Pinned Tweet
Career Update: I've joined GregoAI
@therealgregoAI is building an elite AI security agent, which has already earned more than half a million dollars in bug bounties, including the largest AI-discovered bug bounty of $250K.
The team here is absolutely cracked, excited to be a forward to helping push the boundaries of AI security research.
@therealgregoAI is building an elite AI security agent, which has already earned more than half a million dollars in bug bounties, including the largest AI-discovered bug bounty of $250K.
The team here is absolutely cracked, excited to be a forward to helping push the boundaries of AI security research.
16
1
103
3,357
ABDul Rehman | GregoAI retweeted
Summary of web3 security in 2026
Optimists -> made millions with bug bounties and other work
Pessimists -> leaving the field, spending their time complaining about the lack of x, y, z (”it was better before” mentality)
lesson in there
Optimists -> made millions with bug bounties and other work
Pessimists -> leaving the field, spending their time complaining about the lack of x, y, z (”it was better before” mentality)
lesson in there
7
5
97
5,278
Come join our goated GregoAI SRs team anon! 🔥
Grego AI has paid out over $700,000 in bounty incentive rewards to our SRs this year alone.
We value human expertise and incentivize appropriately.
Now recruiting el33t Web2 hackers with a proven track record.
DM @0xriptide if you are up for the challenge
1
0
10
450
ABDul Rehman | GregoAI retweeted
Growing up Muslim in America post 9/11, you learn which parts of your faith to keep quiet.
25 years of propaganda later, “turn inshallah to alhamdulillah” is a victory line on national TV.
Time for Muslims to stop keeping quiet. We have a lot more good to offer than two words.
25 years of propaganda later, “turn inshallah to alhamdulillah” is a victory line on national TV.
Time for Muslims to stop keeping quiet. We have a lot more good to offer than two words.
"My name is Abdulrahman Mohamed El-Sayed, and I am so proud and honored to stand here as your Senator-elect from the great state of Michigan. Up until right about now, you might have noticed I always say 'Inshallah' or 'God willing' whenever the outcome of this race was onight, we can turn that 'Inshallah' into a 'Alhamdulillah!'"
62
368
2,915
38,102
ABDul Rehman | GregoAI retweeted
So you need to understand:
Attack chain
- Fake recruitment interview: An engineer downloaded a malicious coding assignment onto a work Mac. They used this for recon.
- Endpoint compromise: Malware replaced the legitimate pyenv executable, established attacker communication, and evaded endpoint protection.
- AI tooling pivot: Attackers leveraged Binance's internal AI tool to compromise two additional wallet engineers.
- Credential theft: Stole a Wallet DevOps engineer's container deployment token.
- Infrastructure compromise: Used another engineer's machine to deploy a malicious container and reach wallet-signing operations.
When I say
Attack chain
- Fake recruitment interview: An engineer downloaded a malicious coding assignment onto a work Mac. They used this for recon.
- Endpoint compromise: Malware replaced the legitimate pyenv executable, established attacker communication, and evaded endpoint protection.
- AI tooling pivot: Attackers leveraged Binance's internal AI tool to compromise two additional wallet engineers.
- Credential theft: Stole a Wallet DevOps engineer's container deployment token.
- Infrastructure compromise: Used another engineer's machine to deploy a malicious container and reach wallet-signing operations.
When I say
16
21
140
40,116
ABDul Rehman | GregoAI retweeted
0.03 seconds after Claude refuses to work because ‘[cyber]’
34
195
3,023
40,865
Big W @immunefi
Immunefi Credits are live.
You now receive credits equal to the fees you paid on valid work, backdated to the day fees began.
More than 700 researchers already have theirs. Here’s how it works. x.com/i/article/2117…
2
0
9
400
whats up with @_SEAL_Org? why it currently have a interim CEO 👀
1
0
1
972
ABDul Rehman | GregoAI retweeted
October in a nutshell:
- PHP got hacked
- Railway got hacked
- OpenCode got hacked
- Binance got hacked
- Polymarket got hacked
- GitHub Actions got hacked
- SoftBank got hacked
- Cursor marketplace got hacked
- Coinbase vendor got hacked
- Fireworks AI got hacked
- LiteLLM got hacked
- Capcom got hacked
- npm packages got hacked
- TiDB Cloud got hacked
- Warp's vendor got hacked
happy cybersecurity awareness month
- PHP got hacked
- Railway got hacked
- OpenCode got hacked
- Binance got hacked
- Polymarket got hacked
- GitHub Actions got hacked
- SoftBank got hacked
- Cursor marketplace got hacked
- Coinbase vendor got hacked
- Fireworks AI got hacked
- LiteLLM got hacked
- Capcom got hacked
- npm packages got hacked
- TiDB Cloud got hacked
- Warp's vendor got hacked
happy cybersecurity awareness month
393
2,984
16,094
530,658
first day working at Binance
i joined the IT security team, making sure funds stay safu
it's been a productive day
i already implemented a few security updates that i'm sure will have a huge impact to the platform
logging off now
i joined the IT security team, making sure funds stay safu
it's been a productive day
i already implemented a few security updates that i'm sure will have a huge impact to the platform
logging off now
5
0
15
793
ABDul Rehman | GregoAI retweeted
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/ann…
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/ann…
3,407
6,172
29,595
7,275,274
I'm sick of AI generated youtube thumbnails
Some genuinely great creators are putting out videos I don't even want to click on anymore because of the over-edited, fake looking thumbnails
Some genuinely great creators are putting out videos I don't even want to click on anymore because of the over-edited, fake looking thumbnails
1
0
1
241
gotta call out you ser, sorry but it is what it is @hoflolz
1
0
0
97
ABDul Rehman | GregoAI retweeted
A new $10K pledge for Ethereum security!
@therealgregoAI has committed $10,000 to the Open Standard and Automated Triage Tooling for Ethereum Security Issues initiative in TheDAO's ETHSecurity Initiatives Round.
This grant will support Runtime Verification's work on open-source tools that help security teams check whether reported vulnerabilities can actually be reproduced under real-world conditions.
With AI making security reports easier to generate, the need for reliable, automated triage is growing.
The aim is simple: spend less time sorting through invalid reports and more time addressing real security threats.
Big thanks to GregoAI for backing this work!
Explore the initiative and help fund it: initiatives.thedao.fund/initiative/ope…
@therealgregoAI has committed $10,000 to the Open Standard and Automated Triage Tooling for Ethereum Security Issues initiative in TheDAO's ETHSecurity Initiatives Round.
This grant will support Runtime Verification's work on open-source tools that help security teams check whether reported vulnerabilities can actually be reproduced under real-world conditions.
With AI making security reports easier to generate, the need for reliable, automated triage is growing.
The aim is simple: spend less time sorting through invalid reports and more time addressing real security threats.
Big thanks to GregoAI for backing this work!
Explore the initiative and help fund it: initiatives.thedao.fund/initiative/ope…
1
5
32
1,995
ABDul Rehman | GregoAI retweeted
messaging my wife a link containing proof of her husband cheating on her from an anonymous instagram account and then when she clicks on it texting her to let her know she failed the family phishing test and she has to retake my cybersecurity course
903
15,111
245,427
8,230,250