Paulius @SolidityDev

This is the dip! #Dev #Blockchain #Ethereum #Solidity #SmartContracts #DApp #DeFi #NFT #Security 💻 t.me/web3journeydia… On chain Joined July 2014

Tweets

2K
Followers

998
Following

1K
Likes

16K

Curve Finance @CurveFinance

a day ago

Some pools still have a notable TVL in Curve pools on Fantom Opera. If you are one of the LPs - please remove before June 30: that network is shutting down

Since launch, Sonic has become the home of the ecosystem - users, builders, liquidity, and validators have all made the move. With that transition complete, Fantom Opera will be retired on June 30, 2026. The Fantom Opera network will cease operation at 5:00 PM GMT on June 30,

43 70 438 85K 28

49 10 96 15K 4

View Details

forefy @forefy

3 days ago

npm finally fights supply chain attacks with v12 (July 2026) blocking install scripts by default. Here's how to adapt early without breaking your CI 🧵 What's changing: • preinstall/install/postinstall scripts → blocked by default • Git dependencies → blocked by default • Remote URL deps → blocked by default The fix is creating a one-time allowlist per repo: 💻 npm install 💻 npm approve-scripts --all 💻 git commit -m "chore: allowlist install scripts" This snapshots exactly what's trusted today and only new unknown scripts are blocked automatically going forward. CI adaptation playbook: 1. Upgrade to npm 11.16.0+ 2. Run the approve-scripts commands above 3. Add --strict-allow-scripts to your pipeline Now jobs will fail loudly if anything unreviewed tries to run. Source: github.com/orgs/community…

0 1 6 336 1

View Details

Paulius @SolidityDev

2 weeks ago

@forefy what dc is this or is it personal

1 0 1 89 0

View Details

Paulius @SolidityDev

2 weeks ago

@pashov @ohMySolboy

0 0 3 111 0

View Details

pashov @pashov

2 weeks ago

🤯An AI security tool has 1st-place performance on security contests from just 1yr ago. Solidity-auditor v3 is out, FREE & Open Source. Thousands of Solidity developers are using the tool already. Upgrade your security baseline, use the tool🫡 pashov.com/solidity-audit…

98 127 496 42K 337

View Details

Paulius @SolidityDev

2 weeks ago

@0xbube

pashov @pashov

2 weeks ago

98 127 496 42K 337

0 0 2 33 0

View Details

sudo rm -rf --no-preserve-root / @pcaversaccio

2 months ago

rant time: people are so fucking obsessed with building more tools, more products, more services, more "security" layers. are you guys all fucking insane?? every single thing you add is more complexity. and complexity is exactly what makes systems _dangerous_. you don't get safer by stacking abstractions on top of abstractions. you just increase the attack surface and pray the whole dependency chain doesn't collapse (hint: it will collapse!!). now you depend on 10, 50, 100 moving parts. all needing updates, all with their own bugs, all potential supply chain failures and we call that "security" like fucking retards. dude, it's the fucking opposite. we're not building safer systems. we're building systems so complex nobody actually understands them anymore. and almost nobody is asking the obvious question: **what can we remove?** everyone wants to add. nobody wants to reduce. that's how you end up in a nightmare system (hint: we're already in that nightmare). not because of one big failure. but because of thousands of tiny dependencies you never should have had in the first place.

34 28 255 13K 26

View Details

Klaas @forgebitz

4 weeks ago

software engineering in 2026: - your package manager is compromised - your cloud provider blocks your account - github itself is hacked software is solved

160 998 12K 414K 535

View Details

Abdul @0x_Abdul

2 months ago

april 2026 defi hack calendar

Abdul @0x_Abdul

2 months ago

april 2026 was the worst month ever in terms of defi exploits ~$635M lost in total, 28 incidents in 30 days: 1) apr 1 - drift - $285m 2) apr 3 - silo v2 - $392k 3) apr 4 - tmm - $1.67m 4) apr 5 - denaria finance - $165k 5) apr 9 - aethir - $423k 6) apr 12 - hyperbridge - $2.5m

116 122 940 203K 318

8 1 55 7K 9

View Details

Ignas | DeFi @DefiIgnas

2 months ago

Kelp rsETH exploit is terrible due to extensive DeFi integrations. Not sure how big the exposure is yet but: - Aave V3: Markets already frozen - SparkLend: Also froze the rsETH market - Lido Earn via Mellow strategy meta-vault. I think it was a leveraged market - Fluid: Frozen market - Compound - Euler - Upshift: Paused High Growth ETH and Kelp Gain vaults - Pendle PT YT tokens - Some Beefy strategies. Yearn? I suppose LayerZero is probably affected too, as rsETH were bridged from L2s, so I wonder if those rsETH on L2s aren't worthless right now. The situation is still developing, so I don't want to FUD any protocol, but it seems there are not many places to hide in DeFi.

99 79 751 156K 123

View Details

Security Alliance @_SEAL_Org

2 months ago

SEAL is coordinating an active investigation into the ongoing incident involving Kelp DAO along with all relevant stakeholders. If you have information to share or are able to assist in freezing/recovering funds, please reach out at t.me/seal_911_bot

8 22 124 22K 9

View Details

Marcin Kazmierczak ♦️ @MarcinRedStone

2 months ago

KelpDAO's rsETH bridge seems to have been exploited for ~$292M. Hacker borrows WETH against stolen rsETH on Aave. Here's what we know.

16 12 80 15K 14

View Details

Solidity @solidity_lang

2 months ago

Link to site: soliditylang.org/survey-2025/ Some highlights: - Stack-too-deep is the number 1 pain point - The majority use AI and 45% don't trust the output - Foundry sees continued market gain as dev framework - 70% have not heard of Core Solidity

1 2 9 738 0

View Details

Paulius @SolidityDev

2 months ago

@0xFlint_ @LauriPelto

1 0 0 131 0

View Details

etherscan.eth @etherscan

2 months ago

🆕 Contract Tab Revamp Navigating contract source code used to mean a lot of scrolling. Now you've got a full IDE-style code browser, plus refreshed read/write tabs Here's what's new ⤵️

17 38 242 19K 21

View Details

Scribbler @Defi_Scribbler

2 months ago

21 crypto projects are shutting down if you have assets on any of these, move them out 1. Fantasy top (@fantasy_top_) → Core mode sunset ~mid-June 2. Magic Eden ME Wallet (@MagicEden) → x.com/MagicEden/stat… 3. Leap Wallet (@leap_wallet) → x.com/leap_wallet/st… 4. Dmail (@Dmailofficial) → x.com/Dmailofficial/… 5. Intergaze (@intergaze_xyz) → x.com/intergaze_xyz/… 6. Yupp ai → (@yupp_ai) x.com/pankaj/status/… 7. Tally (@tallyxyz) → x.com/tallyxyz/statu… 8. Fey Protocol (@feyprotocol) → x.com/feyprotocol/st… 9. Angle Protocol (@AngleProtocol) → x.com/AngleProtocol/… 10. DataHaven_xyz (@DataHaven_xyz) → x.com/DataHaven_xyz/… 11. Step Finance (@StepFinance_) → x.com/StepFinance/st… 12. Parsec Finance (@parsec_finance) → x.com/parsec_finance… 13. ZeroLend (@zerolendxyz) → x.com/zerolendxyz/st… 14. PolynomialFi (@PolynomialFi) → x.com/PolynomialFi/s… 15. Nifty Gateway → x.com/niftygateway/s… 16. SlingshotCrypto (@SlingshotCrypto) → x.com/SlingshotCrypt… 17. Runiverse Game (@RuniverseGame) → x.com/RuniverseGame/… 18. Soundxyz (@soundxyz_) → x.com/soundxyz_/stat… 19. MilkyWay (@milky_way_zone) → x.com/milky_way_zone… 20. Pixiland Social (@pixilandsocial) → x.com/pixilandsocial… 21. Blocto App (@BloctoApp) → x.com/BloctoApp/stat… x.com/0xvietnguyen/s…

Leap Wallet | Sunset on 28th May @leap_wallet

3 months ago

Leap Wallet: Sunset Notice After careful consideration, we've made the decision to sunset Leap Wallet and its associated products. The products will be sunset on 28th May, 2026, and all users should complete their migration before then. We started Leap in 2022 to redefine what

411 133 1K 675K 222

264 285 1K 518K 894

View Details

Feross @feross

3 months ago

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

541 4K 16K 12.4M 7K

View Details

Patrick Collins @PatrickAlphaC

3 months ago

The @battlechain testnet is now LIVE. Come enter the ultimate red-team platform. Give us feedback so we can launch mainnet very soon, and fix web3 security.

51 80 569 69K 114

View Details

🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart

3 months ago

Web3 companies are posting jobs on jobs.ashbyhq.com Here is how to find them 1. Google "site:jobs.ashbyhq.com defi" 2. Filter by date (last month) Replace "defi" with other keywords Positions I found gist.github.com/t4sk/faed54936… Good luck

10 19 301 19K 499

View Details

evmchronicle.io @evmchronicle_io

3 months ago

Source Code Intelligence is now live in EVM Chronicle. Variables are now inline-clickable in source view, so you can inspect live storage instantly. Functions are now simulatable directly from code, with inputs and execution traces in one flow. From source → state → execution, without leaving the page.