Security @ Mysten Labs. Opinions are mine and do not necessarily reflect my employer’s.

Joined June 2009
Reginaldo Silva retweeted
Politics in the Influencer Age: One of Brazil's largest influencers (16m Instagram followers, millions for each YT video) -- a gentleman calling himself "Felca" -- started young as a video game streamer, but then became a hero to social justice activists, and a beloved figure among young Brazilians, by championing causes of mental health, bullying, online exploitation of children, influencers promoting gambling, etc. He disappeared from the internet for much of the year, but then announced a few days ago that he would return with a video published at midnight last night. Lula supporters, still desperate to find some way to reverse the results of the first round, all celebrated wildly, certain that Felca would produce a video endorsing Lula (even though he never suggested this) and that a Felca endorsement would swing the votes of millions and push Lula over the line for this Sunday's run-off vote. Instead, Felca posted a highly emotional, hour-long video about the childhood traumas he suffered and still suffers from due to bullying, severe anxiety and related mental health crises. But it had nothing to do with Lula or the election. It's hard to overstate the intensity and magnitude of hate he's now receiving from other large influences supporting Lula, and the left generally. They are mocking his mental health struggles, warning that they will ensure his anxiety will be worse than ever, acting as if he is one of the most evil people to exist, with some even encouraging his suicide. Lots of lessons here for other countries, none more relevant than the now-incomparable political power of vapid online Instagram influencers.
Há poucos meses, o Felca era símbolo de “responsabilidade digital”, usado para defender regulamentação das plataformas e o ECA Digital. Agora, como o vídeo dele NÃO era um ataque ao Flávio e tratava de uma dor pessoal, virou alvo de deboche e xingamentos, principalmente de páginas de fofoca. É sempre assim: enquanto serve à narrativa, é “necessário”. Saiu da cartilha, vira descartável. Eles não defendem pessoas. Defendem utilidade política.
83
309
11
2,774
99,893
Reginaldo Silva retweeted
4
33
1
272
10,559
Reginaldo Silva retweeted
Devx chain needs a devxplorer, and today I finally release the project that's been in works for a month Try it out: devxplorer.io or read about the features 🧵
11
24
10
85
19,227
Me: Hi Claude: switched to Opus 4.8
1
1
4
359
Many, many years ago I implemented multiple queues for intake for the Meta bug bounty program, where submissions from researchers that have a good signal were handled right away. H1 has that, right @senorarroz ? It might need some UI tweaking and education on the program side.
2
312
Reginaldo Silva retweeted
i fear claude code is going to produce lotsssss of dupes as everyone runs it on all their favorite programs
7
1
1
44
15,622
A friend tried to warn me years ago: "go find crypto vulns, you can do it". I've been working at Mysten Labs for 2 years, and I know how right he was. Sui is launching a new VM. It hasn't hit testnet, yet we're paying for vulns in it as if it was on mainnet. Don't miss this.
Sui’s new VM just went public. Bug bounty is open & we want the community's eyes on it before Mainnet. The bella-ciao branch is a rewrite of the execution layer. Faster. Per-package caching. Next gen Move features. Internal review & multiple independent audits from @osec_io & @zellic_io done. Report on @HackenProof. Paid at Mainnet rates, before it hits Testnet.
1
2
382
Reginaldo Silva retweeted
A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets. A step-by-step guide to exploiting a 20-year-old bug in the Linux kernel to achieve full privilege escalation and container escape, plus a cool bug-hunting heuristic. open.substack.com/pub/calif/…
3
59
4
208
27,329
Reginaldo Silva retweeted
Then you can point sui-explain to a transaction and it extracts it full contents as JSON, using a custom Rust tool called checkpoint-parser. You might find this useful for your own projects too, since it reads from the checkpoint archive which is not pruned: github.com/gdanezis/sui-expl…
1
1
9
659
Reginaldo Silva retweeted
Under the hood sui-explain uses Claude Haiku & Sonnet API to create a human readable summary. It analyses packages and extracts summaries of what each function does, you can have a look at 0x2 as an example: github.com/gdanezis/sui-expl…
2
1
26
771
Reginaldo Silva retweeted
I spend a significant amount of my day looking at transaction blocks on @SuiNetwork . Always wished explorers could give an English summary of transactions, before I dive into details. So I made sui-explain, largely for myself. It makes reports like:
14
11
3
159
9,085
That’s a cool New Year’s resolution. Happy 2026, @kostascrypto.
Just made an offer for a plot of land to build an AI + Robotics + Energy hub for massive crypto experiments, with Sui as the flagship chain. I know @JohnNaulty and a few others are exploring similar ideas in California and Korea, and my family will personally support them.
1
228
Reginaldo Silva retweeted
Love seeing more bug bounty programs for Sui DeFi projects
✅ [New bug bounty] Earn up to $100,000 with @kai_finance_sui You will be rewarded based on these tiers: - Critical: $50,000 - $100,000 - High: $5,000 - $10,000 Start the #bugbounty hunt right now!
7
8
81
5,801
Reginaldo Silva retweeted
The `sui-packages` repo now contains JSON call graphs for all mainnet packages (thanks @reginaldojsf ). Check 'em out for deeper understanding of code composition in Sui! github.com/MystenLabs/sui-pa…
17
22
3
133
7,473
Great presentation by @arthurair_es on the awesome "Bug Bounty Reports Explained" by @gregxsunday . Java deserialization bugs continue to be more and more impactful. My advice to hunters: understand how to come up with your own gadgets. When there's a deny list, there's a way.
Fui convidado pelo @gregxsunday pra falar sobre vulnerabilidades de desserialização em Java, técnicas de bypass em apps modernos e exfiltração de dados via DNS. Fiquei muito feliz com a oportunidade — tenho certeza que vocês vão curtir! Também compartilho um caso real interessante que encontrei no HackerOne. 🎥👇 youtube.com/watch?v=tEfjSs4f…
1
2
15
3,402
Reginaldo Silva retweeted
While our bug bounty today focuses on Sui core infrastructure and does not cover protocols, applications, or smart contracts built on it, we’re expanding it over the next six months to pay additional bounties for any protocol with more than $50M TVL, helping incentivize bounty hunters to also identify errors in code on large protocols like Cetus built on Sui to get ahead of such errors happening in the future.
24
22
9
237
34,723
Reginaldo Silva retweeted
Cetus has requested a community driven vote to recover the funds frozen following last week’s hack. In response, the Sui Foundation has released code for an onchain community vote. Sui validators can cast votes, and Sui holders can also vote directly through stake delegation. Sui Foundation stake will not be counted. If the community vote is approved, the funds will be recovered from the attacker and held in a multisig trust account until they can be returned to accounts who had positions in Cetus. The community vote is part of Cetus’s larger recovery plan to ensure all account holders are made whole, which includes use of Cetus’s treasury and obtaining a loan from Sui Foundation. While the validators cast votes, you, the Sui community, are represented by where your holdings are staked. You may change your stake delegation to a validator who voted in alignment with your preference. Validator votes will be displayed in public dashboards, which will be shared when the vote begins today at 1:00pm PT. See the blog post below for details, including code and participation information.
🚨 Dear Sui community, We are working diligently together with Inca Digital, security and analytics providers, and law enforcement officials across the world to recover the $60M worth of stolen funds. In parallel, we are asking the Sui community to support a protocol upgrade to recover the $162M of frozen funds and return them to their rightful owners. No one can make this decision unilaterally. We propose an on-chain vote involving the network’s major participants, including validators and SUI stakers, to decide on whether this upgrade is in the best interest of the Sui community. We want to recover and return the stolen funds, but we will respect whatever the community decides. Thank you for your patience. We will work closely with Sui validators and the Sui Foundation on the details of implementing our proposed vote. 🌊
182
165
66
998
312,836
Reginaldo Silva retweeted
root for your friends
3
11
136
8,400