RonnyX 🕳️↶🦔 (@RonnyX2017) header
RonnyX 🕳️↶🦔 (@RonnyX2017) profile picture

{ Web | Blockchain | Android | Pen(test) } Hacker | Co-founder of @Offside_Labs | Hedgehog🦔 in JRC @jupiterexchange

Singapore
Joined September 2019
Photo by RonnyX 🕳️↶🦔 (@RonnyX2017)Photo by RonnyX 🕳️↶🦔 (@RonnyX2017)Photo by RonnyX 🕳️↶🦔 (@RonnyX2017)Photo by RonnyX 🕳️↶🦔 (@RonnyX2017)Photo by RonnyX 🕳️↶🦔 (@RonnyX2017)Photo by RonnyX 🕳️↶🦔 (@RonnyX2017)Photo by RonnyX 🕳️↶🦔 (@RonnyX2017)Photo by RonnyX 🕳️↶🦔 (@RonnyX2017)Photo by RonnyX 🕳️↶🦔 (@RonnyX2017)Photo by RonnyX 🕳️↶🦔 (@RonnyX2017)
RonnyX 🕳️↶🦔 retweeted
You are a clown. Patagon is not a victim you purposely buy up garbage protocols for civil lawsuits to profit. Zama an innocent protocol and all of its users were dragged into your legal case. You did not alert Zama or give them the chance to contest beforehand. This is the reality in the US: Arbitraging outdated laws and boomer judges who know little to nothing about tech cases. Guess this is expected when you are a bad actor who helped lose $93M from actual victims at Stream DeFi….
34
39
9
642
72,188
I was absolutely delighted to meet Squig's creator at #Catlumpurr , they’re such nice people. I’ve finally got the perfect surprise gift ready for my wife to take back with me on my trip home this week. thx very very much buddies @squigthepig !!
1
2
6
398
🫶
Replying to @code4rena
23,980 submissions. Last but not least, a huge thank you to the extraordinary panel of Code4rena judges who reviewed all 23,980 submissions in 2025. Code4rena would not be what it is without your tireless work and dedication to reviewing every submission.
1
224
😅As a risk curator that collects millions in mng fees, what was the most severe action @Re7Labs and @Re7Capital took after a series of failed risk curation incidents, besides silence and a "we're doing" announcement? Threatening its users to shut up! good job👍
Replying to @xia0leng
律师函全文链接(PDF原件) / Full letter (official PDF): xln.moe/dl/2025-11-27-Letter…
2
6
499
DO WE REALLY NEED NASDAQ ON BLOCKCHAIN? or another question, can we always trust MM have infinite liquidity?
310
RonnyX 🕳️↶🦔 retweeted
This attack actually looks quite suspicious: 1. It exploited a pair created two hours before hack, which likely means the hacker worked on the exploit as soon as it was deployed. 2. It sent 10ETH to block builder (Flashbot/Beaver). 3. It split the profit between 2 accounts. Likely profit sharing with others.
regarding the ResupplyFi hack, preliminary investigation shows that the ResupplyPair contract uses an empty ERC4626 wrapper as the price oracle. thus the hacker used only 2 crvUSD to borrow 10M reUSD.... 0xffbbd492e0605a8bb6d490c3cd879e87ff60862b0684160d08fd5711e7a872d3
6
12
3
96
19,759
ya, took one more look, another inflation attack 🤡
227
Not a scam, not an exploit, just a chance to win 0.1 eth but a bit risky. previously on my story with $AXIE and I will show you CA for arbitrage chance at the last thread. 0/N 🧵
1
1
279
here you are the arbitrge: 1. Buy 1.00 Wrapped Origin Axie (WOA) 0xEC0A0915A7c3443862B678B0d4721C7aB133FDCf on eth for 0.27 ETH. 2. call the unwrap function of WOA contract to burn 1 WOA and get 1 Origin AXIE. 3. Wait AXIE admin bridges you AXIE from eth to RONIN 4. sell it in the AXIE market for 0.37 ETH, which is the floor price for Origin AXIE 5. profit 0.1 ETH 🌹 5/N 🧵
1
1
185
If you really want to bet, I must remind you that: the admin who mint AXIE for me has renounced his permission roles in the AXIE proxy contract. Good Luck gamblers!! 🎲 This is the last post of the thread. -1/N 🧵
1
161
had seen lots of stupid FALSE cases in many Solana "best" security practice artiarticles, or even 80% Solana audit contests. The most sucks Id like to example is dirty data after realloc. there is never any dirty data in the current program context if reallocation is done only in other ixs or cpis, svm has already zero out the memory when syncing accounts. 🫶pls write a PoC when you dont know what you r really talking about.
3
273
Thats no diff with typing bash -i > /dev/tcp by yourself, the only thing can do is print a hhhhhhuge log in the console that, if you DONT KNOW WHATS FK, STOP PASTING
Watch out for fake @JupiterExchange exploits with undetermined behaviour being spread through X Ads, Youtube Videos and Github repos, targeting @phantom wallets Example X Ads: nitter.cf/AnishaPratama1/status/… Youtube: youtube.com/watch?v=FxdfMkyz… Github: github.com/search?q=Bug-Repo… Thread 🧵👇
1
2
361
fk. Zip domain and slash homoglyph
still can't believe .zip domains exist
2
838
I get back to my tweet because I followed @kanyewest , this man is losing his mind😂😂😂😂
This quoted post is unavailable.
1
451
have really happy four days at Catstanbul!!!!!! thx everyone and happy CNY (always delayed🤣 but really sincerely🫡
2
296
RonnyX 🕳️↶🦔 retweeted
🎉 I'm excited to share that I've been awarded the ACM SIGSAC Doctoral Dissertation Award @acm_ccs! It's an incredible honor and a perfect way to wrap up my 5-year Ph.D. journey. 🙌
16
4
3
145
9,183