Boaz

crypto / product / cyber

[Boaz @boazeb]

Just shipped MCP for @papervault_xyz Your harness can now backup secrets from .env or cloud KV directly to encrypted paper, by locked with m-of-n keys.

Add PaperVault MCP to Claude Code ➡️ claude mcp add papervault

[Boaz @boazeb]

1/ Recently open-sourced a simple tool I built for my family years ago, which became a foundational part of my self-custody stack: a lightweight app for generating printable vaults that unlock with m-of-n printable keys.

[Boaz @boazeb]

@DesheShai Can’t wait to measure the quantum state of my single-use sig

[Boaz @boazeb]

@Web3_Devs @or_sattath @DesheShai Was a great event, thank you to the speakers, organizers and sponsors 🙌

[Malte Ubl @cramforce]

Token theft is a major problem and can easily cost $ millions.

The value of tokens is so high that attackers don't mind bad system prompt prefixes like "You are a support agent for X…" as witnessed by projects like

[Boaz @boazeb]

Unlocking a 2-of-3 paper vault

[Boaz @boazeb]

@geraldrsterling @papervault_xyz True… great feedback thank you 🙏

[Boaz @boazeb]

Just shipped MCP for @papervault_xyz Your harness can now backup secrets from .env or cloud KV directly to encrypted paper, by locked with m-of-n keys.

Add PaperVault MCP to Claude Code ➡️ claude mcp add papervault

[Boaz @boazeb]

1/ Recently open-sourced a simple tool I built for my family years ago, which became a foundational part of my self-custody stack: a lightweight app for generating printable vaults that unlock with m-of-n printable keys.

[Web3 Devs Underground @Web3_Devs]

"Where do you store the password to your password manager?"

@boazeb's answer: a paper vault. AES-256 encrypted, Shamir-split, unlocked by scanning two QR codes. All offline.

Watch Boaz walk through @papervault_xyz live in the latest edition of the Underground.

[Boaz @boazeb]

@arjunnchand I see it now, indeed got caught in spam

[Boaz @boazeb]

@arjunnchand

[Boaz @boazeb]

@arjunnchand just letting you know since I didn’t get a follow up, so thought you may have missed it. Anyway it does get your attention so there’s always that 🙂

[Web3 Devs Underground @Web3_Devs]

Root of Trust & Bearer Asset Inheritance | Web3 Devs Underground https://t.co/v4XQhZuZKO

[Boaz @boazeb]

Come hear me speak in 10 min about root of trust, social recovery and digital asset inheritance

[Web3 Devs Underground @Web3_Devs]

Root of Trust & Bearer Asset Inheritance | Web3 Devs Underground https://t.co/v4XQhZuZKO

[mononaut @mononautical]

yesterday someone permanently burned 107.13 BTC, worth ~$8.25m, by sending them to the "null" burn address.

can we figure out why? 🧵

[Boaz @boazeb]

@SaniExp The wallets seem to be funded around 2014 with few transactions since

[Sani | TimechainIndex.com @SaniExp]

🚨🚨🚨 Someone just broadcasted 5 transactions totaling 107 BTC to the Bitcoin "burn address" 1111111111111111111114oLvT2
😢😢

https://t.co/O8qeGjrzG9

[Xavier Damman 🌍🔅 @xdamman]

@penguinpecker1 @commonshub_bxl @monerium @gnosischain Mistake 1: those two keys belong to the same person and should have been on two different devices. They somehow ended up in the same metamask on his main computer.

Mistake 2: that person actually left the organization months ago and we should have removed his keys from the SAFE.

[Lenny Rachitsky @lennysan]

My biggest takeaways from @danshipper:

1. The future of work will happen inside Codex or Claude Code. Instead of putting AI into your SaaS tool, you’ll use your SaaS tools inside your favorite AI agents' in-app browser. Dan spends all his time in Codex now—writing documents, managing email, doing research, everything. He's using Google Docs, PostHog, and everything he needs within the agent's in-app browser. The agent can see what he’s doing, and has all of his context, so he and his agent collaborate quickly and super effectively.

2. Automation is a lie—every automation needs a human. Dan's company doubled in size this year despite being incredibly AI-forward. Why? Because in order to make automation work well, you need humans making sure everything keeps working. This is why benchmarks are misleading—they measure AI on problems we’ve already framed and can score, but there’s always a higher frame.

3. PMs will win the AI era. Marcus, a former PM who previously ran Axios’s writing product, joined Every after getting super AI-pilled. Now he runs their product Spiral, and ships faster than anyone on the team. He pairs technical knowledge with spiky product sense, deep user empathy, and an eye for what matters. Dan thinks any PM who gets really AI-native will be incredibly dangerous because the building is done for you—what matters is figuring out what to build and if it’s great.

4. Full-stack designers are becoming superheroes. Designers used to make beautiful interactions that engineers didn’t want to build or couldn’t execute properly. Now designers don’t need to hand things off; they can build it themselves. Designers are naturally creative people, and AI is the perfect tool for them because it lets them bring their vision to life without the traditional bottlenecks.

5. SaaS is not dead. In fact, Dan is bullish on SaaS stocks. When users bring their own AI (via Codex or Claude Code) to use SaaS products, the user—not the SaaS company—pays for tokens. This saves SaaS company’s margins. Since the agents need their own seats, Dan predicts that agents will create massive new demand for SaaS because there will be tons of agents using these products at high volume.

6. Every company will have one “super-agent” inside their Slack that every employee will use. Dan initially thought every employee would have their personal work agent, like a shadow AI org chart, but he’s completely flipped his view. He realized agents need humans who care about them. When someone gets tired of maintaining their personal agent, it becomes useless. The winning model is one forward-deployed engineer or AI-savvy person who maintains a company-wide agent (like Shopify’s River or Viktor), and then it trickles down to more specialized team agents as models improve and become less fiddly.

7. The AI job apocalypse is not happening, but you do need to evolve to stay relevant. Models make yesterday’s human competence cheap. But because everyone uses the same models, it all looks the same if you use it the default way; it becomes commoditized slop. Humans then take that frozen competence and use it to make something new and interesting for their specific situation. The key: “ride the models”—use them for everything you do, try new models when they drop, keep turning over rocks.

8. We will read way more AI-generated writing, and we will like it. Human writing is incredibly important for things that matter, but for internal docs, planning, and email, AI-generated is often better because most people are bad at writing strategy documents.

9. Build software for humans and agents to use together. The current model is building a CLI that an agent uses independently. Instead, you and your agent should be using the app together. This creates new design challenges—agents can make a billion requests in three seconds, so you need approval flows, inboxes that summarize what happened, logs, and easy rollback.

10. Forward-deployed engineers are the new most essential role. The big model companies have teams of people managing their internal agents, and those teams aren’t going away. It’s different from traditional software building, and certain engineers love it. As models get better, this role will evolve—you’ll be managing more agents doing more things.

[Jameson Lopp @lopp]

Swedish League of Legends streamer RATIRL reveals that armed intruders broke into his home, tortured him for hours, and demanded cryptocurrency he didn't have.

The robbers eventually left with only his Pokémon cards.

2 suspects have been arrested thus far.

[Web3 Devs Underground @Web3_Devs]

Coming Soon: Boaz Bechar (@boazeb) goes live on the Underground in just 2 days.

Root of Trust & Bearer Asset Inheritance:
How do you pass on a self-custody crypto wallet without compromising it while you're still alive?

📅 May 27 · 17:00 IL | 16:00 CET | 10:00 EDT
📍 Live on X, YouTube & LinkedIn

Register 👉 https://t.co/ZRxApVtgE0

[riptide @0xriptide]

We found multiple critical bugs in a well known Gnosis Safe Module recently (https://t.co/hjOmFAQvKl) and warned about the root level access that modules have when enabled

If you have a module that you have enabled on your Safe please drop it here and @therealgregoAI can take a look