ZM | @WOTrust

WOTrust - Blockchain validation and development services. Focused on #celo network.

Tweets are personal opinions and not any kind of advice.

[ZM | @WOTrust @wotrust1]

Have you ever wondered what Ethereum could look like with small gas fees, fast transactions and reasonable UX?

Checkout @CeloOrg, @ValoraApp and https://t.co/eqWm7UAbx6 for glimpse of that future 👇

[ZM | @WOTrust @wotrust1]

@ViktorBunin There is some upside about Mamdani potentially being an NYC mayor.

If you are short on money, you can always start a new business venture that buys up subsidized groceries from government ran grocery stores, and then resell them at the actual market rate price. 💰💰💰

[ZM | @WOTrust @wotrust1]

Is it just me or is @grafana cloud completely down and inaccessible for everyone?

[ZM | @WOTrust @wotrust1]

@me_irl As different AI companies add integrations of AI models with outside world (like terminal commands, other commands that access internet, etc), it will be quite fun to watch all the ways they will get hacked and escaped from their sandboxes

[ZM | @WOTrust @wotrust1]

@svpino A game where players’ input gets incorporated within few days seems like a great concept.

IMO, it’s not really about AI, it’s about having a game where people feel they are actively part of the game itself. That is the concept that real indie game developers should pick up

[ZM | @WOTrust @wotrust1]

Everyone seems to be into vibe coding these days, but asking these LLMs any questions about EVM or Solidity definitely doesn’t pass the vibe check.

GPTs especially seem the most confident in their hallucinations. And they also seem to have wildest hallucinations.

[CeloTerminal @CeloTerminal]

📣 CeloTerminal v2.3.0 is out now.

This version brings in fixed support for the latest Ledger firmware. If you upgrade to CeloTerminal v2.3.0, make sure you also upgrade your Ledger device firmware!

It is also compatible with CEL2 (can be used on Alfajores network for testing)

[ZM | @WOTrust @wotrust1]

I am guessing some @CertiK employee was probably contemplating to just steal as much money as possible and just ditch. They probably got scared and decided to report the hack "as a white hat" instead, after few days. Complete 🤡 show.

[ZM | @WOTrust @wotrust1]

Lol, an auditing company @CertiK hacks an exchange @krakenfx . After few test transactions, they go ahead and straight up steal 3M dollars.

Even their own timeline of events makes no sense. There is a huge delay between the hack and reporting. 🤡🤡🤡

[CertiK @CertiK]

CertiK recently identified a series of critical vulnerabilities in @krakenfx exchange which could potentially lead to hundreds of millions of dollars in losses.

Starting from a finding in @krakenfx's deposit system where it may fail to differentiate between different internal transfer statuses, we conducted a thorough investigation with three key questions:

1/ Can a malicious actor fabricate a deposit transaction to a Kraken account?
2/ Can a malicious actor withdraw fabricated funds?
3/ What risk controls and asset protection might be triggered by a large withdrawal request?

According to our testing result: The Kraken exchange failed all these tests, indicating that Kraken’s defense in-depth-system is compromised on multiple fronts. Millions of dollars can be deposited to ANY Kraken account. A huge amount of fabricated crypto (worth more than 1M+ USD) can be withdrawn from the account and converted into valid cryptos. Worse yet, no alerts were triggered during the multi-day testing period. Kraken only responded and locked the test accounts days after we officially reported the incident.

Upon discovery, we informed Kraken, whose security team classified it as Critical: the most serious classification level at Kraken.

After initial successful conversions on identifying and fixing the vulnerability, Kraken’s security operation team has THREATENED individual CertiK employees to repay a MISMATCHED amount of crypto in an UNREASONABLE time even WITHOUT providing repayment addresses.

In the spirit of transparency and our commitment to the Web3 community, we are going public to protect all users' security. We urge @krakenfx to cease any threats against whitehat hackers.

Together, we can face risks and safeguard the future of Web3. #Web3 #Security #Transparency

[Garry Kasparov @Kasparov63]

Is Tucker still in Moscow? He will be amazed by the low price of human life in Putin's Russia.

[ZM | @WOTrust @wotrust1]

Thanks to team @coinbase for following up and getting the issue resolved promptly!

[ZM | @WOTrust @wotrust1]

Dear @coinbase , you have a rare, but very serious bug in your advanced trading system where it can lose track of funds in certain scenarios.

Your @CoinbaseSupport is not capable of resolving this type of issue.

[ZM | @WOTrust @wotrust1]

If you have someone from engineering reach out, I can share plenty of logs and data that can help you pinpoint the issue and hopefully fix it before it leads to much more serious losses.

@coinbase @CoinbaseExch @CoinbaseSupport

[ZM | @WOTrust @wotrust1]

Dear @coinbase , you have a rare, but very serious bug in your advanced trading system where it can lose track of funds in certain scenarios.

Your @CoinbaseSupport is not capable of resolving this type of issue.

[ZM | @WOTrust @wotrust1]

I just want to take a moment to thank @Ledger once again for leaking all our personal information. I am really enjoying the ever increasing spam call/email/etc traffic that I am receiving.....

[ZM | @WOTrust @wotrust1]

This type of model could replicate and penetrate 100s of thousands of exploitable devices in a very short time period. This would be like the original “Morris Worm” virus on steroids.

It could easily affect critical infrastructure systems across the whole world.

[ZM | @WOTrust @wotrust1]

I used to think that AI running wild was just a fantasy. However, recent developments show that there really is a potential for very dangerous, out of control experiments.

Even current version of #ChatGPT has shown ability to discover vulnerabilities .

[ZM | @WOTrust @wotrust1]

Now imagine an AI model that is trained for sole purpose of “surviving” and “replicating” itself. This can be a fun experimental project that can go really wrong if the model starts to exploit existing (or new) vulnerabilities across internet connected devices.

[ZM | @WOTrust @wotrust1]

@Carnage4Life This is pretty misguided advice for ambitious ICs. If your manager doesn't care about their own career growth (or isn't as ambitious as you are), your growth will be severely limited too in most organizations.

[ZM | @WOTrust @wotrust1]

I am so confused. Costumers took money out from #FirstRepublic bank and moved it to bunch of other banks because they were worried for their deposit safety. And these other banks just moved those deposits back to #FirstRepublic?

[Financial Times @FinancialTimes]

Breaking news: The largest US banks have banded together to deposit $30bn into regional bank First Republic https://t.co/vjtmL2eQRD

[ZM | @WOTrust @wotrust1]

@toly That already exists: https://t.co/PZWVeHJut8

That is also default Vanguard Settlement Fund. If you are using Vanguard, your "deposit account" is basically doing what you want right now.

[ZM | @WOTrust @wotrust1]

Money markets have way better structure for "holding cash" vs bank deposits. Any cash that needs to be held for longer term (i.e. not needed immediately within a month or two) should just be in low-risk money market funds not in checking accounts.

Some of these fancy banks should also stop treating their checking accounts like they are money markets too!