A place for developers to talk about building on Farcaster.

/dev

If I were building anything touching users' money today, supply-chain attacks like this one would be what keeps me up at night.

A few weeks ago, a critical supply chain attack compromised five versions of the popular JavaScript library xrpl.js, introducing a backdoor that silently exfiltrates private keys. 

Almanax flagged this threat, helping teams detect malicious code changes and prevent catastrophic https://t.co/BnYrNgm1G7

Almanax

If I were building anything touching users' money today, supply-chain attacks like this one would be what keeps me up at night.
https://x.com/AlmanaxAI/status/1922355263354401268

Co-Founder & CEO @almanax | Ex Head of Product @ AnChain AI | UC Berkeley engineering

https://www.almanax.ai/post/inside-the-xrpl-js-seed-theft-supply-chain-attack