Ab Sattar

Dev || open source enthusiastic || Github:

[WhiteHatMage @WhiteHatMage]

Was the Raydium exploit performed without access to the source code? I can't find it anywhere

[0xaudron @0xaudron]

Things to not vibe code :
- Security
- Cryptography
- Smart contracts
- Wallets

The cost could be millions and billions paid by your clients and users.

[Michal Malewicz @michalmalewicz]

They’re backing down. It’s over.

[Ivan @Ivanklydz]

Few weeks ago, I found a vulnerability that allows me to use all models for free thru a vulnerable endpoint, anthropic team closed it as informative, today I was checking if the vulnerability still works with fable 5, turns out they patched it silently, shame on you.
#hackerone

[Yuchen Jin @Yuchenj_UW]

Before AI, I’d spend a weekend building 1 useless app.

Now I can build 67 useless apps over a weekend, each with a logo, a fancy webpage, and 0 user.

[Web3Privacy Now @web3privacy]

Decentralization without privacy is incomplete and vice versa.

[LonelySloth @lonelysloth_sec]

Almost every bug I report is on a code base audited by "top firms".

Some were math issues in code written and reviewed by BigTech alumni with PhDs in cryptography from Stanford/Ivy-League.

Everyone misses bugs. I miss too. AI misses bugs.

Let's stop talking about finding bugs missed by lots of experts as something new and unheard of.

It's so common I've been making a living off of it for 5 years straight.

I'm not the only one.

[It's FOSS @Itsfoss]

The open source project that single handedly destroyed the SSL certification industry.

[PSE @PrivacyEthereum]

1/ New post alert! ⏰

Is onchain ZK PQ-ready? Round two of putting WHIR on Ethereum gave us an inconvenient result: small fields shrink proofs but make them challenging to verify. We rebuilt WHIR verifier over a 31-bit KoalaBear field and measured where the gas goes.

https://t.co/xFjBJtKK1n 🧵

[0xflorent.eth @0xFlorent_]

First white-hat exploit on Ethereum: I unlocked 1,003.62
Ξ ($2,000,000) trapped in a 2016 ICO smart contract
for 9 years.

The 48 original investors can now claim their funds.

[Eli Ben-Sasson | Starknet.io @EliBenSasson]

Bullish on Starknet
Bullish on Bitcoin
Bullish on Zcash
Bullish on Ethereum
Bullish on Near
Bullish on Solana
Bullish on ZK
Bullish on Crypto

[chrisdior @chrisdior777]

🚨 JUST IN:

@gravity_bridge appears to have been exploited for ~$5.4M.

Gravity Bridge connects Ethereum assets with the Cosmos ecosystem.

Root cause: compromised bridge contract key or signing/authorization path.

Another cross-chain bridge. Another key compromise.

[ddimitrov22 @ddimitrovv22]

"All of DeFi is unsafe" is going around today.

AI did not invent new bug classes. It mass-produces the old ones.

Reentrancy, access control, broken assumptions. Same bugs, shipped faster and with more confidence.

Real audits are the only way to catch them.

[Ab Sattar @hello_sattar]

Eid Mubarak fam

[Ab Sattar @hello_sattar]

@kacieahmed Eid Mubarak bro

[PSE @PrivacyEthereum]

We built a real-world OpenAC implementation for privacy-preserving proof of personhood.

It uses an existing government-issued credential, proves eligibility in zero knowledge, supports revocation checks, and runs the proof flow on mobile devices.

Check threads for links and summary 🔗

[Ab Sattar @hello_sattar]

@jack__sanford 🙌🙌

[Ab Sattar @hello_sattar]

@0xWeb3boy Congratulations man

[Jahir Sheikh @jahirsheikh8]

“CLAUDE I’VE EXPLAINED THIS BUG TO YOU 10 TIMES AND YOU STILL KEEP BREAKING IT, THINK LIKE A SOFTWARE ENGINEER WITH 15 YEARS OF EXPERIENCE AND FIX IT PROPERLY MAKE NO MISTAKES”

[Ab Sattar @hello_sattar]

@sherlockdefi 👀👀