
Former CIA officer - now safety @pudgypenguins
HQS
Joined August 2021
- Tweets34K
- Following4K
- Followers31.6K
- Likes1K
Pinned Tweet
The people I know who've never been scammed in crypto all pretty much have these habits:
1. They use a separate laptop or phone to interact with crypto sites
2. They don't keep all their tokens in one wallet (or on multiple wallets with the same seedphrase)
3. They have stronger security for their most valuable wallets than their day to day trading wallets
Often, that's using hardware wallets or it's multisig/MPC wallets
4. They bookmark their favorite crypto sites instead of relying on Google to find them
5. They never trust an email or DM. They go directly to the source when they need to do something, not externally presented links
6. They revoke their approvals on EVM chains using tools like Revoke Cash or Etherscan
6. They do their own research on protocols and don't blindly deposit funds into untested protocols
7. They double check the addresses they send to, and don't copy/paste wallet addresses from Blockscanners
FINALLY, 8. they take their time when transacting and do it when they're at their best.
They don't rush, or transact while drinking, or under the influence of drugs or when they're tired.
Staying safe in crypto doesn't have to be complicated. You just have to be consistent and do what works.
Great advice for setting up email + phone numbers
This helps a ton in the world of data breaches
Many hardware wallet companies choose to use their competitors failures as marketing moments
Almost every major HW wallet has done it.
Here’s the thing: security is a team sport. When you see a member of your team make a mistake, you learn from it.
Not try and steal their playing time.
There’s actually 0 upside in saying “this will never happen to us” because it can and will.
This is not just a Keystone issue, I see security orgs and pros point fingers every time something goes wrong
To my security audience - when you see an incident don’t jump in with snide comments or remarks
Ask yourself if the same thing could happen to you and then go fix it (because it’s almost always yes)
This is a new world and we all need to level up our game
We owe you an apology.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.
NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type keyst.one yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email [email protected]. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.
Beau retweeted
If you thought wrench attacks in France were getting crazy, check this out.
These dudes tied up a couple in their 60s and literally hit the husband in the back of the head with an adjustable wrench.
If you're in France and you were exposed in one of the recent crypto breaches you absolutely need to make some adjustments to your security.
cryptotimes.io/2026/10/22/fr…
An urgent notice from the Railway team
blog.railway.com/p/security-…
Beau retweeted
Railway is compromised, rotate all API keys as soon as possible
Deployments are down so don’t wait to redeploy
Attackers are draining keys in real time, we didn’t lose much but can confirm this is still an active attack
Stay safe friends
If these are your Penguins, go claim them (and think about tipping Quit at the same time)
Do you know these penguins?
All 4 of them are still in the safu wallet. If you know them, let them know to come claim at nftsaresafu.xyz
Scammer Alert! @pudgypenguins
@naumaniqbal92 took over @fartpudgy old username...
Don't get scammed!
Beau retweeted
People need to stop thinking that I would ever take any paid incentives for posting NFT purchases 😉 🐧
🤖 Made with AI



































