Akintomiwa⚡

ML & Blockchains.|| Pharmacist

[Akintomiwa⚡ @OfficiallyXenos]

Yo guyyyyysssss. I now write about crypto and blockchain concepts in pidgin.

Check it out🤗

https://t.co/D0G1oFNYJc

[Akintomiwa⚡ @OfficiallyXenos]

@DAMOZPIXIE1 @Upwork should still look into this.

[Demola @DAMOZPIXIE1]

The invitation from Keila Rosa Garcia Arrieta appeared to be a professional opportunity to upgrade a Web3 social platform from v1 to v2. The project description was detailed, mentioning partnerships with CryptoOasis and a roadmap involving real estate DApps, multi-staking, and AI integrations. The client even provided a high-fidelity Figma design link, making the offer look like a legitimate, high-stakes engineering task.

The trap was set within the next step of the interview process. The client requested that I download the MVP v1 repository from a Dropbox link to "familiarize myself with its structure" before meeting with a technical manager. To make the scam more convincing, the folder included the actual Figma design files, creating a false sense of security while looking for technical context.

I decided to manually inspect the repository files before running any installation commands. This caution saved my entire infrastructure. Inside the next.config.js file, the code initially looked like a standard Next.js configuration for image whitelisting. However, I discovered a hidden, malicious string on the very first line that was intentionally pushed far to the right so it would be cut off in most code editors.

This hidden script used a classic malware pattern. It utilized atob() to decode a Base64 string into a URL, fetch() to download a remote payload, and eval() to execute that payload. Because Next.js config files run automatically during the build process, simply typing npm install or npm run dev would have granted the attacker full execution rights on my machine.

The goal of these "job interview" repos is to exfiltrate high-value developer data. They target your ~/.ssh folder, GitHub tokens, AWS credentials, and browser-based crypto wallets like MetaMask. It is a highly effective social engineering attack because it hides behind a professional-looking job description and a legitimate Figma design.

Despite reporting this clear threat to Upwork, their Trust & Safety team responded stating they "didn't find a violation of Upwork's policies" and considered the matter closed. This is a dangerous oversight. It means the platform may not be catching sophisticated malware hidden in configuration files, even when it's specifically designed to bypass standard detection.

The lesson is clear: you are your own last line of defense. Never trust a repository from a new client, even if it looks legitimate and the platform clears the account. Always search the codebase for the combination of fetch, atob, and eval before you ever initialize a project.

[Akintomiwa⚡ @OfficiallyXenos]

@OluwatunmiseMi8 @missadekanmbi @SamExistingg Herzlichen Glückwunsch, Starboy

[Akintomiwa⚡ @OfficiallyXenos]

people are now just tweeting "... if only there was a tool", only to build and launch the damn tool the next day😅😭

[Demola @DAMOZPIXIE1]

CI/CT/CD is one of the tools that determines your professionalism and how you understand best practices.

#DevOps #BackendDeveloper #SoftwareEngineering #CI_CD

[Akintomiwa⚡ @OfficiallyXenos]

@Olorunda_Esther so you've read The Secret of Secrets?

[Akintomiwa⚡ @OfficiallyXenos]

@DAMOZPIXIE1 @Bhavani_00007 one word bro. you want to kill her? lol

[Akintomiwa⚡ @OfficiallyXenos]

@Ifihan_ UNA JUST DEY COOK ANYHOW.😁

[Zainab Lawal @Zeeskylaw]

So, I built this with Media Pipe.🫡
It’s a Chrome Extension that uses your webcam to detect when you struggle to read.
😑 Squint → Zoom In
😳 Open Wide → Zoom Out

It's currently calibrated just for my face/eyes. If there's enough demand, I’ll try to generalize the calibration or add some setup and launch it on the Chrome Web Store for everyone. Let me know if you’d use it
(Tech stack & Architecture in the comments 🧵)

[Demola @DAMOZPIXIE1]

The Billboard and Dashboard sections are fully operational, featuring the Global Map for minting, real-time Stats & Trends, a competitive Leaderboard, and a comprehensive Asset portfolio view.
The Community hub drives engagement through a resale Marketplace, a gamified Quests & Airdrop system, and an exclusive token-gated Whale Chat that unlocks for pixel owners.

#VectixBoard #Solana #MSImagineCup #BuildInPublic #Web3 #DigitalIdentity #Supabase #NextJS #IndieDev #BlockchainGaming

[Akintomiwa⚡ @OfficiallyXenos]

@ebukagaus very educative piece. thanks man

[Ebuka l Socrates🦙🐍🦜🦀 @ebukagaus]

Link:

https://t.co/4y8w1ln0dh

[Demola @DAMOZPIXIE1]

Introducing VectixBoard: A decentralized billboard built on Solana. 1,000,000 pixels. 100% On-Chain.

The Grid is infinite. Ownership is forever. 🌐✨

#Solana #Web3

[Akintomiwa⚡ @OfficiallyXenos]

@Zeeskylaw controversial topics>>>>>>

[Demola @DAMOZPIXIE1]

From a basic grid to a pro dashboard, turning digital real estate into a proper platform. 💎⚡️ #Solana #SolanaNFT

[Akintomiwa⚡ @OfficiallyXenos]

@jobosonchisa Damn, they come late to their shows?? That's sad. And they are the only guys i can swear that i will pay to watch anywhere in the world. Damn again sha.

[Akintomiwa⚡ @OfficiallyXenos]

Context: I was robbed and the thieves were able to access my GTBank app but not my Opay. What a 2025 man.

[Akintomiwa⚡ @OfficiallyXenos]

To think that i put virtually all my money in my GTBank thinking it was more secure than my Opay. I no fit wrap my head around the ease that account was penetrated man. 😤

[Demola @DAMOZPIXIE1]

Just completed the ASI Autonomous Agents Platform for the ASI Alliance Hackathon.

The platform features three autonomous agents in healthcare, finance, and logistics.
They communicate in real time using the Chat Protocol and MeTTa Knowledge Graph.

Live demo: https://t.co/gdAcfHL19Z
Source code: https://t.co/p6QN1I3MXY

Built with https://t.co/fUS68b8dLY uAgents and SingularityNET MeTTa.

#ASIAlliance #AutonomousAgents #FetchAI #SingularityNET

[Akintomiwa⚡ @OfficiallyXenos]

Solid work turning a theory-heavy topic into something measurable. 👏

[Demola @DAMOZPIXIE1]

Just shipped a Blockchain Sharding simulator in Rust

I wanted to benchmark the cost of "Cross-Shard Communication" vs. raw parallel speed.

The Stack:
•Rust Threads for Validator Nodes
•Arc<Mutex> for safe state management
•Custom 2-Phase Commit for settlement

The Verdict: Parallelism wins. Even with 100% cross-shard traffic (doubling the workload), the sharded architecture beat the monolithic approach.

Code is open source 👇
https://t.co/rZtzwYnlrN

#Rust #BlockchainDev
#SystemsEngineering #Coding