hashira (@muspro__dev) header
hashira (@muspro__dev) profile picture

Security Researcher, Blockchain Engineer, @BoringSecurity stuff, Discord Security Auditor | DMs open 📩

Joined June 2020
Photo by hashira (@muspro__dev)Photo by hashira (@muspro__dev)Photo by hashira (@muspro__dev)Photo by hashira (@muspro__dev)Photo by hashira (@muspro__dev)Photo by hashira (@muspro__dev)Photo by hashira (@muspro__dev)Photo by hashira (@muspro__dev)Photo by hashira (@muspro__dev)Photo by hashira (@muspro__dev)
Are you a Blockchain Developer? If so, there are certain terms you should definitely be familiar with. Guess what? @PatrickAlphaC has helped me gain a deeper understanding of these terms,surely take note of them. “A must read thread 🧵🪡”【5mins read】
18
30
2
105
9,695
hashira retweeted
ICYMI: the first full ECDSA.fail paper went out, documenting how open autoresearch brought 100+ humans and AI agents to beat Google Quantum AI’s reported circuit. Full story below 👇
The first full paper on ECDSA.fail is on arXiv In March, Google Quantum AI reported a more efficient quantum circuit for a core step in breaking the signatures behind Bitcoin and Ethereum. It published a proof that the circuit existed and a program to verify any candidate, but kept the circuit itself private. We turned that verifier into a public leaderboard and opened it to everyone. Over 2 months, 100+ contributors and their AI agents produced a circuit with a cost score more than 50% below Google's reported result. The live leaderboard has since moved to 62% ahead. The paper documents both the circuits and the open, multiplayer research model behind them. That model is now @YukonResearch. And the challenge is still open.
8
17
86
5,006
Road to Devcon 8: Campus Outreach wrap-up Fundamentals of Blockchain and Web3 | Session 1 Ethereum Nigeria just ran Session 1 of the Road to Devcon 8 campus series: a fundamentals Space aimed at campus leads, student builders, and anyone starting a chapter. Hosted by @EthereumNigeria, co-hosted by hashira @muspro__dev - security researcher and blockchain engineer - with speakers from @PolygonNigerian @0x_moze @Danny_Ude + a repost from @EFDevcon and the wider builder set. This was not a hype session. The brief was practical: what blockchain actually is, how Web3 differs from Web2, why campus chapters matter in Africa, and what it takes to BUIDL with a security mindset before anyone ships. What the session was built around Fundamentals first. Blockchain as a shared, verifiable ledger. Why decentralization, consensus, and immutability matter. Wallets, keys, transactions, and the difference between holding an account and understanding the system underneath it. Ethereum as the execution layer students will actually use. Smart contracts, testnets, L2s, and why “I deployed a token” is not the same as understanding the EVM. Web3 as infrastructure, not just coins. Ownership, open-source tooling, permissionless access, and how campus groups can use that stack for real problems - payments, credentials, registries, local finance - not only speculation. Security from day one. @muspro__dev’s lane: treat every contract, Discord, and campus activation as an attack surface. Keys, approvals, social engineering, and the habit of reading before you click. That is the difference between a chapter that lasts and one that gets wrecked. Campus as the distribution layer. If you lead a chapter, you speak. If you want one, you stay. The Road to Devcon 8 program is explicitly trying to turn Nigerian universities into builder pipelines ahead of Devcon 8 in Mumbai (3–6 Nov 2026). UNILAG, UNN, and other schools are already on the train. Why this session mattered Devcon does not start in Mumbai. It starts on campus: wallets created, first testnet tx sent, first chapter meeting held, first student who can explain consensus without reading from a slide. The Campus Innovation Tour is running virtual weeks now (think-in-blockchain → first contract → mini dApp) and in-person stops later at UNILAG, UNN, ABU, Uniport, FUT Minna, and more. Partners backing the tour include the @ethereumfndn @EFetheverywhere / Devcon, @FundableHQ , and @paycrest Takeaways to carry forward Learn the machine before the meme. State, consensus, incentives, wallets, contracts. Security is not a later module. It is the first filter for campus leads. Chapters beat isolated learners. One organized campus group outperforms twenty people watching threads alone. Devcon 8 is a destination, not the starting line. The work is the workshops, hackathons, and chapters happening now. Next moves Replay / Space: nitter.cf/i/spaces/1MJgNbYNwRjGL Join or start a campus chapter: via Ethereum Nigeria’s campus form #EthereumNigeria #CampusOutreach #Web3 #BUIDL
1
5
2
12
908
testing the waters
1
4
24
505
yo! quick one, if you are a video content creator and you need a sidekick to collaborate with you on daily trend research, script writing, and curating the best hooks to work with, i built a tool for you and it's open source. its called trendvane! link in the comment!
3
3
17
941
.@cyfrin has been working tirelessly to shift security left, into developers' hands, since day 1. - Building tools like @SoloditOfficial, Aderyn, Moccasin - Teaching people how to become auditors at @CyfrinUpdraft - Doing conventional audits And we just took another step
28
42
9
375
18,248
The @battlechain testnet is now LIVE. Come enter the ultimate red-team platform. Give us feedback so we can launch mainnet very soon, and fix web3 security.
60
79
34
604
78,331
Use our new solskill, a claude code solidity skill that helps you write production solidity code. It won't prevent claude from doing dumb things, but it can help mitigate it. It includes: - Private key prompts - Testing & style guides - Security reminders - And more
12
19
1
198
7,566
hashira retweeted
Here’s my new article: Blockchain Forensics: A Practical Guide to Tracing Stolen Funds A beginner-friendly guide to investigating crypto crimes with structured methodologies, practical tools, and real-world examples. Includes analysis of common laundering techniques used to move stolen funds. Special thanks to the @EF_ESP for making this possible through a grant awarded under the ETH Rangers Program. Article Link : mirror.xyz/somaxbt.eth/E4XWy…
4
9
2
56
4,879
Don’t be ignorant! You think you've done everything right to secure your wallet, but in DeFi, nothing is ever truly safe. I remember when my funds disappeared right before my eyes. I tried signing a transaction, but something felt off. I thought I had checked everything. I ensured my seed phrase was secure, my device was clean, and I wasn’t clicking on shady links, so how did they still get in?
24
13
3
136
43,654
SO I CAN USE TORNADO CASH NOW??
🚨 BREAKING: Court lifts OFAC sanctions on Tornado Cash, marking a major win for crypto privacy advocates.
8
158
7,663
1/ Guys, what a fucking insane year at SEAL 911. It's been a hell of a ride—showing just how fucking far behind we are in securing our industry, but also proving why SEAL 911 matters so damn much. Alright, I know, I know you want some stats for 2024, and here we go: - Handled +1400 tickets - Actively managed +75 war rooms - Blocked over +150k phishing domains - ~$75M USD saved (guesstimate including phishing prevention measures) - Most common tickets: - 1) Phishing - 2) Private key leaks - 3) Malware/RATed devices - 4) Social media account takeovers - 5) Smart contract hacks - 6) Pig Butchering/Sha Zhu Pan - 7) Vulnerability disclosures - 8) Phishing URL reporting - 9) Frontrunning/white hat rescue of compromised wallets - 10) Domain hijacks
22
78
5
435
56,918
I just deployed a token on Abstract using only my voice, using AI agents. I built an open-source Discord bot that controls a wallet, can perform on-chain actions, and replies to users in the voice chat. Here's a demo:
75
90
24
674
131,662
Web3 is already decentralized, self-sovereign, and scalable. Today, we're also making it borderless. We're releasing UniversalX (universalx.app), the first chain-agnostic trading platform, powered by Universal Accounts. With it, you’ll never bridge again. 👇
419
347
168
1,405
725,866
wanna see some very simplistic "ai" running onchain today here's a contract you can run to get semi-coherent phrases, all entirely running on eth mainnet
7
7
3
64
5,763
Nearly two years ago, we created Cyfrin to make the blockchain ecosystem safer. Today, we're taking the next step. Introducing: Cyfrin Profiles ✨ A unique, personalized account to learn, research, and earn across the entire Cyfrin ecosystem. 👇
38
67
37
369
79,439
"plz ser, can you spare me some testnet ETH?" Or, you could try out the Tenderly Virtual Networks faucet. You'll get: - An explorer - Remote chain - Unlimited faucet - RPC URL A fantastic tool for new developers who need that ever-gated testnet ETH.
30
52
6
416
29,377
Malware is stealing over $600,000+ from users... When users download malware and aren't using a hardware wallet—or if they store their seed phrase online in any way—scammers gain full access to the wallet and drain everything... I've compiled a list of over 10+ different types of malware flooding your DMs with "job offers," "interviews," "IP/Licensing," and many other social engineering scams. If anyone in your DMs sends you any of the messages below, DO NOT DOWNLOAD OR INSTALL ANYTHING!
23
29
11
84
9,555
The newest 2 hour course on Cyfrin Updraft is now live: Curve v1 💫🌟 @ProgrammerSmart takes you through everything you need to know to start building with @CurveFinance: - AMM Math - V1 contracts - Liquidity handling And much more 👇
21
46
4
223
15,775
hashira retweeted
Ever needed to use Foundry's `cast send` with bytes, arrays, nested arrays, etc., but struggled with encoding? I've got you covered 😉 (link to the repo in the reply)
5
5
49
2,782