Ancientech Security Labs

So Instead of @pa_cem23 and his @Gensuki_ team to address the issue i responsibly took to their DM I then brought it here without disclosing anything, very polite and gentle of me you know But as expected, for a Project that has questionable tidings they choose the way that seemeth right unto a man......

I don't expect this post to go viral, my engagement on this account has been unusually low from time But I hope this reaches at least a few founders in the Web3 space Dear Founders, I hope this letter meets you well Over the past few months, I've had several conversations with founders and teams building different projects across Web3 Some conversations have been productive and others have left me really concerned about how we approach security in this industry A project can have an audited smart contract and still lose millions because something outside that contract was compromised Smart contracts, infrastructure, access controls, admin privileges, operational security, wallet and key management and the other areas attackers can exploit without necessarily touching a single line of your smart contract But whenever we approach projects about security, we spend considerable time explaining why looking beyond smart contracts is important And after all the explanations and sometimes disagreements, there's one response you'll hear "We've been operating for five years" "We've never been hacked" These statements are presented as though they settle the entire security conversation. And it's worrying, Because building something that survives for years in Web3 is an achievement But surviving for years cannot be proof that you cannot be compromised tomorrow Let's use relationships as an example When two people first fall in love, everything feels perfect. They call each other every day and check up on each other and all At that early stage, it almost feels impossible that anything could come between them But give that relationship six months or a year Life will hit in.... People will change, responsibilities increase, new challenges appear.....the attention and effort that existed at the beginning gradually disappear And if both people stop putting in the work, the relationship can begin to fall apart That's why you sometimes hear about marriages of 20 or even 30 years ending Because the number of years two people have spent together cannot replace the continuous effort required to keep a relationship healthy And that's exactly how security is also Your project might have been secure three years ago but three years later, are you still operating under the same assumptions? How many things must have changed? How many new integrations have you introduced? How many people have joined or left your team? How many employees still have access they no longer need? How many dependencies have been updated? How many new attack techniques have emerged since your last security assessment? And more importantly When was the last time someone independently checked whether the security measures you trusted three years ago are still effective today? These are question I wish more founders would ask themselves Because the longer your project operates, the more opportunities there are for changes, accumulated technical debt, forgotten permissions and overlooked weaknesses to introduce new risks Experience can make a team better at managing security, but longevity alone will not guarantee safety Look at what happened to Bybit in 2025 A company that had operated for years, with an established security infrastructure, still suffered a major compromise That's why I find the statement "We've never been hacked" particularly dangerous when it's used to dismiss security concerns You were not hacked yesterday does not mean you're protected against tomorrow's threats It simply means you haven't experienced a known successful compromise up to that point That's two different thing And please, don't misunderstand me I'm not saying every Web3 project is insecure or every founder who has operated for years is careless The point is that security should never become a conversation you consider finished simply because your project has survived long enough I've spoken with teams that already have reputable audit report

Had to be in the blurry because this is ANNOUNCEMENT PT 1 DAY /61 WITH @ancientechLABS

PT 3 .....last part on this series actually Day /63 with @ancientechLABS

Day /64 with @ancientechLABS

Day /65 with @ancientechLABS

New week New turn

....to bring JUDGEMENT Day /66 with @ancientechLABS

I read some allegations against @Zentrixgaming_ from her FORMER most consistent marketers last two weeks or so and it was disturbing because it's about USERS/COMMUNITY I'm ready to dig in deep to either nullify the accusations or amplify it with undeniable evidence That's how THE BLACKLIST will start @legeOfficial @CryptofxOG @Gheefted_01

Beautiful space but I feel SECURITY should not and never be an off topic, regardless of the subject because when a project gets hacked it suddenly becomes an on-topic. Nothing would matter anymore....not even a feature. What's a feature if the project is no more I hope @newsightlabsjay reach out to the Devs concerning my security concerns. Our report by @ancientechLABS didn't just emaciate from the bug bounty program....it was beyond and there are propositions and the likes we made there.

Protocols deflecting security questions no matter the space they're holding is a red flag for me. I don't want to know what you're talking about if it's off topic or on-topic because when you gets hacked, your space matters no more. Nothing matter anymore Day /60 with @ancientechLABS

As of when I made this video, I had not sent the report yet to neither @NewSightHQ or @newsightlabsjay But right now it has been routed through telegram to be forwarded to their Dev team by the admin details I got from discord I've issue with their path of reporting, I won't call that even a path. Which is why I had to route through admin to get to Dev Hopefully it safely gets to the Dev team @NewSightHQ Day /58 with @ancientechLABS

This prediction market platform showed some solid architectural foundation here, they even leverage well-audited oracle infrastructure

Today's was supposed to be for non technicalities but unfortunately I had to focus on the bounty live on @NewSightHQ that's ending tomorrow Kindly connect back if possible @newsightlabsjay Check your DM @NewSightHQ I'll be waiting, today was worth it after all and most importantly very IMPORTANT Day /57 with @ancientechLABS

That's the only thing I'm more concerned about the bitget hack now Day /56 Of Building Ancientech Security Labs In Public