GridPlus retweeted
@maverick_en @Trezor what if I told you we already have a tamper proof hardware wallets at home
x.com/gridplus/statu…
x.com/gridplus/statu…
2/ Every Lattice1 ships with an armed anti-tamper mesh. It's a tripwire for physical intrusion: opening the case erases its secure data and permanently disables the device.
A unit opened in transit arrives unusable with a visible warning to contact us for a replacement.
1
1
3
681
GridPlus retweeted
In the age of ledger hacks
This setup is goated
This setup is goated
1/ Buying a hardware wallet should not mean learning to spot a hidden implant.
Supply chain attacks belong in the security model. GridPlus has built defenses against them into the Lattice1 since its 2020 launch. Here's how.
1
1
9
1,291
GridPlus retweeted
moved assets from an old ledger wallet to fresh wallets on my Lattice yesterday
1/ Buying a hardware wallet should not mean learning to spot a hidden implant.
Supply chain attacks belong in the security model. GridPlus has built defenses against them into the Lattice1 since its 2020 launch. Here's how.
20
2
39
1,810
GridPlus retweeted
NEW: ABI calldata decoder for @gridplus Lattice1.
Ambire now fetches ABI data from block explorers before signing and passes it as a decoder buffer to the device.
It enables Lattice 1 firmware to display the function name and decoded parameters instead of raw data.
Ambire now fetches ABI data from block explorers before signing and passes it as a decoder buffer to the device.
It enables Lattice 1 firmware to display the function name and decoded parameters instead of raw data.
0
4
37
2,967
GridPlus retweeted
Donated to the latest round on @OctantApp !
The new interface is amazing.
@growthepie_eth @AestusRelay @ProtocolGuild @greenpilldevs @shefiorg @ethStaker @ShutterNetwork and so many other great projects got a little piece of the pie in this episode
Special mention to @Rabby_io and @gridplus for the best Dang transaction experience on the market
The new interface is amazing.
@growthepie_eth @AestusRelay @ProtocolGuild @greenpilldevs @shefiorg @ethStaker @ShutterNetwork and so many other great projects got a little piece of the pie in this episode
Special mention to @Rabby_io and @gridplus for the best Dang transaction experience on the market
#150 - Nico Gallardo - Octant x.com/i/broadcasts/1…
3
5
30
1,640
GridPlus retweeted
recent Ambire updates:
- ERC-7730 clear signing
- per-app account scoping
- Explore (ex. Apps Catalog)
- Uniswap API in Ambire swap
- ABI calldata decoder for @gridplus
- Safe EIP-712 hash preview before signing
- Tenderly simulation for Safe accounts in error details
- ERC-7730 clear signing
- per-app account scoping
- Explore (ex. Apps Catalog)
- Uniswap API in Ambire swap
- ABI calldata decoder for @gridplus
- Safe EIP-712 hash preview before signing
- Tenderly simulation for Safe accounts in error details
5
6
44
3,058
Upgrade your hardware security this #WorldBackupDay.
Save $70 on the Lattice1 and get 7 FREE SafeCards. Each swappable card backs up and signs for a different seed phrase. That's 8 wallets for $329!
🗓️7 days only
🌏Free shipping
🤑No code needed
Only @ gridplus.io
Save $70 on the Lattice1 and get 7 FREE SafeCards. Each swappable card backs up and signs for a different seed phrase. That's 8 wallets for $329!
🗓️7 days only
🌏Free shipping
🤑No code needed
Only @ gridplus.io
8
4
21
3,251
Another supply-chain compromise is unfolding tonight, this time affecting Axios on npm.
If Axios is in your stack, audit your lockfiles now for axios@1.14.1, axios@0.30.4, and plain-crypto-js@4.2.1. Read the thread below and pin or roll back immediately if found.
If Axios is in your stack, audit your lockfiles now for axios@1.14.1, axios@0.30.4, and plain-crypto-js@4.2.1. Read the thread below and pin or roll back immediately if found.
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise.
This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.
Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:
• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence
If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
2
4
21
3,904
The #WorldBackupDay (March 31) is a reminder that backing up data is crucial. Beyond crypto, it’s about protecting your digital keys, files and priceless memories.
Our hardware is resilient - make sure your backup strategy is too.
👀Stay tuned for our special offer on March 31!
Our hardware is resilient - make sure your backup strategy is too.
👀Stay tuned for our special offer on March 31!
4
0
11
1,527
🚨Security alert: widely used AI software LiteLLM, was hit by a supply chain attack.
The malicious code steals crypto wallet data, including Ethereum keystores, plus API keys, cloud credentials, SSH keys, and other sensitive files.
Installation alone can trigger it. 1/4
The malicious code steals crypto wallet data, including Ethereum keystores, plus API keys, cloud credentials, SSH keys, and other sensitive files.
Installation alone can trigger it. 1/4
2
7
20
2,443
Today's AI tooling often sits on machines also touching money, infra, and sensitive credentials.
If your computer holds keys, everything on it impacts you crypto security.
Detail and sources:
github.com/BerriAI/litell…
endorlabs.com/learn/teampcp-…
futuresearch.ai/blog/litellm-p…
4/4
If your computer holds keys, everything on it impacts you crypto security.
Detail and sources:
github.com/BerriAI/litell…
endorlabs.com/learn/teampcp-…
futuresearch.ai/blog/litellm-p…
4/4
0
0
5
622