
builderrr || prev Devrel @base
127.0.0.1
Joined November 2020
- Tweets3.4K
- Following996
- Followers912
- Likes22.3K
techwithmide retweeted
New article: Understanding HTTP by Building an API From Scratch.
Using plain Node.js and no frameworks, you follow one request through DNS, TCP, TLS, HTTP, and the browser. Every step has code you can run.
vickish.me/blog/understandin…
techwithmide retweeted
$2.65M drained from Polymarket users in just 60 minutes.
No smart contract exploit. No protocol bug.
A hijacked DebugBear script reportedly used victims’ active sessions to drain their wallets in roughly 10 minutes.
Now, the attacker is reportedly being targeted with address poisoning.
We followed the money…
Here’s where the funds went, how the drain unfolded, and what happened next 👇
app.sandwormlab.xyz/notebook…
techwithmide retweeted
🚨 Polymarket just got drained: ~$2.65M from ~740 wallets in ONE hour and the polymarket team has said they would be reimbursing everyone, we're currently tracking the wallets
1/
HOW IT HAPPENED
It appears a third party script on polymarket.com (DebugBear) was swapped for a drainer that used victims’ own logged-in sessions. We’re tracking every wallet.
2/
The script read users’ session and trading keys from the browser, then used Polymarket’s own signing tool to sell their positions and send the money out. No passwords or private keys were needed. Just having the site open was enough.
3/
The attacker wallet: 0x3F99139F1C5854bb628c2e576Aaf638e99dFfc18It had zero activity for 2 days. Then it got ~1,000 transfers in a single hour, starting 17:10 UTC.
4/
Where is the money? (Subject to heavy change obviously as money gets moved around)
About 20 minutes after the last stolen funds arrived, the attacker emptied the wallet into 3 fresh ones:
0xe4C4C39C1733e1C7c06B79f97ED442B68Df41EC6: ~$1.72M
0xc91ee0574a14446DE200923729c349B9CAE19b60: ~$0.53M
0x5392587814Ce8c6af6789764f88e5e9AB0b9962C: ~$0.40M
5/
Don’t chase the decoys. Right after the exit, fake “POL” tokens were sent to lookalike addresses that start and end like the real exit wallets. This trick is called address poisoning. If you’re tracing this by eye, you’ll follow the wrong wallets.
6/
Who got hit: 44 wallets account for ~80% of the losses. The biggest we can see onchain lost ~$358k. Most victims lost under $1k.
7/
Status: Polymarket has removed the script, switched to cancel-only mode, paused its relayer, and says every affected user will be repaid in full.
$2.65M drained from Polymarket users in just 60 minutes.
No smart contract exploit. No protocol bug.
A hijacked DebugBear script reportedly used victims’ active sessions to drain their wallets in roughly 10 minutes.
Now, the attacker is reportedly being targeted with address poisoning.
We followed the money…
Here’s where the funds went, how the drain unfolded, and what happened next 👇
app.sandwormlab.xyz/notebook…
techwithmide retweeted
Brazil has 22+ local stablecoins.
We only have cNGN.
We need more!
had a call today with @0xMarcB (CEO of @0xPolygon)
we discussed about a real problem that makes Brazil onchain operations less competitive:
there are too many BR Real stablecoins
without a real winner, volume gets too diluted, which means less liquidity and higher fees
when you think about US dollars, you know there’s basically USDT and USDC, and then newer ones like USDG and PYUSD
but when you need to convert them via blockchain to a Brazilian token, there’s no great option
it’s actually cheaper doing fiat FX operations than swapping onchain, which sucks
if anyone knows how to solve that problem, we’re all ears, would love to position Dolafy as a market maker at some point to contribute…
below the list of stablecoins we have in Brazil
BRLA (Avenia)
BRZ (Transfero)
BRLV (Crown)
BRLD (Liqi)
BBRL (Braza Bank)
BRL1 (Mercado Bitcoin, Bitso, Foxbit, Cainvest)
wBRL (Ripio)
BRLN (Núclea)
ABRL (AmFi)
BRLC (CloudWalk / InfinitePay)
BRLM (Minteo)
BRLm (Mento, formerly cREAL)
VRL (SmartPay)
BRD (BRD Digital)
BRS (Nora Finance)
BRLP (PagFinance)
BRLe (Brasil Bitcoin)
BRTH (TokenHaus)
tBRL (Tokeniza)
tBRL (Tenbin)
jBRL (Jarvis Network)
B3RL (B3 — pilot)
techwithmide retweeted
I was able to save a protocol $9.8m at risk.
- all exploit details, full e2e, & acknowledged by team.
An unprivileged attack that’d cost an attacker just $1-5 causing loss of +114btc and an halt.
- Reach out if you want a review on your codebase 🫡
gist.github.com/blessingbloc…
Building Brimble is the hardest thing i've done in my life and to be honest I am kind of suprised to see it's still standing, it's so crazy because we don't support local builders enough and if it's in S.F it's the other way round
1) You get constantly compared to vercel/railway and it's sad because if you want to get people in this space to use it to you need to ship features to the quality they have already set (either same quality or you go higher)
2) After shipping almost the same quality, local users here still force you to make decisions by cutting cost of your product, just because you want them to use it and at the end of the day, you still get compared and you even have no choice.
3) I and abraham have been constantly bootstrapping the product for the last 4 years, so we only scale on demand. We don't have the luxury to throw money into compute unncessarily.
4) There were different iterations of the product just to get PMF, the directions changed about 2-3 times between the years.
5) oh fine, "enterprise" has the money. But at the same time, you need a good amount of money to get the licenses to support enterprise and at the same time, some enterprise will look down on you especially when it's just 2 engineers managing the product, ever since we got the idea in 2022.
You do performance and security audits yourself, you need to be extremely stable (just with a team of 2 and after all that, you still get compared. It's very much fine, but nobody gives a damn)
6) Brimble literally has everything (databases, sandboxes, fullstack deployments, autoscaling, static outbound ips e.t.c). Strived to succeed
7) You are also trying to pitch to investors, in a case where some of them don't have a clue or the nuances involved in what you are building. The best everyone has to do is support local products, supporting local products even gives you as a user a ton of advantage. You control the type of features you want, the prices is very affordable for you, you'd get the maximum support you need without having to send emails or wait for 3 business days to get feedbacks.
A few angels really believes in the vision and fingers crossed, really love it.
But at the end of the day, it still seems you aren't good enough for people to use you.
I'm extremely grateful for people that took all of these out of their mind to actually support us in terms of using the product end to end. Sharing reasonable feedbacks and also sticking around even when it had issues.
If i have the opportunity to do this again, i would peacefully decline.
techwithmide retweeted
If you like amebo and want to know what’s really going on with Paycrest, this one’s for you 👀
59,823 orders. 8 chains. $10.2M
app.sandwormlab.xyz/notebook…
This quoted post is unavailable.
techwithmide retweeted
Building a website with AI is becoming easy. Getting that website online and keeping it running is still a headache.
Abraham Ugbeshe and Muritala David built Brimble to make all of that stop being the problem.
Full story: startupin60.com/p/a9614422-c…
techwithmide retweeted
Founders, stop waiting for people to support you before you start showing off your work and what you are building , it can seem very lonely at times , posting your startup every single time , no likes , no engagements , no support.
You just have to keep going irregardless , keep showing up and doing your stuff , people wouldn’t support untill they see your motion and till it’s cool to support you.
techwithmide retweeted
Let me make this VERY clear! ⚽🏟️
Lagos Life does NOT record, copy, or rebroadcast football matches.
We have a legitimate broadcasting partner, and matches are streamed directly through their official player under a paid agreement.
What we’re building is a whole new way to experience football together. Stadiums, live chats, voice notes, and goal celebrations, all inside Lagos Life! 🇳🇬🔥
We’re building something special, and we’re doing it the right way. 🚀
techwithmide retweeted
Great to catch up, @Shalom_heyeliy!
As I told you: dream bigger. The possibilities are endless. 5m players already. The next global gaming giant can come from Lagos!
Proud to back you at @R17_Ventures alongside @OoTheNigerian, @_kingNath and @ijbguy!
nitter.cf/shalom_heyeliy/status/…
Lagos Life launched on October 1st. Just 9 days later, over 4.7 million people have played the game.
Today, I’m excited to announce that Vatar, the parent company behind Lagos Life, has closed a $500K angel round led by AB Hassan (@ijbguy), Nathan Nwachuku (@_KingNath), and GB Agboola (@TechProd_Arch).
Lagos is just the beginning. We’re building entire worlds, and there’s so much more to come. 🌍
vatar.com


































