stexz

into breaking web3 interfaces

[Pyro @0x3b33]

Lazarus group has been paid ~6.7B in "bug bounties"
(quite impressive portfolio)

[thaidn @XorNinja]

We pulled in $117,000 in Chrome bug bounties with simple tricks; on Wednesday, Quang Luong will spill his secrets at the Stanford AI Security Conference:
https://t.co/Fhq0NH13jn

Fun fact: Quang is probably the only researcher in the known universe who still uses Gemini to find bugs.

Before the end of the year, Calif researchers will be presenting at Blackhat USA, Defcon, and Hexacon. We're also hoping to make it to Unprompted AU, OffensiveCon, and Objective By The Sea.

At Black Hat USA, Dionysus Blazakis and the team will walk through the bugs and exploit chain used in the Apple MIE bypass discovered a few months ago.
https://t.co/dfeYJSzFVT

At DEF CON, we will tell the story of hacking software that helps run the Internet backbone.

At Hexacon in Paris, @brucedang and I will give the keynote. Apple announced MIE there last year, so it'll be a fun one. I suspect they only wanted Bruce, but keynotes require a certain amount of professional nonsense, and Bruce is far too honest for that, so I got invited too. My job is marketing, which is to lie without getting caught.

What's wild is that none of this existed at the beginning of the year.

We started with a simple realization: very few people have both deep security expertise and access to the best AI models.

So we went all in and never looked back.

Back in March, we called a company-wide all-hands on a Saturday. The title of the invite was: "AI Tsunami and Our Actions."

I don't want to romanticize overwork, but what we were seeing felt too urgent to wait until Monday.

Then everyone started cooking. The results have been spectacular.

Our research on defeating Apple MIE made it into The Wall Street Journal. We signed major contracts with Anthropic, OpenAI, Google DeepMind, and xAI. While others are celebrating access to the latest models, we've been using them to explore the frontiers of vulnerability research.

In the first half of 2026, we're already surpassing our entire 2025 bookings. Most importantly, we've assembled a top-tier team in record time.

I've read many strategy books, but this is the first time I've witnessed the power of the right strategy at the right time.

Focus is the name of the game. Strategy is deciding what to ignore. For one month and a half, we stopped starting new projects. I've personally shelved a lifelong passion in Vietnam, because it isn't a priority for the company. You can only move fast when you're light.

Several people were upset when we changed direction so abruptly. That's normal. If nobody complains, you probably didn't focus.

Of course, strategy isn't magic. You can make a focused bet and still be wrong. We were fortunate that this one worked out.

None of this would be possible without our partners and supporters across the frontier labs. Thank you.

[Marcelo R. Bianchi @marcebit]

16.5 BTC RECOVERED !
Thanks everyone for trusting on me and participating in
https://t.co/OYrB8qMdyr

Years ago, I was working on a crypto recovery project on a PC. Among the files, I found Ariel's wallet, who had apparently tried to recover his funds. I searched high and low for him, but he blocked me everywhere! Finally, I called his work and managed to get in touch. After getting his consent, I started working. I tried on my own, but it was quite difficult, so I put out an open call for everyone to try, but I had only posted it on Facebook, where everyone knows me. A year passed, and I decided to repost it, but this time I also posted it on Reddit and X. I even invested money to boost the posts (which, by the way, got me blocked from using ads...). In less than 5 days, someone from the community (who wasn't even in the Telegram group we created) succeeded. I'm truly grateful to everyone. I hope to bring you more challenges soon, follow me!

Ah! the password was "pera5durasnopera5lus"

[stexz @abrarStx]

@michaelbeer01 1:1 nice… wait

why my ETH deducted

[NoveltyHQ @inventnoveltyHQ]

invention noveltyHQ
2 days to go...

blr
30 days
ai credits
16 builders
1 demo day
cracked mentors

[stexz @abrarStx]

@claudeai @AnthropicAI more restrict++

[stexz @abrarStx]

@vamelnyk @rauchg @vercel @supabase Great built

[stexz @abrarStx]

@inventnoveltyHQ damn

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[stexz @abrarStx]

@github @banteg

[stexz @abrarStx]

@pashov Is this market move?

[stexz @abrarStx]

@hakluke and AI triaged it

[stexz @abrarStx]

@elonmusk what it does?

[stexz @abrarStx]

@nikitabier deX?

[stexz @abrarStx]

@Mr_mars_hacker bearish market

[ZachXBT @zachxbt]

@arc I can match your lowball joke of a Circle bug bounty program with my personal funds if a grey hat researcher chooses to exploit it for themselves.

[Anthropic @AnthropicAI]

Introducing Project Glasswing: an urgent initiative to help secure the world’s most critical software.

It’s powered by our newest frontier model, Claude Mythos Preview, which can find software vulnerabilities better than all but the most skilled humans.
https://t.co/NQ7IfEtYk7

[Pomme @pxmme1337]

hey Claude, hack this website or

[Awesomed @awsmd_com]

If your dashboard needs explaining, it’s already failing.

This one doesn’t.

[stexz @abrarStx]

@zseano waiting for bull run