Jasper | Neodyme @JasperCPS

Co-founder @Neodyme. CTF @allesctf. Algorithms and complexity theory nerd. Opinions my own. I break blockchains for fun and profit. Berlin, Germany Joined November 2022

Tweets

377
Followers

603
Following

636
Likes

2K

Jasper | Neodyme @JasperCPS

2 months ago

Most descriptions of the hack floating around on twitter were incorrect or incomplete. Here's what actually happened.

Neodyme @Neodyme

2 months ago

Most descriptions of the hack floating around on twitter were incorrect or incomplete. Here's what actually happened.

2 6 18 3K 12

Download Image

0 0 10 168 0

Neodyme @Neodyme

2 months ago

Meet our colleagues at the "Festival der Zukunft" at @DeutschesMuseum in Munich. Don't miss our talk on July 3 at 4pm! Check it out here: 1e9.community/festival-der-z…

0 1 6 578 0

Download Image

Part 3 of our Riverguard series is out! We're looking under the hood at the "fuzzcases" Riverguard uses to catch real-world bugs in Solana smart contracts. Still shocked how often some of these pop up. Check it out 👉 neodyme.io/en/blog/riverg…

0 6 9 849 4

Neodyme @Neodyme

4 months ago

From iframes and file reads to full RCE. 🔥 We found an HTML-to-PDF API allowing file reads and SSRF - then chained it into remote code execution via a Chromium 62 WebView exploit. 👉 Read the full write-up here: neodyme.io/en/blog/html_r…

1 29 74 6K 47

Neodyme @Neodyme

4 months ago

Interested in learning about Windows exploitation? This August, join us in Las Vegas for an intensive, hands-on 4-day DEFCON training: Binary Exploitation on Windows, led by Felipe and Kolja! 🗓️ When: August 9–12, 2025 📍 Where: Las Vegas Convention Center

1 5 8 960 0

Download Image

Jasper | Neodyme @JasperCPS

7 months ago

About to touch some snow

Neodyme @Neodyme

7 months ago

About to touch some snow

0 1 9 776 0

Download Image

0 0 11 147 0

Jasper | Neodyme @JasperCPS

7 months ago

Now I am become @metaproph3t, the destroyer of TradGov.

0 0 7 154 0

Download Image

Neodyme @Neodyme

7 months ago

🔎Digging deeper into COM hijacking! In Part 3, we explore two new vulnerabilities: 🗑️ Webroot Endpoint Protect (CVE-2023-7241) – SYSTEM via arbitrary file deletion 📥 Checkpoint Harmony (CVE-2024-24912) – SYSTEM via a file download primitive Read more: neodyme.io/en/blog/com_hi…

0 19 62 4K 27

Jasper | Neodyme @JasperCPS

8 months ago

Whoops, he's at it again: How to circumvent Windows 11's BitLocker encryption, by @t_lambertz.

Neodyme @Neodyme

8 months ago

Whoops, he's at it again: How to circumvent Windows 11's BitLocker encryption, by @t_lambertz.

2 29 86 6K 39

1 0 4 339 0

Jasper | Neodyme @JasperCPS

8 months ago

Just @0x4d5aC and @__k0lja casually finding vulnerabilities in several well-known antivirus solutions. Nothing to see here, move along.

Neodyme @Neodyme

8 months ago

Just @0x4d5aC and @__k0lja casually finding vulnerabilities in several well-known antivirus solutions. Nothing to see here, move along.

1 22 73 16K 28

0 0 8 211 0

0x4d5a @0x4d5aC

8 months ago

Slides for our talk "The Key to COMpromise" (AV/EDR privilege escalation) are on GitHub. If you want to discuss this stuff, you can find @__k0lja or me at the CTF area of 38C3 github.com/0x4d5a-ctf/38c…

2 81 241 16K 141

Neodyme @Neodyme

8 months ago

ND people are @ #38c3 in Hamburg, Germany. Be sure to check out our two talks about LPEs in AV/EDR Products (Saturday, 4 PM YELL) and a not yet mitigated Bitlocker Flaw! (Saturday, 7:15 PM HUFF)

1 4 10 1K 1

Download Image

Jasper | Neodyme @JasperCPS

9 months ago

Time to get out of the house and touch some snow @mtndao

4 2 22 1K 0

Download Image

Neodyme @Neodyme

9 months ago

Ever feel like Solana’s consensus isn’t clearly explained? We did too — so we dove deep and broke it all down for you. With code-references for the glass-eaters!

6 36 153 22K 117

Download Image

trent.sol @trentdotsol

9 months ago

anyone using @solana/web3.js, versions 1.95.6 and 1.95.7 are compromised with a secret stealer leaking private keys. if you or your product are using these versions, upgrade to 1.95.8 (1.95.5 is unaffected) if you run a service that can blacklist addresses, do your thing with…

284 752 2K 2.3M 484

Jasper | Neodyme @JasperCPS

9 months ago

It's that time of the year again. I just completed my application for @mtndao v7! Join me: tally.so/r/wo04eb

0 0 2 86 0

Squads @SquadsProtocol

10 months ago

The wait is over. Squads Protocol v4 is now immutable.

21 31 162 19K 9

Download Image

Streamflow @streamflow_fi

10 months ago

Announcing Streamflow's Latest Fundraise: $5M in Total Funding! Streamflow is playing a crucial role as a Digital Asset Management Infrastructure for token creation, distribution, and incentive alignment throughout the token lifecycle, with a mission to exponentially grow…

150 121 532 53K 34

Download Image

D_K @D_K_Dev

11 months ago

After a great #Pwn2Own with @Neodyme , I would like to share some insights I gained when working with the AeoTec Smart Home Hub. We did not manage to find any bugs in time but dumping the firmware was a great lesson. So, let’s tell you the story of how I approached this target.

1 15 105 17K 43

localo @_localo_

11 months ago

Huge shout-out to @_Staubfinger and @0x4d5aC for pulling off this beauty! 🥳 🎉 The router chain is especially nice, watch out for some nice Blogpost once the bugs are fixed over at blog.neodyme.io 👀