John J Abraham

Blockchain through the security lens. Security - Polygon Labs @0xPolygonLabs.

[Mudit Gupta @Mudit__Gupta]

Ledger just released a new update for Nano X that allows social recovery of your seed phrase.

It encrypts your seed in 3 shards and sends it to different entities that can then reconstruct the seed for you post ID verification.

It's a horrendous idea, DON'T enable this feature.

[John J Abraham @j2abro]

@laurashin One reason for the overwhelming + response may be that no one comes more prepared to an interview. Thanks @laurashin - my time with your show has been time well spent.

[Hexagate @hexagate_]

There is a new phishing contract called "claimRewards" which attempts to drain wallets. The Hexagate extension (https://t.co/PFqqrINb2g) detects this malicious contract and indicates this is a malicious tx and a malicious website.
Anyone can install the extension to stay safe!

[John J Abraham @j2abro]

Ha ha, classic!

[John Hilliard @praetorian]

Zoom calls brilliantly illustrate the TCP 3-Way Handshake in action.

[John J Abraham @j2abro]

Well the crowd at the @chainalysis conference looks different.

[John J Abraham @j2abro]

@Mudit__Gupta is such a storyteller. Awesome explanation!

[Mudit Gupta @Mudit__Gupta]

A rogue validator on Flashbot seems to be exploiting MEV bots. Over 25m USD already stolen.

The validator takes a sandwich bundle from the MEV bot and replaces the victim transaction with it's own that exploits the MEV bot instead.

Here's how it works -

[John J Abraham @j2abro]

Hey @JackNiewold thanks for the follow. Oops that was your twin: @JackNiiewold_ .

[Hexagate @hexagate_]

The @Arbitrum Foundation has just announced an official airdrop! 👏 🪂 While this was widely expected, scammers have been taking advantage of this possibility to run a variety of fake airdrop websites.

You can check your $ARB airdrop eligibility at https://t.co/IQNjnHM3UE. The site has a simple wallet connection option, after which you can check your eligibility. If you see a prompt that asks for keys, token approval, or anything besides viewing your wallet address, do not approve/sign!

[John J Abraham @j2abro]

A Visual Guide to @0x_PolygonZK

It’s a Rollup — It’s ZK — It’s EVM Compatible — Is it Magic?
One-page graphical view of Polygon’s zkEVM architecture: an attempt to understand this ambitious and complex feat of engineering.

[John J Abraham @j2abro]

@ky_gallivan @kidnappedkid @MuratTurfanda @Johnny_X100 @tweet8draft @igsnake @travsap @SVozgrin @misuraca85 @KiratThe @Mikeestreams1 @HurricaneSlim2 @theStCnLyr Sweet: make up for it by draining my wallet. Thanks bro.

[John J Abraham @j2abro]

@NickDeTurris @circle Nice scam bro. Domain registered today. So much for verified twitter.

[John J Abraham @j2abro]

First @silvergatebank at #128 by assets, now @SVB_Financial #16 (!) largest US bank by assets, per federal reserve.
https://t.co/N8iCHdoTfv

[Justin Elze @HackingLZ]

Wonder what kind of phishing we will see playing off of SVB the next few weeks and months.

[John J Abraham @j2abro]

SVB: from their website: "we bank nearly half all the US Venture-backed startups"

[John J Abraham @j2abro]

Spending some time looking at @0xPolygonZK.
I mean, is this perpetual motion?
- Scales Ethereum with low cost per transactions
- Leverages Eth security as a rollup,
But wait there's more:
- Somehow manages EVM support in ZK proofs

[John J Abraham @j2abro]

Weird ERC20s - Thanks to @deanpierce for a heads up on this handy list of non-standard token implementations:
https://t.co/Pj7gpELB1r

[Tenderly @TenderlyApp]

❓How many requests do you need to examine transaction execution down to the last detail? One – tenderly_traceTransaction.

You can run our custom JSON-RPC via Tenderly Web3 Gateway and replay a tx after its execution. 🧵

Interested? Start here 👇
https://t.co/zP7nnsRcxN

[John J Abraham @j2abro]

and the link....
https://t.co/nY6GTZ7mQO

[John J Abraham @j2abro]

Here's the one page infographic for my bridge security post.