All things security focused - breaking news, exploitation breakdowns, and tips for staying safe while going full degen.

Main

Web3 Security

Solodit has merged our pull request, making over 1,200 of Zokyo's detailed findings from 92+ audits available to you

How to Access:

- Visit Solodit (The Home to Web3 Security)
- Select "Zokyo" from the Source dropdown
- Click 'Search' and start learning

It always comes down to allowing no one access to your seed phrase....in whatever form.

It always comes down to allowing no one access to your seed phrase....in whatever form.

https://x.com/the_smart_ape/status/1833437549643370795?t=Owbt0csSxsyf8TWeuzajcA&s=19

why penetration testing is essential for mobile and browser extension crypto wallets and what the process involves

why penetration testing is essential for mobile and browser extension crypto wallets and what the process involves 

https://zokyo.io/blog/unlocking-security-the-power-of-penetration-testing/

This got 9! votes on my Twitter with almost 9k following.

I need farcaster to crush that.

Would you rather watch an educational video with a Loom style facecam than a faceless one?

✅ Yes
❌ No
✍🏻 Doesn't matter if good

Email this morning that CoinGecko data for 2M users was leaked 😔

embeddedwallets

1/ Seamless self-custody matters in crypto

The ability for users to control their assets is one of crypto's superpowers, it protects users and devs alike!

Wrote a quick piece on why this matters and how to balance the tradeoffs involved :)

Check it out!
https://www.privy.io/blog/importance-of-self-custody

Self-custody and security remain the highest priorities for @privy! Feel free to give this piece @henri wrote a read 🤝

Data privacy on the web. Keeper of the fabric @privy.

Fmr Protocol Labs consensus work. Before that YC S14 🇫🇷🌐🍊

The easiest way to bring all your users onchain, regardless of whether they already have wallets | Customer love at privy.io/love

Have identified several teams using Helius that have failed to protect their API keys. Takes 30 seconds 🫡

Have identified several teams using Helius that have failed to protect their API keys. Takes 30 seconds 🫡

https://t.co/zYpYTB7WCq

If anyone needs solidity security researchers to perform an audit, got some rare availability. Dm me and mention farcaster for a good deal!

Weekend reading: Top 30 articles officercia.mirror.xyz

scams!

one of the most common scams for artists in warpcast today starts with someone saying "hi" or "hey" out of the blue

please be aware of these type of scams, in the thread I'm quoting I take a more humorous approach to make it entertaining, but it's a very difficult and sad time for the people that fall for these, don't fall for these please🙏

Monitoring. In-Depth.

officercia.mirror.xyz/W-SUbkTf18b3RuPL9DykXQmpexWBZxbp4P1xfCfXo4Y

https://officercia.mirror.xyz/RoWpSjah4hvKvCyrCgqtdyWX657e3-qUeShBZ2VtkUs

https://officercia.mirror.xyz/ZWYaJILJntwLtK7rXBfTU45bbBI7Zm1CXy5_S_YyDhM

Solid breakdown 🫡 
https://youtu.be/jqjtNDtbDNI?si=F2EOQiKBore8B-n2