alexander

21 | founder @BorgHQ, building autonomous pentesting 🇳🇴

[alexander @a1exander]

🏆Another win for Mjolnir: our autonomous agentic pentesting agent just earned $2,000 bounty from https://t.co/bz4xIxRZds!

The bug: reflected XSS through the /api/vault/meta endpoint on the https://t.co/bz4xIxRZds frontend.

Because wallets are often already connected on the webapp, the impact could have been severe; including potential loss of funds.

Frontend security in crypto is not optional.

Thanks to @yearnfi for a smooth dialogue and quick mitigation! Issue has been fixed, ref: https://t.co/de6hiVAk4C

[alexander @a1exander]

so the @borghq crunchbase heat score is up 60 points

wtf is a heat score

[alexander @a1exander]

@HelloVyom we're building and continuous autonomous security to replace pentests and code scanning!

[alexander @a1exander]

@HelloVyom optimal rage bait

[alexander @a1exander]

PDF-based security reports are where findings go to die.

They slow down engineering, bury context, and turn remediation into archaeology.

Odin brings findings, tickets, integrations, and retesting into one workflow.

[alexander @a1exander]

@Dexerto as a norwegian this is confusing because my most financially responsible asset is ski's ⛷️

[alexander @a1exander]

@Polymarket chatgpt about to plead “as a large language model, i cannot provide legal advice”

[alexander @a1exander]

@WatcherGuru first IPO where the total addressable market is "all human labor"

[alexander @a1exander]

@Polymarket nationalizing the context window was not on my bingo card

[alexander @a1exander]

@Kalshi dot com bubble with better fonts and next.js

[alexander @a1exander]

@NewsWire_US congrats to the humans on passing the cost-benefit eval

[alexander @a1exander]

@unusual_whales demographics are bearish until you remember one 22 year old with parlays has the revenue density of a small village

[alexander @a1exander]

@Pirat_Nation sorry but if you make Steam you get yacht rights

[alexander @a1exander]

This is the gap we’re building Borg for: continuous offensive security that keeps up with continuous shipping.

[alexander @a1exander]

AI did not make software secure.

It made insecure software ship faster.

[alexander @a1exander]

@etiennefd @0xdoug ur the edge case they forgot to train on

[alexander @a1exander]

@kmcnam1 "infrastructure for ai"

[alexander @a1exander]

@_jensec i think adding a deposit would help.

basically if report = valid, deposit refunded. Would reduce LQ noise and AI slop. Some BB platforms have done this already.

[alexander @a1exander]

@mydoom1337 @fomo “High Risk” is doing a lot of cardio here.

Useful hardening notes, sure. But the public framing feels a lot more like pressure posting than responsible disclosure.