
Former Ethereum core dev at @ErigonEth. Created @otterscan. Sometimes shitposter
Sao Paulo, Brazil
Joined January 2020
- Tweets7.9K
- Following1.4K
- Followers1.9K
- Likes11.8K
[1/6] Long story, short: introducing Otterscan, an open-source, blazingly fast, laptop-friendly, @ethereum block explorer built on top of @ErigonEth π¦¦
canβt wait for it get incorporated into the training data so my agents can take max advantage of it
A new Go API for JSON go.dev/blog/jsonv2
Willian Mitsuda (β, β) π¦π retweeted
With the recent wave of vulnerability disclosures, itβs a good time to take a closer look at your own code.
Turn your coding agent into a team of security auditors with the open-source skill that seeded Cloudflareβs vulnerability discovery harness.
The 6 phase approach:
1. Map the codebase
2. Hunt for vulnerabilities
3. Challenge each candidate
4. Record the findings
5. Verify the findings
6. Report whatβs confirmed, rejected, or still needs validation
Start your hunt here:
github.com/cloudflare/securiβ¦
Willian Mitsuda (β, β) π¦π retweeted
The web rewrite is working.
On a slow connection, the old X web took more than 22 seconds to show the first post on a profile. The new X web does it in 2.7 seconds. Here's how we did it, and how we're rolling it out one country at a time.
blog.x.com/en/engineering/reβ¦
Amazon Brasil has definitely become the worst place to buy anything in Brazil
ParabΓ©ns @amazonbrasil @AmazonHelp pelo serviΓ§o porco de entregas. Me enviam um produto caro, limitado, difΓcil de comprar, sem embalagem externa e com etiqueta de entrega colada no produto. Qual a lΓ³gica? Custa ter uma embalagem descente ? NΓ£o vou devolver mas pedi reembolso.
Readers added context they thought people might want to know
A Amazon envia itens selecionados na embalagem original do fabricante sem caixa adicional como parte do programa oficial de sustentabilidade "Envio sem embalagem adicional da Amazon" (SIPP). Clientes sΓ£o informados no checkout e podem optar por embalagem extra da Amazon.
revistapegn.globo.com/redes-sociais/β¦
x.com/AmazonHelp/staβ¦
amazon.com.br/b?ie=UTF8&nodeβ¦
Willian Mitsuda (β, β) π¦π retweeted
The Rust remake of sudo is not a drop-in replacement for good old sudo.
Weird choice.
did you know the existing shell scripts could break in unbelievable ways bc Ubuntu decided to yolo their rust-rewritten components?
github.com/uutils/coreutils/β¦
Fixes available in -proposed pocket for CVE-2026-98432. Read the blog for more details: ubuntu.com/blog/fixes-availaβ¦
Willian Mitsuda (β, β) π¦π retweeted
SOLAR: 100x FASTER SOLIDITY
Solar is the future of Solidity and the EVM.
It's >100x faster than Solc.
It has faster bytecode than Solady with no assembly.
Its bytecode is faster to interpret by the EVM.
Solar fixes Stack Too Deep!
foundryup
forge --use solar
Blog below.
Willian Mitsuda (β, β) π¦π retweeted
So turns out we were right: stack too deep was always fixable without any EVM changes
Willian Mitsuda (β, β) π¦π retweeted
So whoever did this can also move money out of MB's customer deposit addresses.
At 14:03 they did it again with stablecoins: 776 addresses, $82k of USDT and USDC. Most of the USDT went into the address Tether had already frozen.
MB says customers haven't lost anything.
Willian Mitsuda (β, β) π¦π retweeted
Brazil's Mercado Bitcoin lost about $49M across 17 chains overnight.
The attacker picked at 8 small chains for 4 hours, then emptied the main hot wallets in 67 minutes. Hours later they swept 27,160 customer deposit addresses too.
I traced every step π§΅
yeah, very awful comms, they should fire their social media or whoever made that statement if there will be an exchange after that episode
So @Ubuntu still hasn't patched this open hole on any Ubuntu server on the public internet that lets anyone take it over
We might just have to switch all our servers over to Debian in this new post-AGI time of rapid cybersecurity hacks which require just as rapid patching
Slowpokes will be left behind
chalmovsky.com/posts/wtf-ubuβ¦
This is why I said you want your VPS ports all closed
Then only let it be accessible inside your Tailscale for SSH and via a Cloudflare Tunnel to receive web traffic
Any Linux box can be taken over with just a single TCP port exposed to the internet now
A stop gap is disabling MPTCP on your VPS now but even better is not having any public ports exposed!
yeah, they just need to run geth βreturn-funds-to-binance <block-number> βdangerously-skip-permissions and restart the nodes
Willian Mitsuda (β, β) π¦π retweeted
What a disaster atlasum.net/blog/cve-2026-98β¦




























