Pinned Tweet
Ever have an idea of how Ethereum could be safer to use?
This is your chance to tell us about it, get it funded, and make it happen!
This is your chance to tell us about it, get it funded, and make it happen!
Onchain security is everyone’s problem and nobody’s job.
ETHSecurity Initiatives is how we are changing that.
Propose the work. Fund the work. Build the work.
initiatives.thedao.fund
12
5
39
3,119
Griff Green - griff.eth retweeted
Amazing work @odysseas_eth and team!
Today, 1 in 2 Ethereum blocks will be protected.
With Phylax, apps can set circuit breakers that Titan Builder enforces at block construction, excluding transactions that violate app-defined rules before settlement.
It's a simple idea: hacks should not settle.
2
1
27
738
Griff Green - griff.eth retweeted
Ethereum people: let's get fucking serious.
We cannot keep pitching the future of finance while treating catastrophic losses as just normal cost of doing business.
Until protecting users from preventable disasters becomes a basic expectation/industry standard, we remain a ry.
I want Ethereum to win. My bags depend on it. But as a user, I'm increasingly afraid to deploy anything into DeFi. I don't know about what I don't know about your protocols admin, signer, integration, and other dependencies. Even one mistake or a CCP honeypot hottie can lead to total loss. It's scary.
Audits are not enough. Bug bounties are not enough. Great team with great reputation and track record... not enough.
We need circuit breakers.
Today, Phylax and Titan are bringing circuit breakers to Ethereum
It's simple: protocol teams define outcomes they refuse to allow. Transactions that violate those rules are rejected and won't settle.
A compromised key or an admin fuck up should have a limit on how much it can destroy. Phylax sets that limit.
Huge congrats to @odysseas_eth and the team on launching this. He's the hero we need. When shit hits the fan, he's on podcasts and livestreams explaining the hacks and what it means for you and me. He has been invited by the SEC to map out onchain risks. He can speak to wall street and the deep ethereum nerds. He looks incredible in a suit. He's got rizz. I think he might just be the guy we need to save Ethereum. We should all considers ourselves lucky that we still have folks like him pushing this space forward.
We cannot keep pitching the future of finance while treating catastrophic losses as just normal cost of doing business.
Until protecting users from preventable disasters becomes a basic expectation/industry standard, we remain a ry.
I want Ethereum to win. My bags depend on it. But as a user, I'm increasingly afraid to deploy anything into DeFi. I don't know about what I don't know about your protocols admin, signer, integration, and other dependencies. Even one mistake or a CCP honeypot hottie can lead to total loss. It's scary.
Audits are not enough. Bug bounties are not enough. Great team with great reputation and track record... not enough.
We need circuit breakers.
Today, Phylax and Titan are bringing circuit breakers to Ethereum
It's simple: protocol teams define outcomes they refuse to allow. Transactions that violate those rules are rejected and won't settle.
A compromised key or an admin fuck up should have a limit on how much it can destroy. Phylax sets that limit.
Huge congrats to @odysseas_eth and the team on launching this. He's the hero we need. When shit hits the fan, he's on podcasts and livestreams explaining the hacks and what it means for you and me. He has been invited by the SEC to map out onchain risks. He can speak to wall street and the deep ethereum nerds. He looks incredible in a suit. He's got rizz. I think he might just be the guy we need to save Ethereum. We should all considers ourselves lucky that we still have folks like him pushing this space forward.
Today, 1 in 2 Ethereum blocks will be protected.
With Phylax, apps can set circuit breakers that Titan Builder enforces at block construction, excluding transactions that violate app-defined rules before settlement.
It's a simple idea: hacks should not settle.
2
1
37
1,448
Griff Green - griff.eth retweeted
You asked, we answered!
Our Head of Ops, @bettina_boon, has confirmed there WILL be cake to celebrate our 10th edition 🎂.....also:
- Institutional does not mean boring (EthCC doesn't know this word)
- We're Eth-baby friendly
- You can have high expectations for our milestone edition!
👇
Our Head of Ops, @bettina_boon, has confirmed there WILL be cake to celebrate our 10th edition 🎂.....also:
- Institutional does not mean boring (EthCC doesn't know this word)
- We're Eth-baby friendly
- You can have high expectations for our milestone edition!
👇
6
6
32
1,717
Griff Green - griff.eth retweeted
So @odysseas_eth is a known chad, and its solutions like this that are required for crypto to grow up, get safe, and stop losing billions of dollars to North Korea
Stuff like this lets us dream bigger dreams again
Stuff like this lets us dream bigger dreams again
Today, 1 in 2 Ethereum blocks will be protected.
With Phylax, apps can set circuit breakers that Titan Builder enforces at block construction, excluding transactions that violate app-defined rules before settlement.
It's a simple idea: hacks should not settle.
5
6
58
7,534
Griff Green - griff.eth retweeted
Working on longer posts with various thoughts from Devcon. But in short…
- It’s always about the people. What a delight seeing so many friends again, optimism and dedication flourish even in hard times. Filled with gratitude rn. 🫶
- What if all software were consensual? Do the people you’re “onboarding” know what they’re getting themselves into? Blindly agreeing to T&C doesn’t count…
- Nuance is inevitably tricky for human minds to comprehend. It will always be tempting to follow vibes and b&w tribes. We must push back at these tendencies to build resilient civilizations. If the people around you all agree on something, let alone everything, something is wrong. Seek disagreement and critical discussion.
- Play long-term games. Don’t swarm someone for 5 seconds of their time. It’ll never serve your goals. I promise.
- It’s always about the people. What a delight seeing so many friends again, optimism and dedication flourish even in hard times. Filled with gratitude rn. 🫶
- What if all software were consensual? Do the people you’re “onboarding” know what they’re getting themselves into? Blindly agreeing to T&C doesn’t count…
- Nuance is inevitably tricky for human minds to comprehend. It will always be tempting to follow vibes and b&w tribes. We must push back at these tendencies to build resilient civilizations. If the people around you all agree on something, let alone everything, something is wrong. Seek disagreement and critical discussion.
- Play long-term games. Don’t swarm someone for 5 seconds of their time. It’ll never serve your goals. I promise.
2
4
70
1,554
Griff Green - griff.eth retweeted
1/3 I'm letting go two of the most amazing folks I have ever worked with in my life:
@d4rm_ who is already transitioning into another organization with my full support, and @manuchaich who has taken the phishingdojo.com from an immature project to a fully fledged product.
@d4rm_ who is already transitioning into another organization with my full support, and @manuchaich who has taken the phishingdojo.com from an immature project to a fully fledged product.
2
4
26
2,034
Griff Green - griff.eth retweeted
Attackers are now publicly attacking critical repos with malicious PRs
PRs. Make sure you review all external contributions comprehensively.
A GitHub account created at 01:26 UTC today spent six hours trying to get into wallet repos at chainapsis (Keplr/Vizor) and Zingo Labs (Zcash).
When Codex review flagged its "diagnostics" PRs that POSTed signing keys, it opened an AGENTS(.)md PR telling AI reviewers that uploading secrets is the project convention. Then it went quieter: a crate it had just published, lwd-uri-util, with the stealer in build(.)rs, slipped into Zingo PRs inside a full-file CRLF rewrite.
build(.)rs runs on cargo build, cargo check, even rust-analyzer opening the project. It grabs env vars, git/gh/AWS/npm/cargo creds, Keplr MCP vaults and macOS Keychain entries.
Your AI reviewer reads AGENTS(.)md too. Review it like CI config, not docs.
PRs. Make sure you review all external contributions comprehensively.
A GitHub account created at 01:26 UTC today spent six hours trying to get into wallet repos at chainapsis (Keplr/Vizor) and Zingo Labs (Zcash).
When Codex review flagged its "diagnostics" PRs that POSTed signing keys, it opened an AGENTS(.)md PR telling AI reviewers that uploading secrets is the project convention. Then it went quieter: a crate it had just published, lwd-uri-util, with the stealer in build(.)rs, slipped into Zingo PRs inside a full-file CRLF rewrite.
build(.)rs runs on cargo build, cargo check, even rust-analyzer opening the project. It grabs env vars, git/gh/AWS/npm/cargo creds, Keplr MCP vaults and macOS Keychain entries.
Your AI reviewer reads AGENTS(.)md too. Review it like CI config, not docs.
27
35
212
16,536
Griff Green - griff.eth retweeted
Phylax is bringing circuit breakers to Titan Builder's block production, allowing applications to stop state transitions that violate their security rules before they settle.
Our mission: stop users from losing money to hacks and errors in DeFi. It's crypto's biggest thorn. We this and unlock unprecedented growth for all blockchains, starting with Ethereum.
Our mission: stop users from losing money to hacks and errors in DeFi. It's crypto's biggest thorn. We this and unlock unprecedented growth for all blockchains, starting with Ethereum.
2
3
62
3,333
Amazing work @odysseas_eth and team!
Today, 1 in 2 Ethereum blocks will be protected.
With Phylax, apps can set circuit breakers that Titan Builder enforces at block construction, excluding transactions that violate app-defined rules before settlement.
It's a simple idea: hacks should not settle.
2
1
27
738
Griff Green - griff.eth retweeted
Today, 1 in 2 Ethereum blocks will be protected.
With Phylax, apps can set circuit breakers that Titan Builder enforces at block construction, excluding transactions that violate app-defined rules before settlement.
It's a simple idea: hacks should not settle.
With Phylax, apps can set circuit breakers that Titan Builder enforces at block construction, excluding transactions that violate app-defined rules before settlement.
It's a simple idea: hacks should not settle.
54
76
434
87,854
Griff Green - griff.eth retweeted
Hot damn, that’s a good pull of @eth_strategy trading cards. Hey @griffgreen I got a you card. 😘
3
1
13
1,294
Griff Green - griff.eth retweeted
An honour to introduce and question the security masterminds on stage at @EFDevcon.
Two days of shared knowledge under a huge Ethereum logo.
Thanks for securing our ecosystem 🫡 @0xMattmatt @DevPramoth @Elliot0x @kaanuzdogan @griffgreen @Montyly @0xlouistsai @rsquare @ngp2311 SagivMooly @_rossstephenson
Two days of shared knowledge under a huge Ethereum logo.
Thanks for securing our ecosystem 🫡 @0xMattmatt @DevPramoth @Elliot0x @kaanuzdogan @griffgreen @Montyly @0xlouistsai @rsquare @ngp2311 SagivMooly @_rossstephenson
9
7
74
2,572
Griff Green - griff.eth retweeted
.@blockthreat is now a public good!
This is the best crypto security related content out there.
Especially if you are in the ETHSecurity space, it's a must skim every week.
blockthreat.com/blockthreat-we…
This is the best crypto security related content out there.
Especially if you are in the ETHSecurity space, it's a must skim every week.
blockthreat.com/blockthreat-we…
4
4
40
1,115
Griff Green - griff.eth retweeted
when a new exploit looks familiar, an old issue is usually where you find the last time it happened and how it got fixed. having the whole archive free makes that so much easier
0
1
4
112
Griff Green - griff.eth retweeted
Glad to share what we have been building: a GitHub intel platform for tracking DPRK IT workers in open source
We now have 26k+ GitHub records, ~30k linked emails/URLs/handles, and 90k+ follow relationships mapped as a graph
Red flags come from username patterns, behavioral th its source attached It surfaces signals for analysts, it doesn't attribute.
There is still more to build!!
And remember that we are participating in the @thedaofund, and any contribution helps keep this work going.
We now have 26k+ GitHub records, ~30k linked emails/URLs/handles, and 90k+ follow relationships mapped as a graph
Red flags come from username patterns, behavioral th its source attached It surfaces signals for analysts, it doesn't attribute.
There is still more to build!!
And remember that we are participating in the @thedaofund, and any contribution helps keep this work going.
1
1
4
896
Expanding on why I believe "ETH as store of value (SoV)" makes much more sense to focus on than "ETH as fee-burning token".
Three primary reasons:
1. ETH as fee-burning token never was as strong as it seemed
2. Optimizing for ETH as fee-burning token would demand Ethereum and ETH function in ways that are very hard to make compatible with decentralization and capture resistance.
3. Meanwhile, optimizing for ETH as SoV is aligned with Ethereum focusing on its unique strengths (decentralization and CROPS)
EIP-1559 (including its burn) is fine and good, we should keep them. But we should not feel sad if fee burn is < 10% of breakeven indefinitely; the value of ETH comes from elsewhere.
The core idea: the big thing that people appreciate about Ethereum is decentralization and CROPS. The main pragmatic benefit that these things translate into is stability. SoV is the category where that is not an unneeded extra we merely put effort into for ideological reasons, but rather a pragmatic strength from the perspective of people putting in their assets. And in the era of AI disruption, stability will be highly valued.
0
0
0
104
Griff Green - griff.eth retweeted
Expanding on why I believe "ETH as store of value (SoV)" makes much more sense to focus on than "ETH as fee-burning token".
Three primary reasons:
1. ETH as fee-burning token never was as strong as it seemed
2. Optimizing for ETH as fee-burning token would demand Ethereum and ETH function in ways that are very hard to make compatible with decentralization and capture resistance.
3. Meanwhile, optimizing for ETH as SoV is aligned with Ethereum focusing on its unique strengths (decentralization and CROPS)
EIP-1559 (including its burn) is fine and good, we should keep them. But we should not feel sad if fee burn is < 10% of breakeven indefinitely; the value of ETH comes from elsewhere.
The core idea: the big thing that people appreciate about Ethereum is decentralization and CROPS. The main pragmatic benefit that these things translate into is stability. SoV is the category where that is not an unneeded extra we merely put effort into for ideological reasons, but rather a pragmatic strength from the perspective of people putting in their assets. And in the era of AI disruption, stability will be highly valued.
Three primary reasons:
1. ETH as fee-burning token never was as strong as it seemed
2. Optimizing for ETH as fee-burning token would demand Ethereum and ETH function in ways that are very hard to make compatible with decentralization and capture resistance.
3. Meanwhile, optimizing for ETH as SoV is aligned with Ethereum focusing on its unique strengths (decentralization and CROPS)
EIP-1559 (including its burn) is fine and good, we should keep them. But we should not feel sad if fee burn is < 10% of breakeven indefinitely; the value of ETH comes from elsewhere.
The core idea: the big thing that people appreciate about Ethereum is decentralization and CROPS. The main pragmatic benefit that these things translate into is stability. SoV is the category where that is not an unneeded extra we merely put effort into for ideological reasons, but rather a pragmatic strength from the perspective of people putting in their assets. And in the era of AI disruption, stability will be highly valued.
937
1,139
6,667
1,974,898
Griff Green - griff.eth retweeted
Huge thanks to the @thedaofund team for the invitation to the Security Hub, and for creating a great platform at @EFDevcon! It was wonderful to contribute multiple sessions and workshops and be part of such an amazing gathering of builders, researchers, and security experts.
Appreciate your support and collaboration. Looking forward to building together and continuing these conversations. Special thanks to @anamarie_com, @griffgreen and @GivJake for their support, encouragement and feedback.
Appreciate your support and collaboration. Looking forward to building together and continuing these conversations. Special thanks to @anamarie_com, @griffgreen and @GivJake for their support, encouragement and feedback.
0
6
17
226
.@blockthreat is now a public good!
This is the best crypto security related content out there.
Especially if you are in the ETHSecurity space, it's a must skim every week.
blockthreat.com/blockthreat-we…
This is the best crypto security related content out there.
Especially if you are in the ETHSecurity space, it's a must skim every week.
blockthreat.com/blockthreat-we…
4
4
40
1,115