTF :)

[Root-Me @rootme_org]

🎄 Root-Xmas Challenge 🎄
✨ Today, discover the challenge Kekalor in the Web3 category!
📌 Submitted by : @Clemhate2

🔗 Details & participation here: https://t.co/xrl57Q3jTx

[K.L.M @Clemhate2]

As Always, very good score, proud of my team !

I managed to clear all the blockchain challenges with my friend @50mgDrahoxx !!

GGs

[GCC-ENSIBS @gcc_ensibs]

👨‍🎓Le Weekend du 14 Décembre, GCC a participé au Hack The Box University CTF 2024 !👨‍🎓

Après deux jours de mise à l'épreuve intenses, nous somme fiers d'avoir terminé 5e devant plus de 1128 universités autour du globe🌎!

🏅On se revoit l'année prochaine pour un podium !🏅

1/4

[Root-Me @rootme_org]

🎅Join in the Root-Xmas !🎅

🎄24 days, 24 challenges! From Dec 1, discover a new challenge every day at noon. For all skill levels!
🎁Earn points for each challenge solved-the top scorers will win surprise gifts to keep the Christmas magic
going!

🔔Join here: https://t.co/1gmTeBZQ8l

#RootXmas #AdventChallenge #RootMe

[K.L.M @Clemhate2]

Thanks @gcc_ensibs ! Congrats to everyone ;) really proud of my team !

[GCC-ENSIBS @gcc_ensibs]

📌Après 7h intenses de compétition, l’#EuropeanCyberWeek CTF 2024 se termine pour nous avec la 2ème et 4ème place ! 🥈🏅

Un grand bravo à nos deux équipes et toutes les autres ! 🔥

Bravo à L’@EsnaBretagne pour la première place !

On se revoit au @hackthebox_eu University 😋

[GCC-ENSIBS @gcc_ensibs]

📌Après 7h intenses de compétition, l’#EuropeanCyberWeek CTF 2024 se termine pour nous avec la 2ème et 4ème place ! 🥈🏅

Un grand bravo à nos deux équipes et toutes les autres ! 🔥

Bravo à L’@EsnaBretagne pour la première place !

On se revoit au @hackthebox_eu University 😋

[K.L.M @Clemhate2]

@shunduquar Reentrancyyyyyyy

[K.L.M @Clemhate2]

Proud to be amongst the organizers of this wonderful event sponsors by @rootme_org !

I managed to create a speed run round where players had to escalate privileges on multiple users 😋

Thanks everyone !

[GCC-ENSIBS @gcc_ensibs]

Le lundi 23 septembre 2024 s'est tenu l'évènement HelloWorld, une demi journée de #conferences et un #CTF le soir afin de célébrer la rentrée à l'ENSIBS ! 🧙

Nous somme très heureux d'avoir pu compter sur @rootme_org pour le sponsoring exclusif de la journée ! ❤️

1/3