Pinned Tweet
After three intense years, I’ve completed my exit from RAID Square, the company I co-founded in 2022, stepping down from my executive position and selling my shares.
Together with my co-founders, we built the company from the ground up with no external funding, establishing it as the leading blockchain investigation firm in France, where I led over +300 cases in sensitive environments.
I feel I’ve seen enough and completed my mission in this part of the industry but I’ll still remain available to act in the behind the scene when needed, as I always have.
My thanks go to the people I truly valued working with, and to everyone who took part in their own way. I wish continued success for what has been built.
Something new is now taking shape and it deserves my full focus.
I’ll share more soon,
MEVEN retweeted
Why DeFi Is Uniquely Exposed?
- White hat hacker @MevenRekt says: "The cost and skill required to find exploitable flaws in smart contracts is about to drop to effectively zero."
- Smart contract exploitation sit in a grey zone.
- Known exploits can be replayed on forks around the clock
Just look at the capabilities of Fable 5 compared to previous models 👇
MEVEN retweeted
I usually think we overdramatize the shit out of everything in this space. Every other week something is "the end of crypto" and then life just goes on as usual.
But I just had a very long conversation with the incredibly talented white hat hacker @MevenRekt about Anthropic's "Mythos" (its public version will likely be called Fable 5) model and honestly, this one hit different. When some of the most talented white hat hackers and security experts are genuinely concerned about DeFi and crypto security and hence are taking every possible precaution to protect themselves, how could we not be?
Quick recap for everyone who missed it:
Anthropic built an AI model so ridiculously powerful at finding software vulnerabilities that they kept it locked away, only accessible to 150 handpicked organizations like Google, Microsoft and JPMorgan through a program called Glasswing. That thing has already found over 10,000 critical vulnerabilities across the world's most important software.
The public light version of it, not even the full Mythos, found a critical flaw in an established protocol like Zcash within 24 hours. A flaw that had survived four years of scrutiny by some of the best cryptographers on the planet.
Now they're about to release Mythos / Fable 5, a first restricted public version with similar capabilities. Think about what that means. The cost and skill required to find exploitable flaws in smart contracts is about to drop to basically zero.
For DeFi this should be a massive wake up call. Unaudited protocols will become sitting ducks. Known exploits will get replayed on forks around the clock. Even small projects will get targeted simply because trying costs next to nothing now.
Look, I'm not trying to spread panic here and I might be overdramatizing it. But I'm also not going to pretend this isn't serious, so I'm simply trying to wake up as many of you as I can to mitigate the potential damage as much as possible.
I spent the last few hours revoking token approvals, moving funds to clean hardware wallets and cutting exposure to protocols I don't fully trust. It is a shit ton of effort and incredibly annoying, but I'd rather feel stupid for being too cautious than lose funds because I was too lazy.
It might not be as acute as some people will make it sound. But the direction is crystal clear. If you haven't locked down your security yet, do it today. Not tomorrow, not next week.
Today.
There is nothing to lose by taking the right precautions now, but a lot to lose in the future if you haven't.
Every help in sharing this for max awareness would be appreciated. Don't be the low hanging fruit hackers think you are.
MEVEN retweeted
1/
For a decade, Web3 and TradFi argued.
In 2026, they're sitting at the same table.
In 10 days, Jenny Johnson (CEO @FTDA_US, $1.5T AUM) and @adam3us (Co-Founder, @Blockstream , inventor of Hashcash) open Proof of Talk 2026 on the same stage.
That fireside is the thesis of the entire event.
@proofoftalk
Do NOT fall for this !
@sjdedic account as been compromised.
-> and btw Simon would never turn off comments, we all now that ;)
1 to (2²⁵⁶ - 2³² - 977)
🚨JUST IN: Every Bitcoin private key has been leaked.
Readers added context they thought people might want to know
The user claims of a website with all private keys. Technically this cannot be stored and displayed. Since there’s a finite number of accounts, searching this site gives attackers ability to hack your account. youtu.be/2eZ5DP2P5As?si…
MEVEN retweeted
🫡because security is also privacy, my signer Safe (0x5aFE...Da0 -> safe...dao :D) is fully funded via Tornado Cash. That means a Tornado-funded signer is now securing over $220M in assets. Next time someone claims Tornado Cash is "only used by criminals," show them this. Fucking proud to be part of the regenesis of TheDAO. LFG.
TheDAO is back. BULLISH
A decade later, we’re opening a new chapter.
TheDAO Security Fund: activating 75,000+ ETH to strengthen Ethereum security.
thedao.fund/
MEVEN retweeted
The relationship between "institutions" and "cypherpunk" is complex and needs to be understood properly. In truth, institutions (both governments and corporations) are neither guaranteed friend nor foe.
Exhibit A: theregister.com/2026/01/11/e… European Union seeking to aggressively support open source
Exhibit B: fightchatcontrol.eu/ European Union bureaucrats want Chat Control (mandatory encryption backdoors)
Exhibit C: the Patriot Act (which, we must note, _neither party_ now expresses much interest in repealing)
Exhibit D: the US government is now famously a user of Signal
Basically, the game-theoretic optimum for an institution is to have control over what it can control, but also to resist intrusion by others. In fact, institutions are often staffed by highly sophisticated people, who have a much deeper understanding of these issues than regular people and a much deeper will to do something about them. An important driver of many people's refusal to use data-slurping corposlop software is company policy.
Some people have the misperception that my words yesterday about the importance of using tools that maximize your data self-sovereignty are something that will appeal to individual enthusiast communities, but will be rejected as unrealistic by efficiency-minded "serious people". But this is false: "serious people" are often _more_ robustness-minded than retail and many already have policies even stricter than what I advocate.
I predict that in this next era, this trend will accelerate: institutions (again, both corporations and governments) will want to more aggressively minimize their external trust dependencies, and have more guarantees over their operations. Again, this does not mean that they want to minimize *your dependency on them* - that's the thing that we as the Ethereum community must insist on, and build tools to help people achieve. But that's precisely the complexity of the situation.
In the stablecoin world, this means:
* Asset issuers in the EU will want a chain whose governance center of gravity is not overly US-based, and vice versa (same for other pairs of countries)
* Governments will push for more KYC, but at the same time privacy tools will improve, because cypherpunks are working hard to make them improve. The more realistic equilibrium is that non-KYC'd assets will exist, and ability to use them with strong privacy will grow, but also over the next decade we'll see more attempts at "ZK proof of source of funds". We will see ideological disputes over how to respond to this
* Institutions will want to control their own wallets, and even their own staking if they stake ETH. This is actually good for ethereum staking decentralization. Of course, they will not proactively work to give you the user a self-sovereign wallet. Doing _that_ in a way that is secure for regular users is the task of Ethereum cypherpunks (see: smart contract wallets, social recovery).
Ethereum is the censorship-resistant world computer: we do not have to approve of every activity that happens on the world computer. I did not approve much of three million dollar digital monkeys, I will not approve much of privacy with centralized (including multisig/threshold) decryption backdoors. But the existence of those things is not up to me to decide. What *is* up to us is to build the world that we want to see on top of Ethereum, and make that world strong, so that it can prosper in the competition, both on the Ethereum chain itself, and against the centralized world.
At best, we can interoperate with the non-cypherpunk world to better bootstrap the cypherpunk world. For example, spreads on decentralized stablecoins can decrease if it's easy for people to run arbitrage strategies where they hold positive quantities of a centralized stablecoin and negative quantities of the decentralized one. If we want prediction markets to avoid sliding into sports betting corposlop, we should explore improving their liquidity by helping traditional financial entities use them to hedge against their existing risks. What is a bet from one side is often a purchase of insurance from the other side, and if we want prediction markets to evolve in a healthy way, it may be overall better for the counterparties of the sophisticated traders earning big APYs to be buyers of insurance than to be naive bettors who constantly lose money. Synergies like this should be explored across all domains.
This is why I do not believe that cypherpunk requires total hostility to institutions. Instead, I support a policy that institutions are already used to using against each other: openness to win-win cooperation, but aggressively standing up for our own interests. And in this case, our interest is building a financial, social and identity layer that protects people's self-sovereignty and freedom.
everything vitalik is saying is right, just kinda late imo
ethereum is too institutional by now for any sort of real cypherpunk pivot
global settlement layer is too lucrative of a position, which is not bad, but we must be real in that 100% of stablecoin, cefi and defi on ethereum will not go anywhere and not become less compliant
forensics today is ethereum's core business, the kyc tightening will continue, wallets will eventually be gated and linked to your full onchain history on all side wallets via billions of models already trained
🧵 Let's silence the rumor mill:
No, the UAE🇦🇪 hasn't "banned" privacy coins nationwide.
That's a massive oversimplification... here's the real story, based on official regs 👇
First off, the buzz started with the Dubai Financial Services Authority (DFSA) update on Jan 12, 2026. They restricted "privacy tokens" (e.g., Monero, Zcash) in the Dubai International Financial Centre (DIFC) -> a specific financial zone.
Not a blanket UAE ban.
This aligns with the Virtual Assets Regulatory Authority (VARA) rules from Feb 2023, which already banned anonymity-enhanced cryptos in broader Dubai for AML reasons.
But again, it's targeted at regulated entities, not your personal wallet.
For individuals: By my understanding you can STILL own, hold, or buy privacy coins via P2P, DEXs, or international platforms.
No law stops private possession. Just can't use local regulated exchanges for them. Don't let hype scare you out of your holdings!
Why the crackdown? Compliance with global FATF standards against money laundering and sanctions. UAE wants to be a safe crypto hub for institutions, not a Wild West. Similar moves in Japan, South Korea... it's a trend, not a UAE exclusive.
Bottom line: Rumors exaggerate for clicks. Check sources like DFSA or VARA sites yourself.
DYOR before screaming...
It is happening 👉 xitter.cf/pcaversaccio/status/20…
this is massive news 👏
Now that ZKEVMs are at alpha stage (production-quality performance, remaining work is safety) and PeerDAS is live on mainnet, it's time to talk more about what this combination means for Ethereum.
These are not minor improvements; they are shifting Ethereum into being a fundamentally new and more powerful kind of decentralized network.
To see why, let's look at the two major types of p2p network so far:
BitTorrent (2000): huge total bandwidth, highly decentralized, no consensus
Bitcoin (2009): highly decentralized, consensus, but low bandwidth - because it’s not “distributed” in the sense of work being split up, it’s *replicated*
Now, Ethereum with PeerDAS (2025) and ZK-EVMs (expect small portions of the network using it in 2026), we get: decentralized, consensus and high bandwidth
The trilemma has been solved - not on paper, but with live running code, of which one half (data availability sampling) is *on mainnet today*, and the other half (ZK-EVMs) is *production-quality on performance today* - safety is what remains.
This was a 10-year journey (see the first commit of my original post on DAS here: github.com/ethereum/research… , and ZK-EVM attempts started in ~2020), but it's finally here.
Over the next ~4 years, expect to see the full extent of this vision roll out:
* In 2026, large non-ZKEVM-dependent gas limit increases due to BALs and ePBS, and we'll see the first opportunities to run a ZKEVM node
* In 2026-28, gas repricings, changes to state structure, exec payload going into blobs, and other adjustments to make higher gas limits safe
* In 2027-30, large further gas limit increases, as ZKEVM becomes the primary way to validate blocks on the network
A third piece of this is distributed block building.
A long-term ideal holy grail is to get to a future where the full block is *never* constituted in one single place. This will not be necessary for a long time, but IMO it is worth striving for us at least have the capability to do that.
Even before that point, we want the meaningful authority in block building to be as distributed as possible. This can be done either in-protocol (eg. maybe we figure out how to expand FOCIL to make it a primary channel for txs), or out-of-protocol with distributed builder marketplaces. This reduces risk of centralized interference with real-time transaction inclusion, AND it creates a better environment for geographical fairness.
Onward.
Happy new year !
Quick reminder.
Those announcing their “new year resolutions” will do exactly what they did last year. Nothing.
People who build never waited for January 1st.
MEVEN retweeted
Monero provides selective transparency with various features such as view keys, transaction keys, and transaction proofs. Full-Chain Membership Proofs (FCMP++) will strengthen privacy and enhance Monero's selective transparency with new features such as outgoing view keys!
Full-Chain Membership Proofs (FCMP++) - The Next Generation of Monero's Privacy
Thanks to @VOSTOEMISIO and @xenumonero for producing this excellent explanatory video and to our generous community for funding it!
MEVEN retweeted
1/ oh boy, this past year at @SEAL_911 has been absolutely brutal ngl. After dealing with an insane volume & severity of incidents, it's hard to overstate how fucking broken the overall security still is across this space. The numbers tell the story better than any rant ever could - so here they are:
- Handled +1,800 tickets (we're now at over ~3,300 tickets since SEAL 911 was launched)
- Actively managed +125 war rooms
- ~$95M USD saved (guesstimate incl. proactive prevention measures)
- Most common tickets:
1) Private key/seed leaks (guys, the amount of leaked keys is insane!)
2) Malware/RATed devices (over 45 tickets - at least - related to NimDoor (fake Zoom calls) only)
3) Phishing (can be approval phishing but also account access phishing)
4) Phishing URL reporting
5) Pig Butchering/Sha Zhu Pan (the saddest tickets and these scammers have infinite creativity)
6) Smart contract hacks
7) Frontrunning/white hat rescue of compromised wallets
8) Vulnerability disclosures
9) Social media account (incl. TG) takeovers
10) Physical attacks (do _not_ flex your wealth guys)
obviously, if we continue at this rate the future of finance will not be built on a decentralised ledger with asymmetric cryptography… because people will simply lose their assets sooner or later
MEVEN retweeted
Privacy will be the most important moat in crypto
@alive_
MEVEN retweeted
Rebroadcast of my Devcon 7 presentation on Passkeys at 39c3 / CDC, attaching the slides you didn't see live (unfortunately) github.com/btchip/passkeys-d… featuring @tropicsquare - remember to keep your most precious passkeys non synchronized on dedicated secure hardware.
brief details on the compromise of the Chrome extension @TrustWallet (v2.68) on Dec 25, 2025.
the malicious code runs in the background via Chrome scripts. it accesses locally stored data (seeds imported into Trust Wallet) without needing to open the extension. risk even if inactive, if installed. but limited: if no seed imported, nothing to steal.
reassuring: the attack is ISOLATED to TW. thanks to Chrome's sandboxing, impossible to access data from other extensions like MetaMask (storage separated). no reported propagation. mobile apps & other versions safe.
check your tx on Etherscan/etc.
check : @zachxbt & @TrustWallet





























