Gryphus ☣ Mario

I break things and code stuff to break more

[Gryphus ☣ Mario @Grifo]

Tired of not understanding s**t about what calls your fav DApp is making? Decoding with cast commands? ABI-hunting on Etherscan?

Some time ago I released Web3 Decoder, a Burp Suite extension to make your life a bit easier.

I just released a big update!

https://t.co/I5gIqGFfPM

[Gryphus ☣ Mario @Grifo]

LLMs allowing you to revisit projects you had abandoned seems like a dream!

Hope this ext. is useful to some of you folks. If you find some common unsupported multicall/proxy/wallet/nested patterns, feel free to create an issue so we can add support for them!

[Gryphus ☣ Mario @Grifo]

Tired of not understanding s**t about what calls your fav DApp is making? Decoding with cast commands? ABI-hunting on Etherscan?

Some time ago I released Web3 Decoder, a Burp Suite extension to make your life a bit easier.

I just released a big update!

https://t.co/I5gIqGFfPM

[Gryphus ☣ Mario @Grifo]

And everything coded without LLMs!

Well... ok, no.

[Daniel López @Fronfreke]

@automattic and @photomatt gave me the opportunity to finally channel my creativity and passion into something big 🚀 and recently with @glomenar as first mate, we’re building the future of desktop WordPress together. Join and contribute!👇
https://t.co/r1Alxag3Aa

[☠ Dani Martinez ☠ @dan1t0]

🎣 Just released: GoPhish MCP Server!

✨ Features:
🎯 Campaign management (CRUD + analytics)
👥 Groups, templates, pages, SMTP profiles
📊 Advanced analytics & reporting
🔍 Smart search & utilities

https://t.co/tV9s12ru79

#GoPhish #MCP #AI

[Gryphus ☣ Mario @Grifo]

Whether you're worried about the keys on your project, or about managing institutional funds, I hope you can get some (good) ideas from these posts!

[Gryphus ☣ Mario @Grifo]

The final part of our State of the Art of Private Key Security in Blockchain Operations series is live! 🔐

[4/4] Approvals & Policies

Talking about Approvals (by humans) & Policies (what can be signed):
🔗 https://t.co/HAgoP6GUt1

🧵 A quick recap of the full series 👇

[Gryphus ☣ Mario @Grifo]

[3/4] Private Key Storage & Signing Modules

A look into the pieces that actually hold and use private keys.
HSMs, Enclaves, and types of storage for operational keys (including where you should never store them)

🔗https://t.co/3PKTvH8uT8

[Gryphus ☣ Mario @Grifo]

[2/4] Common Custody Solutions Architectures

Showcasing some of the common architecture designs (off-chain centralized, off-chain MPC, on-chain) and their core components

🔗 https://t.co/IK5xfy4uKf

[Gryphus ☣ Mario @Grifo]

[1/4] Concepts, Wallet Types & Signing Strategies

Foundations of key management: Multisig, MPC, offchain vs onchain, and how these models shape custody design.

🔗 https://t.co/KCQdLdkwbk

[Gryphus ☣ Mario @Grifo]

In case you missed the earlier parts 👇

[1/4] Concepts, Wallet Types & Signing Strategies
🔗 https://t.co/KCQdLdjYlM
[2/4] Common Custody Architectures
🔗 https://t.co/IK5xfy3WUH

[Gryphus ☣ Mario @Grifo]

Part 3 of our Private Key Security for Blockchain Operations series is live!

This one dives into the heart of custody solutions — the Private Key Storage & Signing Module 🔐

Do's and Don'ts of private key storage!

🔗 https://t.co/3PKTvH8uT8

[Gryphus ☣ Mario @Grifo]

We just published the first two posts of our "State of the Art of Private Key Security in Blockchain Operations" series!

🔹 [1/4] Concepts, Types of Wallets & Signing Strategies
🔹 [2/4] Common Custody Solutions Architectures

https://t.co/KCQdLdjYlM

https://t.co/IK5xfy3WUH

[deebeez @deeberiroz]

We @VennBuild just discovered a critical backdoor on thousands of smart contracts leaving over $10,000,000 at risk for months

Along with the help of security researchers @dedaub @pcaversaccio, the seals team @seal_911 and others, we managed to rescue the majority of funds before the attacker could make their move.

This is the story of how a sophisticated attacker (cough Lazarus) put backdoors in thousands of contracts and ALMOST got away with it 🧵