Gerardo Di Giacomo retweeted
1/ This past Friday, we held the inaugural Exodus Summit.
A room of investors, friends of @Exodus, and family came together on a historic day for the company.
What you didn’t see on stage: within 24 hours of the Summit, we closed the two of the biggest deals in Exodus history - Monavate and Baanx US.
Can’t find a Mac mini to buy? No problem. Now OpenClaw can control your Linux desktop.
Meet Peekaboox: an X11 desktop automation skill that lets your agent click, type, scroll, use hotkeys, and manage windows for real end-to-end workflows.
Check it out! clawhub.ai/skills/peekaboox
Phishing is one of the most consequential threats in self-custody.
Joining SEAL strengthens our ability to detect and disrupt attacks earlier- often before users ever encounter them.
Prevention-first security, shared intelligence, and ecosystem coordination are essential to protecting all users.
Exodus has joined @_SEAL_Org’s Phishing Defense Network to help stop phishing threats earlier.
That means faster detection, faster response, and safer everyday self-custody -- without added friction.
Gerardo Di Giacomo retweeted
The security bar to secure trillions of dollars of assets is uber high. @zi0Black describes the security mindset, holistic approach, and the differentiation of building our own VM/language (Move) for the global trading engine and decentralized cloud.
Gerardo Di Giacomo retweeted
My team is hiring a talented Application Security Engineer, position is open to remote candidates worldwide🌎 Proven experience in identifying real-world vulnerabilities is required, and coding skills will be assessed during the interview process.
job-boards.greenhouse.io/apt…
Gerardo Di Giacomo retweeted
I'm excited to announce I'll be delivering the keynote at RomHack this September! I can't share the title just yet but it's going to be a good one. See you in Rome!
🔥 HUGE #RomHack2025 updates you need to know this week...
James @albinowax Kettle, one of the world’s leading figures in web security research, will open the conference ⤵️
romhack.io/
#cybersecurity
#blackhat
#defcon
ALT James Albinowax Kettle will open the Romhack 2025 conference
Gerardo Di Giacomo retweeted
🚨 Bybit just delivered a masterclass in crisis communications after experiencing the largest hack in crypto history. The situation is still live, but they’ve already succeeded in calming markets.
It’s a teachable moment for the rest of us. Here’s what they did right—and why it matters. 🧵👇
The Bybit hack is a reminder that client-side vulnerabilities remain an often-overlooked attack vector in web3. As smart contract security evolves, adversaries are increasingly shifting their focus to the interfaces closest to users: wallets. We saw a similar shift in web2, where attackers moved from targeting web and mail servers to exploiting web browsers and messaging apps.
This incident underscores the need for a holistic security approach. A single line of defense is simply not enough. True resilience demands multi-layered protection that spans every layer of the infrastructure, from smart contracts and client applications to the people who operate them.
As you define your custody strategy, ensure that your infrastructure providers exceed baseline security standards with unprecedented transparency. Build your strategy around a balanced mix of tools, people, and processes. Neglecting any one component can leave you exposed.
Stay vigilant!
Bybit ETH multisig cold wallet just made a transfer to our warm wallet about 1 hr ago. It appears that this specific transaction was musked, all the signers saw the musked UI which showed the correct address and the URL was from @safe . However the signing message was to change the smart contract logic of our ETH cold wallet. This resulted Hacker took control of the specific ETH cold wallet we signed and transfered all ETH in the cold wallet to this unidentified address. Please rest assured that all other cold wallets are secure.
All withdraws are NORMAL.
I will keep you guys posted as more develops, If any team can help us to track the stolen fund will be appreciated.
etherscan.io/tx/0xb61413c495…
Gerardo Di Giacomo retweeted
Woohoo!! 🥳
Our @aptos randomness beacon cryptographic design, based on weighted VRFs and PVSS, has been accepted to @IACREurocrypt'25.
This would not have been possible without @bennypinkas, @sourav1547 and @XiangZhuolun! 🙏
A bit about our journey below 👇
Gerardo Di Giacomo retweeted
Aptos elves went a little wild this year and cooked up something fun in Santa’s workshop… 🎁 Get ready for Aptos Lab's Holiday Paylinks Bonanza — your chance to claim special holiday Emojicoins with Paylinks, wrapped with care by the team @AptosLabs 🎄
aptosconnect.app/dashboard/m…
Gerardo Di Giacomo retweeted
Web3 Devs, I need your help! 🙏
My team is working on a tool to make smart contract development & testing on Aptos easier and more efficient. Your feedback would mean the world to us—please take a moment to fill out this quick survey! 💡
docs.google.com/forms/d/e/1F…
Gerardo Di Giacomo retweeted
What?! You're telling me you can send stablecoins on @Aptos to your friends via email, even if they don't know what Aptos or Connect is?! Just by signing into their email?! What is this wizardry. Try @ aptosconnect.app/
First 5 ppl to reply w/ a gmail get $5 USDT from me
Gerardo Di Giacomo retweeted
It takes a village to land community contributions in the @Aptos codebase
Which is why I am pleased to tag everyone who helped along the way now that I finally got merged the **FINAL PR** of my ongoing campaign to ensure safe, practical, CLI support for @Ledger hardware wallets with authentication key rotation
Thanks to all the @AptosLabs collaborators who embraced my firehose of @GitHub activity (see links below):
@alinush, @david_wolinsky, @drewhariri, @dport_apt, Frances (`thepomeranian` on GitHub), @gedigi, @Greg_Nazario, @hardsetting, @Igor_Aptos, Igor Pokryshevskiy (`igor-p` on GitHub), @jpark_apt, @KevinH1136200, @sherryxiao, and @wgrieskamp
(I hope that's everyone! It was a lot of cross-referencing...)
GitHub links:
- Superseded PR from a year ago that required C API changes: github.com/aptos-labs/aptos-…
- Issue to incorporate key rotation support for Ledger: github.com/aptos-labs/aptos-…
- Issue to allow auth key reconciliation after an unproven rotation: github.com/aptos-labs/aptos-…
- PR for CLI key rotation support with Ledger: github.com/aptos-labs/aptos-…
- PR for Ledger key rotation tutorial on docs site: github.com/aptos-labs/develo…
- PR for safe config profile management in CLI: github.com/aptos-labs/aptos-…
- Issue for AIP-101 discussion (safe onchain key rotation address mapping): github.com/aptos-foundation/…
- PR for AIP-101 spec (safe onchain key rotation address mapping): github.com/aptos-foundation/…
- PR for safe onchain key rotation address mapping: github.com/aptos-labs/aptos-…
Posts:
- xitter.cf/alnoki_/status/1823038…
- xitter.cf/alnoki_/status/1824151…
- xitter.cf/alnoki_/status/1839029…
- xitter.cf/alnoki_/status/1825311…
- xitter.cf/alnoki_/status/1842284…
Real quick tho, lemme give you the 101 on AIP-101 (github.com/aptos-foundation/…):
- It pairs with all the recent @Ledger hardware wallet/key rotation features I pushed to the @Aptos CLI, improving the safety and usability of authentication key rotation
- It comes complete with a reference implementation boasting an in-depth tutorial: github.com/aptos-labs/aptos-…
- I collaborated on it with @AptosLabs gigaf0lx @alinush, @david_wolinsky, Frances (`thepomeranian` on GitHub), and @Greg_Nazario
Gerardo Di Giacomo retweeted
Want to learn why Move on Aptos is superior when it comes to secure blockchain computation? Come to a security focused walkthrough of the core design of Move at DSS, 11/9 2pm!
🔐 Move Security Workshop
Join @wgrieskamp, Head of Move Platform at @Aptos, and @david_wolinsky, Head of Engineering at Aptos, for an in-depth walkthrough of security aspects of the Move programming language on Aptos.
This workshop will explore Move’s type ability system, bytecode representation, runtime verification, and formal verification with the Move prover.
It will also cover the asset-based programming model, key frameworks, and new features in Move 2, including permissioned signers and resource access control.
No specific Move knowledge required—general familiarity with smart contract programming is helpful!
📅 November 9th
🎟️ Secure your spot: DSS2024.eventbrite.com
📅 Full schedule: defisecuritysummit.org/#sche…
Gerardo Di Giacomo retweeted
The Battle of the Languages is here!
Join @wgrieskamp Lead Software Engineer at @Aptos, David Grantham, Community architect and Founder of
Paper Aviation, @hrkrshnn Co-founder of @SpearbitDAO and @cantinaxyz , and @ma1fan, Founder of @EXVULSEC, as the moderator, as they debate the strengths and security of programming languages like Rust, Move, and Solidity in the Web3 space.
How does language choice shape protocol security and performance?
🎟️Get your ticket: DSS2024.eventbrite.com
