RustyRabbit @_RustyRabbit

non fungible dad security researcher Joined April 2018

Tweets

2K
Followers

348
Following

994
Likes

2K

m4rio @m4rio_eth

2 weeks ago

‼️‼️Please share for visibility.‼️‼️ ONGOING Open Source Phishing attack!! There is a new scam running around. You get a fake grants github tag by fake bot which says that it targets OS projects for a gitcoin grant. They create a fake github account with a fake project and…

24 75 184 21K 18

Download Image

sudo rm -rf --no-preserve-root / @pcaversaccio

3 months ago

It gets even more fancy: the way Etherscan was tricked showing the wrong implementation contract is based on setting 2 different proxy slots in the same frontrunning tx. So Etherscan uses a certain heuristic that incorporates different storage slots to retrieve the implementation…

deebeez @deeberiroz

3 months ago

54 121 791 129K 361

13 48 314 59K 134

Download Image

sudo rm -rf --no-preserve-root / @pcaversaccio

3 months ago

So someone contacts you on LinkedIn with a promising job opportunity. Sounds nice, innit? They seem legit (after checking them for 1 min) and after some short convo they send you a GitHub repo with a simple Next.js "recruiting task". You clone it, run it… and 10 mins later, your…

46 115 494 154K 141

Download Image

philogy @real_philogy

3 months ago

you are not serious people

33 30 274 109K 81

Download Image

RustyRabbit @_RustyRabbit

3 months ago

This is the problem that needs to be solved. If you've been on both sides of this you understand why it's not easy to solve.

Black Panther @thepantherplus

3 months ago

This is the problem that needs to be solved. If you've been on both sides of this you understand why it's not easy to solve.

1 0 21 2K 1

0 0 1 137 0

Resupply @ResupplyFi

3 months ago

We have published our post-mortem on the exploit in the wstUSR market as well as the recovery plan. Please use the links below. Post-mortem: mirror.xyz/0x521CB9b35514… Recovery Plan: gov.resupply.fi/t/resupply-rec…

31 32 123 187K 34

Telcoin Association @TelcoinTAO

4 months ago

1/4 Big progress for #Telcoin Network We’ve completed a full audit of core infrastructure with @lovethewired and @_RustyRabbit of @cantinaxyz - a major step toward mainnet!

9 70 241 23K 8

Download Image

Hari @_hrkrshnn

5 months ago

I recently read some comments here by security researchers and noticed a severe lack of empathy for customers. Within the Cantina core team, I make sure everyone hears directly from our customers. This is crucial for building empathy and understanding customer needs. Without…

2 2 72 4K 6

Juan Blanco ☀️☀️🍞🍞🦇🔊 @juanfranblanco

6 months ago

@code There is a new solidity extension impersonating mine, my name etc. This extension has just been published today, and has managed to even fake a whopping 20 million downloads. This might include malware.

28 88 314 39K 44

Download Image

nick.eth @nicksdjohnson

6 months ago

Recently I was targeted by an extremely sophisticated phishing attack, and I want to highlight it here. It exploits a vulnerability in Google's infrastructure, and given their refusal to fix it, we're likely to see it a lot more. Here's the email I got:

1K 6K 35K 5.7M 17K

Download Image

sudo rm -rf --no-preserve-root / @pcaversaccio

6 months ago

folks, can we please fucking stop normalising `curl | bash` as an installation method (yes, I'm also looking at you Foundry)? It's a _massive_ footgun that blindly executes remote code with zero verification. You're literally giving arbitrary internet bytes root access to your…

36 56 404 27K 35

tanuki42 @tanuki42_

6 months ago

Meet Nick Franklin @0xNickLFranklin - Blockchain Security Engineer…. or RGB operative hacking for DPRK? Seemingly this guy has had the entire industry fooled for years.

27 65 338 116K 129

Download Image

Cantina 🪐 @cantinaxyz

7 months ago

Security’s about to get pumped up. The biggest Solana competition in history has landed in the Cantina 🪐 @pumpdotfun just dropped a massive $2,010,000 prize pool to help secure PumpSwap, their new DEX. 💰 $2,010,000 USDC 📅 Live now - April 4th 🔗 Below

69 39 202 168K 17

Download Video

xyzeva @xyz3va

7 months ago

how to gain code execution on millions of people and hundreds of popular apps and of course, firebase was (partially) the cause kibty.town/blog/todesktop/

104 290 3K 691K 1K

6529 @punk6529

4 years ago

1/ On the EU Giving Up I watched a panel on AI (machine learning) at a conference hosted by the European Commission. 9 people on the panel Everyone agreed that the USA was 100 miles ahead of EU in machine learning and China was 99 miles ahead except for those who believed...

253 2K 5K 0 1K

Cantina 🪐 @cantinaxyz

8 months ago

When we say crypto takes security seriously, this is what we mean 🪐 @eigenlayer is relentlessly pursuing the pinnacle of security standards with the largest-ever, $2,500,000 code review competition starting in February. More info coming soon.

18 65 475 185K 51

Download Video

MiloTruck @milotruck

8 months ago

This is pretty interesting Never thought of using the identity precompile to bypass external checks that expect the function selector to be returned Also, this is the first time I've seen a precompile used in an exploit

BlockSec Phalcon @Phalcon_xyz

8 months ago

5 21 89 45K 93

Download Image

7 14 120 12K 113

Sablier @Sablier

9 months ago

Building secure smart contracts is tough—risks are high, audits are costly, and your treasury is at stake. Sablier has 5+ years of hack-free operations, billions in volume, and rigorous audits. Trust the proven standard, don't use a custom vesting contract.

1 6 26 4K 1

Tay 💖 @tayvano_

9 months ago

🚨 Heads up all—some dudes have a slick, new way of dropping some nasty malware. Feels infostealer-y on the surface but...its not.🫠 It'll really, deeply rekt you. Pls share this w/ your friends, devs, and multisig signers. Everyone needs to be careful + stay skeptical. 🙏

167 870 3K 862K 2K

Download Image

spencecoin.eth @spencecoin

9 months ago

I've worked closely with @tayvano_ for... *checks notes* over seven years. Each and every day, without fail, for the entirety of those seven years, she has ONLY worried about the wellbeing of those around her, including her family, her friends, her employees, the users of her…