Keli Callaghan 🛡️

Partner @arrington_cap., Bostonian, Xennial, 🇺🇸. Former @Algorand, @avid, Sprint. Views are mine, not those of @arrington_cap

[Keli Callaghan 🛡️ @KeliCallaghan]

@jonathankingvc @ATLtrackclub @PNCBank Congrats!!

[Arbitrum @arbitrum]

Thrilled to welcome @GenLayer to Arbitrum

GenLayer is the adjudication layer for the agentic economy, where validators running different AI models make the onchain judgments

The programmable economy grows

[Keli Callaghan 🛡️ @KeliCallaghan]

@OnlyInBOS Wicked classy

[GenLayer @GenLayer]

GenLayer is moving to @arbitrum.

After years of building alongside @zksync, we’re grateful for everything we’ve done together and we’ll keep collaborating on what’s next in Prividium and enterprise.

The next phase of Bradbury is now live.

[Keli Callaghan 🛡️ @KeliCallaghan]

Alway something, October.

[Noodles @criptopaul]

Half the internet went offline yesterday, and almost nobody is explaining what this actually means for normal users and retail.

In less than 24 hours, 4 core pieces of the web got hit at the exact same time:

PHP (1.5 million sites vulnerable without even logging in): exploit details leaked before the patch was even out. Governments, ports, and even Wikipedia had to pull the plug on their own sites just to stay safe. Any unpatched site (e-commerce, portals, forums, backends) can now have its entire user database (emails, passwords, personal data) dumped automatically.

GitLab (a 10/10 severity bug hiding in the code since 2014): anyone self-hosting GitLab to store their app or company code is at risk of having their source code and deployment keys stolen.

LiteLLM (hacked for the second time this year): this is the "bridge" almost every AI app, AI agent, and bot uses to talk to ChatGPT or Claude. Yesterday’s update shipped with a built-in trojan that stole all saved passwords and keys the moment it was installed.
Railway paused every deployment globally: attackers breached the system storing customers' secret environment variables (.env). And here is the real nightmare for retail: a massive amount of web apps, AI agents, Telegram trading bots, crypto dashboards, and startups run on Railway and store their database passwords, API keys, and bot wallet private keys right in there.

What should you actually do today?

Empty your Telegram bot and AI Agent wallets
If you use sniper bots, Telegram trading bots, smaller web terminals, or AI agents where you deposited funds, move your money back to your personal wallet (Rabby, Phantom, or ideally a Ledger) right now. Tons of these tools run on Railway or use LiteLLM, if their databases or secret files were read yesterday, any custodial wallet generated by those bots is compromised.

Delete your Exchange API Keys (Binance, Bybit, Hyperliquid, etc.)
Have you ever connected your exchange account or Hyperliquid (via API keys or Agent Wallets) to an external copy-trading platform, trading journal, AI bot, or alert tool? Go to your exchange and revoke/regenerate those keys immediately. If that service's backend was on Railway or used LiteLLM, your API keys might already be in the attackers' hands.

Clean up permissions on @RevokeCash and be careful what you sign
If a crypto project got its GitLab or Railway breached, attackers can silently push malicious updates to the official website (frontend hijack) or abuse exposed admin keys. Avoid signing transactions on smaller dApps today unless strictly necessary, and clear out old approvals on @RevokeCash.

Fix your email and password hygiene (for real this time) With 1.5 million PHP sites exposed, massive database dumps of emails and passwords from thousands of regular websites, online stores, and old forums are going to leak over the next few days. If you still reuse the same password across multiple sites, they will get into everything:

use unique passwords for every site
delete old accounts from sites and forums you no longer use (or use a data-removal tool)
most importantly: never use the same email you use to sign up for random websites/forums for your exchanges or financial accounts. Keep a separate, locked-down email (with Passkeys or app-based 2FA, never SMS) strictly for your money.

[Yuval Rooz @YuvalRooz]

Universal burn vote passed!

[Keli Callaghan 🛡️ @KeliCallaghan]

@YuvalRooz Nice!

[Keli Callaghan 🛡️ @KeliCallaghan]

@FrankLuntz Just missed boomer phase and not cool enough for the onslaught of new benefits/ss model. 😬

[Keli Callaghan 🛡️ @KeliCallaghan]

@M___Morgenstern Solid takeaways. Fabulous restaurant.

[Keli Callaghan 🛡️ @KeliCallaghan]

2026?!

[XRP @XRP]

hello, world.

It’s about time.

[Keli Callaghan 🛡️ @KeliCallaghan]

Last month at @kbwofficial, I had the chance to sit down with @rooqster of @raincards, @MikeSilagadze of @ether_fi and @RaafiHossain or @fasset.

General consensus was that that the default account for anyone anywhere in the world, with in a matter of years, would allow them to hold dollars, other currencies, stocks, earn something and spend on a card. ie: do all the things.

I asked, if they were all right, whose logo would be on that account in 2030? A crypto native company, a Robinhood/Revolut type or a bank that quietly just took over with adopted rails?

@rooqster answered that logo might not exist yet and might still be coming.... a winner could launch and win in that time frame.

And I can't stop thinking that there is so much excitement and progress still coming at us.

Also: I look much smarter when translated into Korea text behind me.

[Keli Callaghan 🛡️ @KeliCallaghan]

This > "a foundation"

[Elon Musk @elonmusk]

Next year, I will give one of my SpaceX shares to every kid in America.

This will be the first of many.

[Keli Callaghan 🛡️ @KeliCallaghan]

The ai version of the crypto foundations 🍿

[Anthropic @AnthropicAI]

We’re committing a portion of Anthropic’s shares to the Anthropic Public Benefit Fund, a new wholly owned entity dedicated entirely to the public benefit.

It will start off with 5% of our shares. For every 50% increase in the company’s value over a set baseline, we can contribute up to an extra 2%, subject to our board’s discretion.

In total, this means that roughly 20% of Anthropic’s shares are committed to the public good. Our co-founders have already pledged to donate 80% of their equity, and around half our employees are donating a portion of their equity as part of a donation matching program we’ve run since our founding.

In the post below, we share more details about our new fund.

https://t.co/XzDntVH0vH

[Keli Callaghan 🛡️ @KeliCallaghan]

@DelRayMan @btschiller Amazing.. love this!

[Keli Callaghan 🛡️ @KeliCallaghan]

Driving in Massachusetts should be super straightforward in 3-6 years.

[Clive @Clive_99]

I fucking hate this Friday morning commute

[Keli Callaghan 🛡️ @KeliCallaghan]

@Haider @okx @star_okx Yep, will see you there 🫡

[Keli Callaghan 🛡️ @KeliCallaghan]

@chronear @SilentSwap @sunrise @brave @kamino @gauntlet_xyz @mert 👀

[Keli Callaghan 🛡️ @KeliCallaghan]

@michelleoconnor @evernorthxrp @Nasdaq 🙌