Valar Morghulis

He is no one

[toly 🇺🇸 @toly]

@androolloyd It’s not a bear market unless we are arguing about decentralization

[Valar Morghulis @ValarFace]

@micah_erfan Cool story bruh

[Valar Morghulis @ValarFace]

@coldberrystereo @LaneyHawes These are facts and they support your PoV.

[Valar Morghulis @ValarFace]

@Blackfingers63 @uncledoomer Preferably a Ukrainian one. The Russian ones will be addicts and steal anything they can pick up.

[Giuseppe @giuseppegurgone]

This is the easiest thing to setup and every npm install will go through Socket's firewall.

npm i -g sfw
alias npm="sfw npm"
alias npx="sfw npx"

[cinesthetic. @TheCinesthetic]

What is a movie fight scene that you rate 10/10?

[Valar Morghulis @ValarFace]

@Alph4betSoup Most common sign of sleep apnea friend. Consider getting a sleep study done.

[Valar Morghulis @ValarFace]

@Maks_NAFO_FELLA Inshallah it was more than 60 🖤

[Danny Organ @organ_danny]

Anyone want to work together?!

Work I'm proud of during my 2 years at @Coinbase:
-Co-author of the x402 whitepaper & helping launch the x402 Foundation
-Shipping 18 products and building @CoinbaseDev into a world-class platform for builders (100x MAU growth)
-Laying the groundwork for the future of money movement with custom stablecoins
-Helping build the homepage of the agentic economy with agentic(.)market

If you're interested in working together on building the future of agentic commerce or stablecoins, please reach out!

[Valar Morghulis @ValarFace]

@Austin_Federa

[Valar Morghulis @ValarFace]

@Alph4betSoup American developer, bloody obvious.

[Valar Morghulis @ValarFace]

@TheBuddyCSM Back blast area clear 💨

[Valar Morghulis @ValarFace]

@David6179188752 @TheCinesthetic A nice one, not too big!

[Valar Morghulis @ValarFace]

@MatthewNichol5 Please move to IL and make it red. Just cut out the hard part and move to Chicago 😂

[Valar Morghulis @ValarFace]

@L0STE_ @blueshift @deanmlittle Challenge. Go back on hiatus

[Valar Morghulis @ValarFace]

@blueshift Leadership that can actually work with the community and act like adults.

[Valar Morghulis @ValarFace]

@deanmlittle All these flavors and you chose salty.

[Valar Morghulis @ValarFace]

Thanks. I hate it

[TFTC @TFTC21]

A security researcher just documented a large-scale counterfeit Ledger Nano S Plus operation selling compromised devices across multiple online marketplaces.

The fake units look identical to the real thing but contain completely different hardware. Instead of Ledger's secure element chip, the counterfeits run an ESP32 microcontroller with modified firmware labeled "Nano S+ V2.1." Seeds and PINs are stored in plain text and transmitted to attacker-controlled servers. Any wallet initialized on the device is drained.

The operation goes beyond the hardware. The sellers also distribute a fake version of Ledger Live built with React Native and signed with a debug certificate. It intercepts transactions and exfiltrates sensitive data to multiple command-and-control servers. The campaign spans five attack vectors: compromised hardware, Android APKs, Windows executables, macOS installers, and iOS apps distributed through TestFlight to bypass App Store review.

This comes days after ZachXBT documented a separate fake Ledger Live app that made it through Apple's Mac App Store review process. That operation drained over $9.5 million from more than 50 victims, including musician G. Love, who lost 5.92 BTC after entering his recovery phrase into what he believed was the legitimate app.

The pattern is clear: the attack surface for hardware wallet users has shifted from firmware exploits to supply chain and distribution fraud. The devices themselves remain secure. The problem is that users are being intercepted before they ever touch a real one.

Ledger's own "genuine check" feature can be bypassed when the hardware itself is compromised at the source, which makes where you buy the device as important as how you use it.

The rules haven't changed, but they've never been more important: buy hardware wallets only from the manufacturer. Never enter your recovery phrase into any software. If a companion app asks for your 24 words on a screen, it's a scam. Every time.

[Valar Morghulis @ValarFace]

@Austin_Federa Ah well that wasn’t in the question. They have wings, but given the aerodynamics of a rotorcraft and the Bernoulli principal, they’re not gonna generate much lift.