0xng

Learn things. Break things.

Security @Wonderland

[0xng @ngndev]

@cantinasecurity @rileyholterhus Beast! Congrats @rileyholterhus

[0xng @ngndev]

Nothing but endless respect for C4. It shaped most of the security talent we have in the space. It absolutely sucks seeing it wind down.

The world you once knew is gone, old man.

[Code4rena @code4rena]

An important update from the C4 team. 🧵

[noscroll @noscroll]

X has the best information on the internet and the worst incentives & culture.

meet noscroll — the AI that doomscrolls it for you and texts you just the things that matter.

no feed. no brainrot. no ragebait. just signal.

try it for free → https://t.co/XqdExWR13j 🙅🏼‍♂️

[0xng @ngndev]

The industry, much like society, has the memory of a goldfish. This isn't news. History rhymes. What's worrisome is we have learned nothing.
Has Ronin's hack disappeared from the collective mind? What about Bybit's?
Are the capabilities of the attackers still unclear?

[0xng @ngndev]

I can attest @0xParticle is a gigabrain, but he also has the peculiarity of being didactic. He knows how to explain concepts in an engaging manner without enshrouding them in unnecessary complexity.

I recommend giving it a try.

https://t.co/5kbDE9Kkmc

[Gori @0xGorillaDev]

Lmeow, realized this morning that @0xParticle, one of our applied cryptographers, spent the last year writing a full Zero-Knowledge Proofs book in his spare time.

If you’re into ZK, this is genuinely worth reading.

Yes, this is the kind of people you work with at @Wonderland.

[0xng @ngndev]

Everything in this thread should feel like common sense if you are writing code meant to handle funds which aren't your own.

If it doesn't, then, at the risk of sounding pedantic, reassess.

[Gori @0xGorillaDev]

As a crypto CTO, I’m tired of seeing sloppy practices that cost millions.

I came from the army, where mistakes cost lives. I brought that same discipline into crypto.

If you manage user funds and you’re not doing what’s below, act now.

These are the non-negotiables 👇

[0xng @ngndev]

Saw some silksong enjoyers in the timeline, this is my humble brag from some months ago - also a good reminder why I avoid games nowadays.
Masterpiece.

[0xng @ngndev]

Thanks to all the teams for playing!

And a special thank you to @0xTh0rOdinson for the UI, and @simon_something for the help with the challenges.

[Wonderland @Wonderland]

The Wonderland CTF was a blast!

Huge congrats to all the teams, especially “STACK TOO DEEP”, “NADA ESPECIAL” and “SECSEE”.

Oh, also: https://t.co/WHMt1f36Mk 👉👈

[Wonderland @Wonderland]

Every wallet, dapp, and library today relies on a centralized GitHub repo for chain metadata.

It’s a single point of failure. One repo going down shouldn’t be enough to take out the whole ecosystem.

Why trust a repo when you can trust Ethereum?

[0xng @ngndev]

Happy 10th @ethereum!

[0xng @ngndev]

As always: epic

[TiTi🐙 @titi0x]

In “What I’d love to see in a wallet”, @VitalikButerin described sending to vitalik.eth@optimism and having wallets auto-route assets cross-chain.

That vision is now real.

ERC-7930 & ERC-7828 are officially MERGED! 🚀
Interop and Privacy are coming.

🧵👇

[0xng @ngndev]

epic

[Anon Panku Cartel @AnonPankuCartel]

It’s official.
Anon Panku Cartel is now live on Aztec tesnet.

Being the first PFP collection on Aztec isn’t (just) a marketing stunt, it’s a deliberate move to stress-test the chain and push the network forward.

The Anon Pankus are accelerating Aztec.
Get one.

Priv/Acc

[0xng @ngndev]

@wei3erHase is just built different

[Wonderland @Wonderland]

Wonderland just rescued $1,500,000 from RAI.

Here’s how we pulled off a white-hat recovery before Global Settlement closed the doors forever.

This one’s a masterclass in whitehat DeFi, follow the rabbit 🐇🕳️

[0xng @ngndev]

Still not convinced?

[Wonderland @Wonderland]

10+ top builders already locked in.

No recordings. No replays.

Spots are limited — apply now: https://t.co/Crh3gXAv5J

[0xng @ngndev]

You don't wanna miss it.

[Wonderland @Wonderland]

What happens at Wondercon stays off-chain. No cameras. No receipts.

Apply: https://t.co/Crh3gXAv5J

[0xng @ngndev]

Huge. I urge devs to study how Aztec works. Even more if you are easily nerdsniped. Their docs are an anthology of interesting concepts and data structures. Also, bridging the void between public and private state requires a new framework of mind, which is fun as well.

[Aztec @aztecnetwork]

Aztec’s Public Testnet is live.

The privacy revolution is finally here.

[Wonderland @Wonderland]

Today, we shared the work we've done on interoperable addresses at the EF L2 Interop Working Group call, covering both ERC-7930 and ERC-7828.

Together, they aim to solve how to reference an address and chain unambiguously.

Let’s dive in 👇

[Wonderland @Wonderland]

AIP-20 is live: the Aztec Token Standard.

It defines how tokens work across public & private contexts in the Aztec ecosystem, one unified interface for all transfers.

https://t.co/ZBR8HAQN7k

Wonderland 🤝 @aztecnetwork

[0xng @ngndev]

We are hiring security researchers to grow our internal department at @wonderland.

You will help secure the code of some of the best projects in the space in a place that fosters learning and growth.

Apply at: https://t.co/HV4YVyu5i2

Any questions, DMs open.

[Simon Something @simon_something]

“Do you want to build audit tools? Learn Rust” ?

Any contrib welcome, even (more) from new Rustaceans:)

Create foundry test of failing Medusa runs, on the fly: https://t.co/XW01AGoNQa
Medusa templating: https://t.co/YMFrdIJttv
Medusa discord bot (wip): https://t.co/pEG3I7vRef

(@wonderland is *not* an audit firm tho)