Michal

Director @sigp_io. Over a decade in web2 security. Currently securing critical blockchain protocols.

[Michal @TheKnapsy]

@mathsrick_ 462 (approx.)

[Michal @TheKnapsy]

@sigp_io Awesome work @shealtielanzz! 🚀

[Adam Cochran (adamscochran.eth) @adamscochran]

The day after the CEO lays off a ton of staff and says:

“Non-technical teams are now pushing code to production with AI”

@coinbase has a major outage on their trading engine, and even their status page doesn’t work.

😂

[Sigma Prime @sigp_io]

We're back from Svalbard, and Glamsterdam is coming!

The Lighthouse team just returned from Soldogn Interop in Svalbard after a week of @ethereum protocol work under the midnight sun.

[Michal @TheKnapsy]

@sigp_io @LidoFinance That's how it's done! 👏👏

[Sigma Prime @sigp_io]

https://t.co/ZMjVBlt6YO

[Sigma Prime @sigp_io]

Lighthouse v8.1.1 (Scary Terry) is out!

This is a mandatory upgrade for all users on prior versions due to a security fix. Please upgrade ASAP. Further details to follow.

Also fixes VC head monitor timeouts, DataColumnsByRange duplicate bug, and a slow memory leak.

https://t.co/oXesKeyjwI

[Sigma Prime @sigp_io]

We’re hiring a Cryptographer / Security Engineer to audit cryptographic protocols in Web3 systems.

The ideal fit has advanced knowledge of elliptic curves, pairing-based cryptography, and zero-knowledge systems, with strong systems programming skills in Rust, Go and Solidity.

[Chainlink @chainlink]

https://t.co/scrFShVF8G

[Boris Cherny @bcherny]

I'm Boris and I created Claude Code. Lots of people have asked how I use Claude Code, so I wanted to show off my setup a bit.

My setup might be surprisingly vanilla! Claude Code works great out of the box, so I personally don't customize it much. There is no one correct way to use Claude Code: we intentionally build it in a way that you can use it, customize it, and hack it however you like. Each person on the Claude Code team uses it very differently.

So, here goes.

[Vivek Raman @VivekVentures]

Ethereum is going to power the global financial system.

The ticker is $ETH.

[Sigma Prime @sigp_io]

It was a big few days at DSS for the Sigma Prime team. Proud to once again support this event as a sponsor and see our team contributing on stage. Shoutout to @ethzed, @kirkthebaird, @TheKnapsy, and @ToonVH_

Great sessions. If you missed them or want to rewatch, recordings below 🍿

[Immunefi @immunefi]

Balancer’s recent $100M exploit wasn’t about negligence or bad code.

It’s a reminder of the limits every protocol faces with today’s fragmented security stack.

Even mature teams using audits, bounties, and monitoring can still face blind spots because the tools don’t talk to each other.

Full write-up at Immunefi - https://t.co/8w6LU0X9nZ

[Steve 🇺🇸 @SteveLovesAmmo]

These are actually really cool

[JS0N Haddix @Jhaddix]

🧠 Did you know you can pipe into Claude Code?

Like:

cat logs.txt | claude -p "analyze for..."
strings bin.bin | claude -p "explain X" etc...

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

Now in #mimikatz 🥝, #mstsc credentials (passwords / PIN codes) for RDP / Remote Desktop Client
- ts::mstsc - on client credentials
- ts::logonpasswords - on server credentials
Does not rely on previously injected hook/library, useful on jumping servers

> https://t.co/Wzb5GAfWfd

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

So #mimikatz wanted passwords, and Terminal Server has some for us🥝

Cleartext passwords *decrypted* on a fully, up to date Windows 2019 Server
No library, no previous code injection, and doesn't use junk part of memory😉

Ping @jonasLyk, still in testing ... 🤪

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

I was told you like SCCM passwords & #mimikatz 🥝

Did you know SCCM *endpoints* can keep credentials of all your Network Access Accounts?

Time to try the new dpapi::sccm command and to check privileges associated to them 😉

> https://t.co/Wzb5GAfWfd

[Jasmin Landry @JR0ch17]

I just found this on a pentest, my password can run OS commands.... WTF 😬

[Michal @TheKnapsy]

@TheJesseMessy @dollyybird @newscomauHQ 3 more levels till the final boss