Father | XRPL & Web3 Realist | Host of Creation Station 🎙️ | Raw takes on crypto, life & markets ⚡ https://nitter.cf/t.co/sqpXXAej2v
Web³
Joined April 2026
- Tweets6.9K
- Following1K
- Followers1.4K
- Likes10.5K
Pinned Tweet
📜Welcome to The Show📜
CS𝕏 Guest Code of Conduct
Creation Station is a live space for open discussion, ideas, and community. Guests are expected to engage respectfully so the conversation stays productive and safe for everyone.
Core Rules
- Treat other guests with basic respect. Disagree with ideas, not people.
- No personal attacks, insults, harassment, bullying, or targeted hostility toward other guests.
- No hate speech, slurs, or discrimination based on identity.
- No threats, intimidation, doxxing, or sharing of private information.
- Stay on topic and allow others to speak. Don’t dominate, interrupt excessively, or derail the space.
- Keep language and behavior appropriate for a public live audio room.
Enforcement
The host has final authority. Violations can result in a warning, mute, removal from the space, or a ban from future Creation Station appearances. Repeated or severe abuse will not be tolerated.
By joining as a guest, you agree to these standards. We’re here for good conversation, not drama.
Pay attention to those who run to the defense of reprehensible behavior.
@BrendanN4dn3rb
@BertMacFatStaXx
Real retweeted
Ohmies are coming 🙏🪷
Friday, November 6 · 9am PST
GTD phase: 48 hours, then public
Official mint page:
opensea.io/collection/ohmies
Check your spot:
ohmies.squareapes.com/check
Real retweeted
I am in no way shape or form associated with Christian Barker, barkmeta, CSN or it's associates. I am a concerned member of the $DOGE community.. I left the X platform for about 24 months, when I returned, CSN had taken over spaces and I saw no more $DOGE spaces being held. I began attending out of curiosity. The majority of the people seem like really wonderful humans.
Although red flags started to pop up in my head when I heard the social engineering tactics being used by barkmeta and community leaders in CSN spaces l. the theft of Doginals happened very soon after I began attending CSN Spaces.
Out of concwr. For community members , I started a deep dive into the leaders of the community. ( I do own doginals, but they were given to me as free gifts when the project began and I never held them anywhere other than mydoge wallet, which I understand no longer supports NFTS).
I had seen Bark around Crypto spaces in the past I stayed away from his spaces because they always felt very scammy.
Clearly he has upped his game significantly since then.
He has effectively scrubbed the internet of all negative mentions of him and flooded the market with paid for advertisements that look like news reports, but are simply PR pieces.
I am concerned for the well being of the good people in the doginals community and hope 🙏 that they will educate themselves about the current leadership in the community.
Keep in mind, the community can continue to thrive under new leadership. Anytime, any day, the community can choose to reorganize, stay strong and connected and disconnect from current leadership of it wants to.
I remain concerned that community members using gigatron are giving access to their private accounts to people who have, in the past, been bad actors in the crypto community.
At the end of the day, my goal is to have documentation about the history of Christian Barker and his Associates available for people doing their homework and research before getting involved with him financially.
I hope this helps answer any questions about my motives in posting articles, video and data on Christian Barker and his Associates.
A concerned $DOGE OG
Mushruum
@Heimdall_Bull @MartinSeeger2 @swizzxxx
In the wake of last nights show,
We are going to laying down some ground rules for speaking in
Creation | Station
Abhorrent behavior and abusive language will no longer be tolerated.
This is a space for adults.
Stay tuned...
Creation | Station - Ep. 271 | Think Tank Thursday 🤔 nitter.cf/i/spaces/1PJqrNvPvBLxb
Real retweeted
Building bridges with new friends in web3, a collection inspired by @Vamsi589 and the XRP crew from @realXRPL @anthonyzNFT spaces.
Introducing the latest Rustyverse drop
Ohmies
528 Supply
Coming Soon 🙏🪷
Real retweeted
Creation | Station - Ep. 271 | Think Tank Thursday 🤔 nitter.cf/i/spaces/1PJqrNvPvBLxb
🚨Doginal Dogs Marketplace: Security Review🚨
✅A public-information assessment of market.doginaldogs.com (late October 2026).
❌This is not a full code audit or penetration test.
⌚️Current Status
Trading on the official Doginal Dogs Marketplace is temporarily paused. The site displays the following notice:
“With AI-driven exploits on the rise across the internet, we’ve temporarily paused marketplace trading as a precaution while we roll out upgraded protections. You can still view and share inscriptions.”
- Listed count is effectively zero while the pause is active.
- The site is a Next.js application hosted on Vercel.
- HSTS is enabled.
🎯Critical Incident
In late October 2026, holders who listed Doginal Dogs on the official marketplace reported that their inscriptions were taken without payment.
- Roughly 200 dogs from approximately 194 addresses were swept in about 40 seconds by a single wallet.
- Some additional dogs were lost as miner fees during the sweep.
- The attacker’s address was publicly identified in community reports.
🧑🔬Technical Flaw
Sellers were required to sign listings using **SIGHASH_NONE|ANYONECANPAY (0x82)**.
- This signature type does not commit to outputs or the payment amount.
- The resulting signatures were stored server-side (reportedly for up to 365 days) and made available to visitors’ browsers.
- Anyone who obtained a signature could construct a transaction that moved the dog without paying the seller.
Other Doginals marketplaces were observed using the safer **SIGHASH_SINGLE|ANYONECANPAY (0x83)** pattern, which pins the seller’s payout output.
🎟️Claims Versus Observed Reality
Promotional materials repeatedly described the marketplace as:
- Open source
- Independently audited by leading firms
- Free of vulnerabilities or incidents
No public source repository or audit reports covering the listing and signing flow were located. The October theft directly contradicts those claims.
🛸Additional Observations
- The built-in browser wallet generates and stores keys client-side; there is no public evidence that seeds were exfiltrated to the server.
- Serving raw listing signatures to untrusted clients remains high-risk even with a better sighash type.
- Standard transport security (HTTPS + HSTS) is present; no Content-Security-Policy meta tag was observed.
✍️Recommendations
**For the marketplace team**
- Switch listing signatures to a sighash that commits to the seller’s payment (at minimum SIGHASH_SINGLE|ANYONECANPAY or equivalent).
- Stop exposing raw seller signatures to arbitrary clients.
- Publish the source code and any real third-party audits of the wallet and listing flow before re-enabling trading.
- Conduct a focused re-audit of the partial-signature / listing / buy path.
**For holders**
- If you listed any dogs before the pause, treat those signatures as compromised and move the dogs (and related UTXOs) to a fresh wallet.
- Prefer hardware wallets or well-audited external wallets over the site’s built-in wallet.
- Always verify transaction details before signing.
⚖️Bottom Line
The official Doginal Dogs Marketplace had a documented design flaw in its core listing mechanism that was publicly exploited and resulted in the loss of holder assets. Trading remains paused while upgrades are implemented. Until the code is public, a proper audit is released, and the signing flow is demonstrably fixed, listing on this market should be treated as high-risk.
