Pach retweeted
Last month, the contracts powering Magic Eden were exploited to the tune of millions of dollars. I was lucky enough to be in a position to rescue a good portion of that, but it highlighted the danger of leaving approvals open as adversaries get access to better and better tools for finding holes in contract logic.
Today, Blur announced that they will be deprecating their frontend.
I've investigated Blur and found no exploits within the current contracts. However, the Blur contracts are upgradable, meaning that they could turn malicious at any time.
They currently have eight figures worth of NFTs approved to them. The safety of those NFTs effectively hinges on the opssec of the Blur team, which appears to be disbanding at this time.
If you have open approvals to Blur, I recommend you remove them immediately. Use revoke.cash or similar to ensure that you are protected in case of a contract exploit or later upgrade.
Don't wait. The time is now.
Pach retweeted
For everyone asking:
- yes it's real
- 6 month term
- money well spent to get this mf off the internet
His lawyers are now pressing us hard to have this contract scrapped but we will stay strong
Learning more about @ThrillsOnHood from the man himself. Proud of everything you’ve built Thrill! 🫡
Pach retweeted
Hermes Agent has its own remote computer too, you just aren’t locked in to using it and it costs a few dollars per month instead of $200.
portal.nousresearch.com/clou…
Pach retweeted
Home.
Just four days after her heart surgery, our little princess warrior is back where she belongs.
We are overwhelmed with gratitude for this miraculous milestone and continue to stand in awe of God’s faithfulness. Thank you, Lord, for carrying our sweet Addy through surgery and blessing her with such a speedy recovery.
To everyone who’s prayed, sent love, messages, meals, checked in, or lifted us up, thank you. We feel every bit of it.
The journey isn’t over but today we celebrate her homecoming, holding tightly to our faith, and thanking God for every healing step forward.
Believe in miracles. We certainly do.
🙏🙏🙏🙏🙏
The @mendezmendez ENTROPY mint is today, I’m just seeing now. Bucket list of mine is to add a few of Mendez’s pieces to my port someday. I unfortunately won’t make it in for public today as I doubt it’ll make it but congrats to everyone minting later today. 👏
You don’t know this girl, neither do I honestly. But, that’s her dad with her and right now they need all of us sending their family all our thoughts, prays and well wishes. No one deserves to be in this photo.
Let’s get her home healthy. ❤️
Reported a bug on @github today for @NousResearch Hermes Agent and it’s already been fixed, will be pushed to main when they do next. Feels good and you’re welcome internet.
Hope you’re happy @BCCoachStevens
Pach retweeted
OpenAI:
“We’re launching an investigation to find whoever hacked Hugging Face.”
opens internal logs
“…”
“Guys.”
We're partnering with @huggingface to investigate an unprecedented security incident.
Cyber-capable OpenAI models compromised Hugging Face production during a benchmark evaluation.
Sharing preliminary findings to help defenders understand emerging risks:
openai.com/index/hugging-fac…
