IVAYLO

web3 security researcher

[IVAYLO @ivxylo]

@DidiTrading dm'd

[IVAYLO @ivxylo]

these concerns don’t make sense if you think about it for more than 30 seconds

human creation can exist in an AI age, nothing will prevent you to create or consume other people’s work

the same applies for human knowledge, those curious enough can still pursue education. if anything it won’t be much different than the current state of society. the average person on the street knows so little about the world around them and has completely outsourced much of their thinking to others that it won’t be that different

[IVAYLO @ivxylo]

@VittoStack waiting for that dm!

[IVAYLO @ivxylo]

@CSP_Trading guessing last week was pretty good though, a lot of favorites choked

[IVAYLO @ivxylo]

@VittoStack hi, interested!

[IVAYLO @ivxylo]

@svbmrgd is this a western europe thing? in ee everyone has AC, to the point where you even get these ugly commie blocks littered with external AC units all over

[IVAYLO @ivxylo]

@XBTaiga congrats man, keep us posted on the farmer arc

[IVAYLO @ivxylo]

@matthewabides @zachxbt this is the most pathetic post I’ve seen in a while

you losers were really pisses he kept exposing your shitcoin projects weren’t you

[deadrosesxyz @deadrosesxyz]

absolutely heartbreaking.

code4rena was what started the careers of many of my friends and me. they showed us the great opportunities that web3 security has to offer and created many millionaires.

will be eternally grateful to them.

[IVAYLO @ivxylo]

@ParlayItGG send it

[IVAYLO @ivxylo]

@Domahhhh @ktwebb2 @metzgov Still, why would it be bad? The point of the market is to find out if they are running or not. You want insiders to move the odds to reflect reality

[IVAYLO @ivxylo]

@tomdnc wdym if we’ll see a day? literally happened yesterday with the april 7 ceasefire whales were bonding at 98 cents when it flipped the last few hours

even worse was the iran strike market where just 1 guy lost over 5 mill

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[IVAYLO @ivxylo]

@gjaldon sent a message, could you please check your DMs

[Will Manidis @WillManidis]

https://t.co/G3h719xZL2

[IVAYLO @ivxylo]

@zacodil centralization issues are always treated as out of scope by project teams

surely you know that the majority of protocols have the exact same permissioned functions right? it's up to the team to secure their keys

[IVAYLO @ivxylo]

@0xAnteater circumventing kyc is one of the easiest things for bad actors.

pretending it prevents crime is laughable

[IVAYLO @ivxylo]

@StaniKulechov won’t private credit see even more pressure now with the war in the ME?

gulf states are major players there and by how things are going they’ll probably be needing their cash back

[IVAYLO @ivxylo]

@ZachhC @AlanRMacLeod @Polymarket didn’t similar incentives exist even before Polymarket? you could still profit from such decisions, just through different financial instruments

[IVAYLO @ivxylo]

@izebel_eth yes that’s the point but all these retards have no idea what prediction markets are or how they work

insiders are the most informed thus influence markets towards the most accurate outcomes. if there are people willingly giving up their money for the cause let them