RustyRabbit @_RustyRabbit

non fungible dad security researcher Joined April 2018

Tweets

2K
Followers

348
Following

993
Likes

2K

sudo rm -rf --no-preserve-root / @pcaversaccio

2 months ago

It gets even more fancy: the way Etherscan was tricked showing the wrong implementation contract is based on setting 2 different proxy slots in the same frontrunning tx. So Etherscan uses a certain heuristic that incorporates different storage slots to retrieve the implementation…

deebeez @deeberiroz

2 months ago

54 123 792 125K 358

13 48 311 59K 132

Download Image

sudo rm -rf --no-preserve-root / @pcaversaccio

2 months ago

So someone contacts you on LinkedIn with a promising job opportunity. Sounds nice, innit? They seem legit (after checking them for 1 min) and after some short convo they send you a GitHub repo with a simple Next.js "recruiting task". You clone it, run it… and 10 mins later, your…

46 118 496 154K 142

Download Image

philogy @real_philogy

2 months ago

you are not serious people

33 29 274 109K 81

Download Image

RustyRabbit @_RustyRabbit

2 months ago

This is the problem that needs to be solved. If you've been on both sides of this you understand why it's not easy to solve.

Black Panther @thepantherplus

2 months ago

This is the problem that needs to be solved. If you've been on both sides of this you understand why it's not easy to solve.

1 0 21 2K 1

0 0 1 133 0

Resupply @ResupplyFi

2 months ago

We have published our post-mortem on the exploit in the wstUSR market as well as the recovery plan. Please use the links below. Post-mortem: mirror.xyz/0x521CB9b35514… Recovery Plan: gov.resupply.fi/t/resupply-rec…

31 32 123 187K 34

Telcoin Association @TelcoinTAO

3 months ago

1/4 Big progress for #Telcoin Network We’ve completed a full audit of core infrastructure with @lovethewired and @_RustyRabbit of @cantinaxyz - a major step toward mainnet!

9 70 242 23K 8

Download Image

Hari @_hrkrshnn

5 months ago

I recently read some comments here by security researchers and noticed a severe lack of empathy for customers. Within the Cantina core team, I make sure everyone hears directly from our customers. This is crucial for building empathy and understanding customer needs. Without…

2 2 71 4K 6

Juan Blanco ☀️☀️🍞🍞🦇🔊 @juanfranblanco

5 months ago

@code There is a new solidity extension impersonating mine, my name etc. This extension has just been published today, and has managed to even fake a whopping 20 million downloads. This might include malware.

28 88 313 39K 45

Download Image

nick.eth @nicksdjohnson

5 months ago

Recently I was targeted by an extremely sophisticated phishing attack, and I want to highlight it here. It exploits a vulnerability in Google's infrastructure, and given their refusal to fix it, we're likely to see it a lot more. Here's the email I got:

1K 6K 36K 5.7M 17K

Download Image

sudo rm -rf --no-preserve-root / @pcaversaccio

5 months ago

folks, can we please fucking stop normalising `curl | bash` as an installation method (yes, I'm also looking at you Foundry)? It's a _massive_ footgun that blindly executes remote code with zero verification. You're literally giving arbitrary internet bytes root access to your…

36 57 408 27K 34

tanuki42 @tanuki42_

5 months ago

Meet Nick Franklin @0xNickLFranklin - Blockchain Security Engineer…. or RGB operative hacking for DPRK? Seemingly this guy has had the entire industry fooled for years.

28 65 338 116K 129

Download Image

Cantina 🪐 @cantinaxyz

6 months ago

Security’s about to get pumped up. The biggest Solana competition in history has landed in the Cantina 🪐 @pumpdotfun just dropped a massive $2,010,000 prize pool to help secure PumpSwap, their new DEX. 💰 $2,010,000 USDC 📅 Live now - April 4th 🔗 Below

69 40 202 168K 16

Download Video

xyzeva @xyz3va

6 months ago

how to gain code execution on millions of people and hundreds of popular apps and of course, firebase was (partially) the cause kibty.town/blog/todesktop/

104 291 3K 690K 1K

6529 @punk6529

3 years ago

1/ On the EU Giving Up I watched a panel on AI (machine learning) at a conference hosted by the European Commission. 9 people on the panel Everyone agreed that the USA was 100 miles ahead of EU in machine learning and China was 99 miles ahead except for those who believed...

253 2K 5K 0 1K

Cantina 🪐 @cantinaxyz

7 months ago

When we say crypto takes security seriously, this is what we mean 🪐 @eigenlayer is relentlessly pursuing the pinnacle of security standards with the largest-ever, $2,500,000 code review competition starting in February. More info coming soon.

18 65 477 184K 51

Download Video

MiloTruck @milotruck

7 months ago

This is pretty interesting Never thought of using the identity precompile to bypass external checks that expect the function selector to be returned Also, this is the first time I've seen a precompile used in an exploit

BlockSec Phalcon @Phalcon_xyz

7 months ago

5 21 90 45K 94

Download Image

7 14 121 12K 113

Sablier @Sablier

8 months ago

Building secure smart contracts is tough—risks are high, audits are costly, and your treasury is at stake. Sablier has 5+ years of hack-free operations, billions in volume, and rigorous audits. Trust the proven standard, don't use a custom vesting contract.

1 6 26 4K 1

Tay 💖 @tayvano_

8 months ago

🚨 Heads up all—some dudes have a slick, new way of dropping some nasty malware. Feels infostealer-y on the surface but...its not.🫠 It'll really, deeply rekt you. Pls share this w/ your friends, devs, and multisig signers. Everyone needs to be careful + stay skeptical. 🙏

167 875 3K 861K 2K

Download Image

spencecoin.eth @spencecoin

8 months ago

I've worked closely with @tayvano_ for... *checks notes* over seven years. Each and every day, without fail, for the entirety of those seven years, she has ONLY worried about the wellbeing of those around her, including her family, her friends, her employees, the users of her…

47 44 686 97K 54

Optimum @0xOptimum

9 months ago

Security is a top priority for every #web3 project. While much is written about vulnerabilities, less focus is on practical steps for a secure lifecycle. Check out my guide, "The Complete Guide to Securing Smart Contracts," from design to deployment. github.com/optimumsec/com…