It's always been cat and mouse game, but the cat has better tools right now Attackers don't ask permission. They jailbreak the best AI models and move on. Defenders hit a wall of restrictions and spend their time cleaning up instead of preventing Level the playing field

4 months ago we both quit our jobs to build something we believe in Met by coincidence, won a hackathon, and never stopped building We just submitted Proof of Exploit to @colosseum 🔓 Here's what we've built, why we built it and how we got here 🧵

4 months ago I didn't even post on X. Just lurking. Hated being on camera Look at us now: pitching to @colosseum and posting consistently And honestly? It's not even that bad, just a bit cringe Proud of this one👇

Great day yesterday at The Garage in São Paulo with @SuperteamBR! Amazing to meet so many founders and builders working on exciting projects across the @solana ecosystem. Big thanks to @shimas_sol and Kuka for bringing everyone together! The energy in Brazil is real. 🇧🇷 @cloak_ag @luigiremor @RegiRegiRegi123 @Dannygonzo22 and many others

September unexpectedly ended in the/Garage in Brazil with @SuperteamBR 🇧🇷 One call, flights booked the next morning, and suddenly we're building on the other side of the world Still can't believe how much fit into one month Read the recap 👇

Millions of dollars in NFTs were vulnerable until a whitehat hacker @0xQuit took it upon himself to rescue them! Here is the story: A massive hack just took place via the @MagicEden NFT marketplace A bug in an old smart contract used by the marketplace, allowed hackers to use an old wallet approval from users to steal their NFTs and approved balances! The marketplace itself was already gone, but the wallet approvals users granted years ago were still sitting onchain That meant NFTs could be pulled from those wallets without the owner signing anything new After a few initial reports, the scale started to become more obvious, this was not a one-off theft It was an open door across a huge set of leftover approvals On the newer version of the contract an emergency pause could be triggered but this was not possible on the older version of the contract @0xQuit quickly realized this and started going to work in a race against the malicious hackers The goal was simple, steal the vulnerable assets and secure them before the malicious hackers could do so By morning, the whitehat managed to secure more than $5.7M in NFTs Unfortunately the malicious hackers realized not only NFTs but also approved WETH and USDC balances could be stolen The total reported theft (beyond the rescued NFTs) has been estimated at $2.8M+ but would have been significantly bigger without the hero whitehat hacker coming to the rescue!

Months of building, studying, flying around, meeting people, late night dinners and long conversations. Grateful for everyone who's supported us along the way and for the ambassadors who joined us ❤️ Proof of Exploit now enters a new chapter. Read the story below 👇

After a 12-hour bus ride, @SyotoshiX and I made it to Bangkok, straight back to work on @ProofOfExploit , prepping the workshop for @SuperteamTH this Tuesday. Teaching builders how to find bugs in their own contracts. Check the luma in the comments if you want to join