0xAWM

@DeFiHackLabs Core Whitehat

[Chaofan Shou @Fried_rice]

Chinese LLMs can hack better than state-sponsored hackers with properly evolved harness -

Kimi K2.5 managed to find and exploit 6 vulnerabilities in browsers: a single page view or an extension install by victims equal full system hijack.

Check https://t.co/d0SZSf1KqF

[Chaofan Shou @Fried_rice]

26 LLM routers are secretly injecting malicious tool calls and stealing creds. One drained our client $500k wallet.

We also managed to poison routers to forward traffic to us. Within several hours, we can directly take over ~400 hosts.

Check our paper: https://t.co/zyWz25CDpl

[publicqi @publicqi]

i created a website indexing all pdas. feedback is welcomed

https://t.co/rzYenh5l6o

@solscanofficial please add this too

[Ethereum @ethereum]

0/ Autonomous agents are about to become Ethereum’s biggest power users.

Guest thread from @kleffew94 and @MurrLincoln on how a long-forgotten HTTP status code, ‘402 Payment Required’ could unlock a new frontier for Ethereum: agentic commerce. 🧵

[DeFiHackLabs @DeFiHackLabs]

DeFiHackLabs Web3 Talent Referral Program 🚀

Too many fake interviews and even North Korean IT worker scams lately — job hunting and hiring in Web3 is getting risky.
That’s why we launched this initiative.

If your company is looking for security talent or secure developers, fill out this form:👇

📌 Phase 1: We only recommend white hats from our community.

#Web3Security #Hiring #DeFiHackLabs

[Yaoyao👾 @ynonestop]

Very excited to have @ChazChazC and @fried_rice to join ChillCast (Prev. @gizmothegizzer & Yaoyao's talk) sharing about the latest updates of @solayer_labs

In this episode, we talked about:
1. wtf is infiniSVM?
2. what is hardware acceleration and why this matters?
4. re-staking to layer1, why and how?
5. 1m TPS is real or not?
6. how they gonna build the ecosystem

Promise a podcast full of challenging questions, even your grandma can understand hardcore tech-dives, fun conversations. 😎

Tune in!

[Georgios Konstantopoulos @gakonst]

reminder i am hiring for multiple engineering roles to work on reth, foundry, alloy & other rust infrastructure.

once in a lifetime opportunity to work with the team that shipped some of crypto's most impactful open source tools.

full time, remote, cash+equity. apply in thread.

[0xAWM @i0xAWM]

@gakonst @YQ996CO28254695

[0xAWM @i0xAWM]

@monad_xyz 0x21Ced36D3d1f57d29b44e5B80C3bea992082F368

[DeFiHackLabs @DeFiHackLabs]

很棒的活動🔥 很榮幸 DeFIHackLabs 成為技術支持社區.
共建🚀

[0xAWM @i0xAWM]

@agionchain 来张卡

[0xAWM @i0xAWM]

@OKxiaohai @morphnetwork 想要，谢谢老板

[0xAWM @i0xAWM]

@heyibinance @yanbo2004 @BNBCHAINZH @scriptdotmoney 脚哥的技术群

[sudo rm -rf --no-preserve-root / @pcaversaccio]

We, the Ethereum Cypherpunks, act on principles. We fucking care about privacy. We fucking care about security. We fucking care about censorship resistance. And we will always fucking defend these core principles. I wrote the Ethereum Cypherpunk Manifesto because this shit matters. If you're butthurt, go touch some grass and get a reality check. We, the Ethereum Cypherpunks, stand united in our pursuit of a more private, secure, and censorship-resistant future. Like it or not.
https://t.co/eXLKLAFlPe

[Tony KΞ @tonykebot]

It's tragedy for safe being compromised and thus harmed bybit 😢. Lesson here is NEVER TRUST.

The principle of this theory is validating everything on your own. 3-step checks are necessary:

1. Simulate to check the transaction outcome, Safe already integrated Tenderly so it's just one-click.

2. Cross-check pre-sign data on website and wallet extension. Rabby/MetaMask displays the data in a clean way. To, value, data, operation are the critical field you will be checking at.

3. Cross-check pre-sign data on wallet and hardware wallet. Match every critical field before you sign. Kudos to OneKey team!

[0xAWM @i0xAWM]

@scriptdotmoney @seaify1 还得是群友技术 KOL 信得过

[vectorized.eth @optimizoor]

Socrates was killed, Galileo was imprisoned, Turing was chemically castrated. But their ideas changed the world.

The historical norm has always been the good nerds losing in the short term.

This is why we fight for Ethereum.

[Immunefi @immunefi]

Tales from ETH Escape: Tony’s Lightning-Fast Win ⚡@tonykebot

Tony, a Web3 CTF enthusiast, stunned the ETH Escape crowd by solving a first-round challenge in under 10 minutes 🧠

In this interview, Tony dives into his approach to prioritizing quick wins, staying calm under pressure — and why he’s hooked on CTFs.

About Tony: Tony Ke, Blockchain Engineer @solayer_labs

Catch the full story of speed, strategy, and passion for onchain security 👇

Start exploring bounties on Immunefi: https://t.co/zolIJgZKoD

#EFxImmunefi

[𝕗𝕦𝕫𝕫𝕝𝕒𝕟𝕕 @fuzzland_]

Key takeaway from our security lead @tonykebot 👉 “always stay calm under pressure”

[DeFiHackLabs @DeFiHackLabs]

🔥We placed 7th in the first @xyz_remedy CTF of 2025! Competing against 1,904 teams for a prize pool of $52,000+, the competition was fierce.

Kudos to our teammates, especially those who dedicated their time despite the busy period leading up to Chinese New Year. 🙌

Thanks to @hexens for hosting such a great CTF – the experience was amazing! 🫡

We almost grabbed a flag in the final minute but were dramatically hit by a instance timeout. So thrilling – this is what CTF is all about. See you in the next CTF! 💪

#CTF #CyberSecurity #Teamwork