Cilada Cripto

Não somos um site de denúncias. Atuamos como um Tradutor Cognitivo e uma camada de Proteção Civil que conecta as pontas soltas do ecossistema

[Cilada Cripto @cilada_cripto]

O vídeo de Boris sobre o Claude Code oferece diversas dicas práticas para maximizar a produtividade ao usar essa ferramenta de assistência de codificação. Aqui estão as principais recomendações e como executá-las:

1. Configuração Inicial e Ambiente
Setup do Terminal: Execute terminal setup para habilitar o uso de Shift + Enter para novas linhas, tornando a escrita de prompts mais fluida (3:05).
Temas: Utilize o comando theme para alternar entre modos claro, escuro ou daltônico (3:13).
GitHub App: Instale o app do GitHub para permitir que o Claude interaja com issues e pull requests diretamente através de @mentions usando slashinstall github app (3:20).
Ditado: Para prompts complexos, use a funcionalidade de ditado do seu sistema operacional (como no macOS) para falar seus comandos em vez de digitar (3:45).
2. Domine o Codebase Q&A (Primeiros Passos)
Exploração: Antes de editar código, peça ao Claude para responder perguntas sobre o projeto. Exemplo: "Como esta função é usada?" ou "Como instanciar esta classe?" (5:41). Ele não faz apenas uma busca de texto, mas analisa a estrutura real.
Git History: Pergunte ao Claude sobre o histórico do Git para entender por que certas decisões foram tomadas, como "Por que esta função tem 15 argumentos?" (6:05).
3. Fluxos de Trabalho Eficientes
Brainstorming e Planejamento: Nunca peça algo complexo diretamente sem um plano. Instrua o Claude: "Antes de escrever código, faça um plano e peça minha aprovação" (9:08).
Iteração com Feedback: Dê ao Claude ferramentas para verificar o próprio trabalho, como testes unitários ou capturas de tela (Puppeteer). Isso permite que ele corrija erros sozinho (11:15).
Git Automático: Utilize o comando commit push para que o Claude cuide de criar o branch, fazer o commit, aplicar o formato correto e abrir o Pull Request (9:26).
4. Gerenciamento de Contexto (Claude.md)
Claude.md: Crie um arquivo chamado claude.md na raiz do projeto. O Claude lê este arquivo automaticamente ao iniciar, sendo ideal para incluir comandos bash comuns, guias de estilo e arquitetura (12:40).
Memória: Use o caractere # seguido de uma instrução para gravar algo na memória do Claude, permitindo que ele se lembre de preferências ao longo da sessão (17:58).
5. Atalhos de Teclado Essenciais
Shift + Tab: Ativa o modo de aceitação automática de edições (pule a confirmação manual de cada linha) (19:07).
! [comando]: Executa comandos bash localmente, mas mantém o resultado no contexto do Claude (19:43).
Esc: Interrompe qualquer ação do Claude instantaneamente de forma segura (20:06).
Control + R: Exibe a saída completa do contexto visualizado pelo Claude (20:41).
6. Uso Avançado (SDK)
CLI Integrável: Use o Claude Code como um utilitário Unix. Com o flag -p, você pode passar prompts e receber retornos em JSON, sendo excelente para automatizar fluxos em CI/CD ou resposta a incidentes (21:04).

[Cilada Cripto @cilada_cripto]

@p2pmebrasil @OKXBrasil sugestão de leitura

[Cilada Cripto @cilada_cripto]

@jordanzkmod @p2pmebrasil @alienamarela Estamos juntos nessa corrida por mais proteção no mercado crypto. Isso passa por trazer temas como esse envolvendo segurança e compliance de quem presta serviços com cripto.

[Cilada Cripto @cilada_cripto]

Mais um artigo no espaço cedido pela @p2pmebrasil . Agradecimentos a @jordanzkmod por permitir que sua história de perda pudesse ser usada como um alerta para os usuários de carteiras na rede Solana. Parabéns a @alienamarela por conseguir traduzir para uma linguagem mais acessível um texto com tantos termos técnicos.

[P2P.me Brasil @p2pmebrasil]

https://t.co/g5Q0TbqVz6

[Cilada Cripto @cilada_cripto]

Temos alguém apelando para a sensibilidade do atacante da Kelp DAO. 😅

[don @Thedonkey]

Launching SDK - you’ll use the protocol as the on off ramp for your app

Building P2Pme on @solana - ofc, we are futards from @MetaDAOProject , talking every week at @ownershipfm , we have to have it

Expanding to new countries and currencies - launching Colombia on Monday, Nigeria is live, we just launched USD and EUR using revolut (use this and then send money back home), and finding leaders to start circles in all countries with instant payments around the world (dm me)

Pushing growth - all countries with daily refund campaigns, creators bounties starts next week in Mex, vez and Nigeria, hiring ambassadors and YouTube content creators, referral links give 1% from users total volume, first 100 users in new countries earn $5 refund from their first order

We are here, and we are working

[Cilada Cripto @cilada_cripto]

https://t.co/RNbtsL8CF9

[TrustSec @TrustSecAudits]

We challenged the three leading LLMs to a pop quiz on a fairly basic EVM mechanism, and all failed spectacularly. They were caught red handed hallucinating how Solidity behaves to fit a simplified world view.

This is not a one-off thing. For anything outside the common knowledge, models often just repeat what they happened to dig up in a corner of the internet, i.e. the garbage in, garbage out problem.

In an era where devs are mostly plumbers orchestrating and merging AI code, and many auditors are focusing on the latest SKILL.md to audit for them, it pays to take a step back and ask, are we moving too fast?

The same models that are confidently spouting nonsense are the ones writing much the next generation of DeFi (and most other software). How well we resist the urge to trust it and keep validating primary sources, will determine the security of future software.

[Cilada Cripto @cilada_cripto]

@EuAlePavanelli Será?

[Cilada Cripto @cilada_cripto]

@GeorgeVieiras @EuAlePavanelli será?

[QuillAudits 🥷 @QuillAudits_AI]

🚨 TMM/BSC-USD pool on PancakeSwap just got drained for $1.66M

The attacker played a long game, accumulated 1.9M LP tokens across 44 wallets 11 hrs before the exploit, then executed a single atomic tx to rug the entire pool

Attack tx:
https://t.co/ePt9guCA4y

Attacker LP token accumulation transactions:
https://t.co/DBRtefDwaH

Here's the full breakdown 👇

[VECERT Analyzer @VECERTRadar]

🚨 CYBER THREAT INTELLIGENCE ALERT: ALLEGED CRITICAL COMPROMISE – CENTRAL BANK OF BRAZIL (BCB)

An offer has been detected for the sale of alleged administrative access (unverified) to the portal https://t.co/Vr2mrdR4wx—a critical hub for the Financial System Network (RSFN) and the PIX payment ecosystem in 🇧🇷 Brazil.

👤 Threat Actor: pstipwner

📍 Target: Central Bank of Brazil (BCB) / PSTI (Information Technology Service Provider)

🔑 Incident Type: Network access sale / Alleged administrative credential breach.

📉 Verification Status: PENDING. No definitive technical samples (PoCs) have been published, although the actor claims to have established persistence and alleges prior sales of certificates.

Monitor:

https://t.co/wk9bZJ3laQ

#Cybersecurity #PIX #CentralBank #Brazil #ThreatIntelligence #PSTI #CyberAttack #VECERT #DarkWeb #InfoSec #UnverifiedAllegation

[Cilada Cripto @cilada_cripto]

Projetos crescem e a mentalidade da equipe parece que diminui

[QuillAudits 🥷 @QuillAudits_AI]

We just finished a deep forensic breakdown of the Drift Protocol $285M exploit.

This wasn't a smart contract bug.

It was the most sophisticated multi-vector DeFi attack we've analyzed: oracle manipulation + social engineering + Solana primitive abuse + governance capture.

Here's what ACTUALLY happened. [1/12]

[Cilada Cripto @cilada_cripto]

@QuillAudits_AI Congratulations on your analysis and teaching skills.

[Cilada Cripto @cilada_cripto]

@ojedabtc @Dennyctorres E se ele mandar prender Satoshi ou mandar desligar o computador do BTC? 😱

[don @Thedonkey]

Most protocols hit a wall when they try to go global. Operations become the bottleneck. You hire more people, add more processes, create more overhead. Before you know it, you're running a traditional company instead of building a protocol, or as Sheldon told me: 'let's not create an empire.'

When we launched @p2pdotme in Brazil (@p2pmebrasil) and Argentina (@p2pmeargentina), we saw this firsthand. We recruited merchants, onboarded them, handled disputes, managed liquidity. As we grew, we hired people to help. Then more people. Then more processes. And at some point, we realized: this doesn't scale.

Every new country means new languages, new payment rails, new regulations, new cultural nuances. If we tried to manage all of this from a central team, we'd need hundreds of people. We'd be slow. We'd make mistakes. We'd burn cash. More importantly, we'd be building a company, not a protocol. And that's not what P2Pme is meant to be.

Circles of Trust is this new technology that we designed for scaling P2Pme to every country without scaling our team linearly. Here is how it works:

Centralized operations are a trap. You think you're building efficiency by keeping control. But what you're actually building is a bottleneck. Every decision flows through you. Every new market depends on your bandwidth. Every problem lands on your desk. The central team becomes the limiting factor in growth.

So how do we remove this bottleneck? How do we scale operations while staying lean? The answer: parallel computing.

In computing, parallelism means running multiple processes simultaneously instead of sequentially. It's how modern systems handle massive scale.

We applied the same concept to operations. Instead of one central team handling every market sequentially, we enable multiple independent operators to run their own markets in parallel. Each operator manages their own circle, a network of merchants serving a specific region or community. They recruit merchants, ensure liquidity, handle local operations. All independently. All simultaneously.

One central team managing 50 countries is slow, expensive, and bottlenecked, however 50 independent operators managing their own circles with 100 merchants each is fast, efficient, and parallel. This is Circles of Trust.

A Circle is a community-operated network of merchants, managed by a Circle Admin, that are typically local P2P traders who already understand their market. They know the payment methods, the local dynamics, the trusted players. They're not employees. They're independent operators with skin in the game. They recruit and onboard merchants in their region. They ensure liquidity is available for users. They maintain operational standards defined by the protocol, they build their own community of trusted merchants, and they earn directly from their work.

Circle Admins receive 0.2% of all transaction volume that flows through their circle. If their circle processes one million dollars in volume, they earn two thousand dollars. Simple. This aligns incentives perfectly. The more volume their circle handles, the more they earn. They're motivated to grow liquidity, onboard good merchants, and keep operations running smoothly.

Not only that, but with the most recent deploy of COT, now they can also stake capital into their circle.

When they do, they earn a portion of the merchant fees proportional to their stake. This creates additional skin in the game. They're not just operators. They're investors in their own circle's success.

Circle Admins operate with full autonomy. They decide which merchants to onboard. They manage their local community. They solve local problems with local knowledge. But they operate within protocol-defined rules. Smart contracts enforce standards. On-chain data creates transparency. The protocol handles the infrastructure: payments, reputation, limits, disputes. Local operators handle local operations. The protocol handles global infrastructure.

This separation changed everything for us. It means a Circle Admin in Nigeria can build a thriving network of merchants using local bank transfers, while another in Philippines focuses on Instapay payments and another in Colombia manages their local community. All running in parallel, all independently, all without the core team being involved in day-to-day operations.

With Circles handling local operations, what does the global team focus on? Automation. AI. Removing humans from the loop. How do we make this protocol run with fewer people, not more?

That means automating repetitive processes. Every manual task we eliminate is a task that can't become a bottleneck. It means building AI-powered customer support, so users get instant help, 24/7, in any language, without waiting for a human to wake up in the right timezone. It means developing AI-assisted dispute resolution that analyzes transaction patterns, flags anomalies, and suggests resolutions faster and more consistently than manual review. It means creating intelligent analytics that help us understand what's happening across all circles in real-time, spotting problems before they become crises. And it means building better tools for Circle Admins so they can do more with less effort.

These are perennial contributions. They compound over time. Every automation we build makes every circle more efficient. Every AI model we train makes the protocol smarter. The goal is simple: make P2Pme less human-dependent every single day. Not because we don't value people, but because we want the protocol to be anti fragile. We want it to work even when the team is asleep. Even when no one is watching. That's what a real protocol looks like.

Most crypto projects talk about decentralization but run like traditional startups, with centralized teams making all decisions and handling all operations. Circles of Trust is our answer to a fundamental question: how do you actually decentralize operations? Not just decentralize the ledger. Not just decentralize governance. But decentralize the actual day-to-day work of running the protocol.

The result is a system that scales without linear headcount growth. It adapts to local markets through local expertise. It aligns incentives between operators and the protocol. It reduces single points of failure. It becomes more resilient over time, not more fragile.

Circles of Trust isn't just an operational model. It's a philosophy. Trust local operators to handle local operations. Give them autonomy and direct economic incentives. Build global infrastructure that empowers them. Automate everything that can be automated. Use AI to handle what humans used to do manually. Stay lean at the center. Scale at the edges.

This is how P2Pme will be in every country. Not by hiring thousands of people, but by enabling thousands of independent operators to build alongside us, supported by technology that never sleeps.

Kudo's to the tech team for building such an amazing tech, now it's with operations to ship this globally.

Btw, @p2pmevenezuela and @p2pmemexico are already running on top of this.

[International Cyber Digest @IntCyberDigest]

‼️ Telegram allegedly has a CRITICAL zero-day vulnerability.

To exploit it, a threat actor has to send a corrupted sticker to their victim.

Telegram directly addressed the claim, stating the vulnerability does not exist.

We've asked the researcher for comment — stay tuned.

[don @Thedonkey]

Brazil's liquidity providers organized themselves in a Telegram group with 215 members (208 LPs)

It's the most active and bonded community I've seen, 215 ppl created a FIAT rail for users to be able to move R$ in seconds, and now they're moving $2MM in monthly volume.

@p2pdotme is a community driven project.
We build communities accross all countries we operate, we provide support, assistance and allow hundreds of ppl to make an extra money supporting the network.

This is how DeFi should look like.

[0xCokinha @0xCokinha]

Há quase um ano atrás, fui procurado pelo @Thedonkey para ajuda-lo no lançamento de @zano_project no Brasil.

Um pouco de desconfiança natural por parte dele, muito por conta do nosso mercado brasileiro, fiz um post de graça pra mostrar que eu entregava o que ele e Zano precisavam.

Desse post de graça nasceu a confiança mútua, e aí nunca mais paramos de trabalhar juntos. Logo depois veio a @p2pmebrasil, que ele me apresentou e eu me apaixonei. Me apaixonei porque encontrei a porta de saída dos bancos tradicionais com privacidade garantida que eu estava procurando.

Indiquei e indico pra todo mundo em todo lugar que eu estou. Foi graças à P2P que finalmente consegui criar um conteúdo ensinando as pessoas a sair do sistema tradicional com segurança e sem riscos.

Esse sentimento de ajudar, um pouco que seja, um produto a se tornar o principal protocolo p2p do mundo, é bom demais.

Conseguimos @Thedonkey, obrigado por confiar em mim, e na minha @0xFantinha, agora VAMOS DOMINAR O MUNDO!

[Cilada Cripto @cilada_cripto]

Blockchain pública com dados abertos, uma carteira com rótulo que identifica a equipe, concordo que foi algo precipitado a fazer, mas tem que forçar a barra demais para dizer que foi algo escondido, instigando a desconfiar do protocolo/serviço. Até onde sei, casos de manipulação ocorrem com carteiras não rotuladas que buscam se distanciar da fonte da origem dos recursos. Não foi esse o caso.