← Back homeAll Media Mentions
Complete collection of press coverage, articles, and media appearances — 22 mentions across Web3 security, blockchain, and aerospace.
2026
crypto.newsOctober 2026
“But considering any whitelisted address could take the vault’s aBaswstETH with no collateral needed, it actually becomes a major vulnerability. [...] Considering this is an unidentified vault, a whitehat can hardly perform any action with guarantee not to leave them in legal trouble. [...] A bug bounty could definitely have stopped this attack, since it’s probable the security community would have found this flaring problem in the smart contract.”
Fast Company Middle EastSeptember 2026
“CX is important for any service provider [...] given the nature of what is at stake: trusting the provider with some of the most sensitive data and access to the customer. So a proper service experience is adamant about building that trust and making the customer not just be secure, but also feel secure. [...] A good provider will help the customer leave the engagement with a more robust company security framework, not just know the details of the incident it suffered.”
Arabian BusinessSeptember 2026
“Everything has flaws. What matters is what a flaw gets you, and here it gets you private images of people inside their own home. So the question is not what the manufacturer intends but what the design allows when something goes wrong. [...] The cloud service and the update channel are the two worth worrying about, because compromising either one has the potential to reach every device the company has sold, not only yours.”
Crowdfund InsiderAugust 2026
“A wallet has one job at setup, which is to pick a number nobody can guess. That number has to come from real noise or real randomness. This firmware took it from software instead, and software cannot invent randomness. It follows a formula, so anyone who works out the formula can regenerate every key it ever produced. [...] Updating firmware does not repair a seed already generated. Anyone who set up a device in that period needs a new seed on a device they trust.”
CoinjuiceAugust 2026
“A guessable seed still writes out twenty-four valid words, still passes the checksum, and still funds and spends normally. Nothing looks wrong from the outside, and there is no alert for a number that was too easy to pick.”
The Crypto TimesJuly 2026
“The flash loan supplied size. The design question is whether a pool charges for imbalance. [...] Where that penalty is absent, and withdrawal pricing reads reserves that a single large swap just moved, capital alone is sufficient for achieving significant damage. Our 2026 research puts flash-loan losses under 1% of the DeFi total, down from 54% in 2020.”
DL NewsJanuary 2026
“Wallets need to clearly convey intent and surface risk. We also need more adoption of naming systems like ENS, because human-readable identifiers make lookalike address attacks harder.”
DL NewsJanuary 2026
“DeFi protocols often gain an edge over their competitors by having the cheapest fees. Adding extra checks on transactions would increase gas costs, potentially losing them users. Invariant checks are a great security strategy, but they can't account for everything — especially exploits that a protocol's developers can't reasonably anticipate. It's not the silver bullet.”
2025
O'Reilly - Mastering Ethereum 2nd EditionNovember 2025
“I've taught crypto devs for many years. If you want to go from zero to hero in smart contracts, Mastering Ethereum is the definitive no-fluff guide I recommend above all to achieve that.”
Help Net SecurityJuly 2025
“This is why firms should focus on operating under frameworks that prevent these scenarios entirely, like scaling bug bounty programs that channel security efforts into authorized, constructive activities. When security researchers work within this framework, they're protected legally, companies get stronger security, and innocent third parties are never put at risk.”
ThreeSigmaJanuary 2025
“In this guide, we break down practical DeFi security solutions: how real-time monitoring works, which exploits it catches, and how to roll it out without slowing product velocity.”
2024
Tek SapoDecember 2024
“Embora a queda nas perdas seja encorajadora, as ameaças persistem [...] Em 2024, observamos um foco maior em ataques a chaves privadas, infraestrutura de projetos e CeFi. O volume de fundos disponíveis em DeFi atingiu $137B este ano (+163%), e, à medida que capital institucional entra no ecossistema, cripto torna-se um alvo irresistível para hackers.”
The BlockOctober 2024
“Projects are increasingly adopting robust security measures, including enhanced auditing processes, improved smart contract designs, the implementation of bug bounty programs, among others. They also have access to a larger pool of skilled security professionals. The maturity of the current security stack is far better than what we were seeing 2 or 3 years ago, making it more difficult for hackers to exploit vulnerabilities.”
Solidity BlogOctober 2024
“After reviewing this year's contest submissions, it appears we can draw several conclusions, particularly since no one encountered any significant issues. First, transient storage remains largely unknown and unused by the broader developer community, likely due to its exclusive use in assembly...”
DecryptAugust 2024
“Most of the losses in 2024 are attributed to attacks targeting CeFi infrastructure. We've known for a while that infrastructure compromises tend to be the most devastating hacks in the cryptocurrency world.”
Cointelegraph MagazineApril 2024
“[North Korean hackers] focus on a small number of high-value targets and can play a very long game, combining detailed technical knowledge with social engineering and spear-phishing capabilities.”
2023
DecryptMay 2023
“Self destruction is, as one can imagine, one of the scariest things one can casually add as an extra function. Changing the logic of a contract provides endless possibilities.”
DecryptApril 2023
“Though we're still early in this whole story, there are indications that there were major centralization issues on the Merlin DEX smart contracts. Specifically, the address receiving pool fees was allowed to drain all funds from every pool in the protocol.”
DecryptMarch 2023
“The specific bug's root cause was the lack of proper access control to a function which should be for privileged usage only. This is a common security vulnerability which is usually caught at the auditing phase of a smart contract.”
Immunefi - MediumJanuary 2023
“In this article, we will be analyzing the exploited vulnerability in the 0xbad smart contract without looking at any actual source code. We'll analyze the massive profit arbitrage transaction and see what we can learn from there, but also try a few decompiling tools to help us reach the same conclusion as the hacker.”
2017
AstroPublishingMay 2017
“[W]e must fully understand how the human body and mind are affected by the environment in space. NASA astronauts Scott and Mark Kelly are genetically identical twins and they will show us some answers.”
AstroPublishingMarch 2017
“The points derive from the three-body problem, which considers the gravitational pull of just two bodies (in this case, the Sun and Jupiter), and then the few points where smaller points can remain stable are found through algebraic methods. The Trojan asteroids are celestial bodies that gathered around Jupiter's L4 and L5. The Lucy mission is crucial to understanding the history of the solar system.”
← Back to main page