Vangelis tix Stykas

Father of two sons and ARIS fan.
Named NOT A UNICORN!🦄
IDOR as a service.
@_ifigeneia husband
Never ethical , mostly legal...

[Vangelis tix Stykas @evstykas]

@vxunderground Screw the malware.

GIVE ME THE C2!

[Vangelis tix Stykas @evstykas]

@Uniswap So you can tap on the sign saying "Onchain looks good here" but offchain you dodged a bullet because you don't interact with smart contracts in a vacuum.
Someone got popped , someone else bothered to tell you and you got saved.

[Vangelis tix Stykas @evstykas]

In Greece, we have a saying:
«Στο σπίτι του κρεμασμένου δεν μιλάνε για σχοινί.»
Roughly translated: "Don't talk about rope in the house of a hanged man." 🧵

[Uniswap @Uniswap]

*taps the sign*

[Vangelis tix Stykas @evstykas]

Funny story, @Uniswap.
On March 21, 2026, I reported that a developer working on your codebase had been compromised by the exact same North Korean operators who later hacked Binance.
I documented active credentials, access to your private monorepo, production release infrastructure, and a potential path to pushing malicious updates to mobile wallet users.
You acknowledged the report and classified it as "informational" and out of scope.
You were warned before this became your own disaster.
So perhaps a little less sarcasm about security and a little more appreciation for the people who help keep your users safe.

[Vangelis tix Stykas @evstykas]

@banthisguy9349 That's the past 4 years of my life :(

[Vangelis tix Stykas @evstykas]

I always find it poetic when I look at people screens who look at other people screens...

[MalwareHunterTeam @malwrhunterteam]

Same junk code highlighting here too: https://seafood-controllers-prev-publish.trycloudflare[.]com/static/app.js
😂
🤷‍♂️
cc @1ZRR4H

[Vangelis tix Stykas @evstykas]

@Gi7w0rm Wanna guess the next step ? Our lawyer (who also got paid and cost us money) says you should not publish for XYZ reason. You should be responsible and not do it.

[Vangelis tix Stykas @evstykas]

“You should never sit on vulnerabilities. Always disclose responsibly. Give vendors time to investigate and patch.”

Meanwhile, I APPARENTLY RUN A CHARITY.

Their external security consultants get paid by the hour to investigate my findings, while I'm expected to provide detailed technical analysis, reproduction steps, and evidence for free.

Everyone gets paid. Except the person who found the vulnerability. 🙃

[Vangelis tix Stykas @evstykas]

Also (because I am resentful as my CFO (and wife) says), lets not forget how @Uniswap responded to me saving them on the EXACT SAME SITUATION 8 months ago. Informational that saved them a couple of Billions.
Cause apparently we are all working on a charity.

[Orderly @OrderlyNetwork]

Security is never a finished job 🔒

We recently brought in security firm @kumioai to review our web and API stack, helping us identify areas to strengthen.

Their CTO spent nearly 2 years investigating North Korean hackers, uncovering evidence of 1,600+ affected organisations.

[Security BSides Dublin @BSidesDublin]

#BsidesDublin2027 - Provisional Date 22nd May 2027

We are back up and running and happy to announce a provisional date of the 22nd May 2027.

Here's to another great year 🎆

[Vangelis tix Stykas @evstykas]

Random people explaining NK tactics...
Me:

[Vangelis tix Stykas @evstykas]

@banthisguy9349 NK compromising dev and devops machines

[Vangelis tix Stykas @evstykas]

I hate to be that guy but… I TOLD YOU SO!

[Vangelis tix Stykas @evstykas]

@malwrhunterteam The title of my autobiography is
"I should have documented more and I should have read before". BUT the other chain you posted is definitely not test (will post later :D)

[Vangelis tix Stykas @evstykas]

People !
Stop probing criminal panels!
That's illegal (I might also want to do it and not have to fitler all the noise...).
Joking aside https://admin.msxf[.]info/api/devices. 122 devices most of them are just lfi prompts. This seems like a test env to me.

[MalwareHunterTeam @malwrhunterteam]

Also take a look at this panel titled "登录 - iOS漏洞后台": https://admin.msxf[.]info/#/auth/login
"欢迎使用iOS漏洞后台"
"iOS 安全漏洞研究与管理平台"
🤔
🤷‍♂️

[Vangelis tix Stykas @evstykas]

@malwrhunterteam http://175.100.42[.]26:8080/dist/ all the executables.

[Vangelis tix Stykas @evstykas]

from my good friend @n_o_t_h_a_n_k_s perfectly describes my last week

[Vangelis tix Stykas @evstykas]

Does the disclosure time start when you send the email or when you get the first response ?

[Vangelis tix Stykas @evstykas]

@malwrhunterteam As my 10 year old would say... SIX SEEEVEEEEN