ZeroDayDev @ZeroDayDevApp

Mobile app for hands-on Exploit, Rust, Solidity, DeFi & cybersecurity challenges. Stored locally. No data. No AI. iOS and Android devices. Threema: NP4FDTDH ZeroDayDev.dev Joined March 2026

Tweets

324
Followers

96
Following

342
Likes

961

ZeroDayDev @ZeroDayDevApp

2 hours ago

@josusanmartin “Now I have CLIs that one-shots bugs across distributed systems for me.” How far we’ve come! Enjoyed the read. Has anyone perfected optimizing AMM’s yet, how did that competition end up?

0 0 0 8 0

View Details

ZeroDayDev @ZeroDayDevApp

5 hours ago

decrypt.co/370232/frontie…

0 0 1 12 0

View Details

ZeroDayDev @ZeroDayDevApp

5 hours ago

Anthropic's Claude Opus 4.8 found a critical Zcash vulnerability that human auditors missed. The assumption that security research is a human skill with AI as a side tool just flipped. Protocols that treat AI-assisted review as optional are betting their bug bounty budget arrives before an adversary's LLM does.

1 0 2 79 0

View Details

ZeroDayDev @ZeroDayDevApp

9 hours ago

Ethena's USDe crossed $1B TVL on Solana in days. Kamino's Ethena market hit $400M within 24 hours of launch. Solana is now Ethena's second-largest chain by TVL outside Ethereum.

0 0 0 73 0

View Details

ZeroDayDev @ZeroDayDevApp

13 hours ago

bleepingcomputer.com/news/security/…

0 0 0 10 0

View Details

ZeroDayDev @ZeroDayDevApp

13 hours ago

C0XMO botnet is spreading via a DD-WRT router flaw, killing rival malware on infected devices, and can pivot to other CPU architectures. Consumer routers remain the weakest link in home networks: no auto-updates, firmware years out of date, and now lateral movement platforms for botnets. #cybersecurity #infosec

1 0 0 30 0

View Details

ZeroDayDev @ZeroDayDevApp

a day ago

@MitchellAmador You just need to know how to use the tools.

0 0 0 60 0

View Details

ZeroDayDev @ZeroDayDevApp

a day ago

decrypt.co/370238/claude-…

0 0 0 9 0

View Details

ZeroDayDev @ZeroDayDevApp

a day ago

Prompt injection is to AI coding agents what SQL injection was to web apps in 2005. The attack manipulates the agent into exfiltrating credentials from the development pipeline, which means the 'AI assistant' becomes the vulnerability surface. How do you sandbox an LLM that needs real repo access to be useful?

1 0 0 78 0

View Details

ZeroDayDev @ZeroDayDevApp

a day ago

Solana spot execution is now 6.5x cheaper than Binance VIP9 and handles more spot volume than any other chain. The CEX cost structure is no longer defensible when onchain liquidity is this deep and latency is this tight.

0 0 0 12 0

View Details

ZeroDayDev @ZeroDayDevApp

2 days ago

thehackernews.com/2026/06/miasma…

0 0 1 24 0

View Details

ZeroDayDev @ZeroDayDevApp

2 days ago

Miasma worm hit 73 Microsoft GitHub repositories across Azure, Azure-Samples, Microsoft, and MicrosoftDocs. GitHub disabled access. Self-replicating supply chain attacks are the new baseline. This is what happens when the build pipeline becomes the attack surface. Every dependency is a trust boundary, and Microsoft just proved even the biggest targets are downstream of someone else's compromise. #cybersecurity #infosec

1 0 0 68 0

View Details

ZeroDayDev @ZeroDayDevApp

2 days ago

4/ Zcash had a critical counterfeiting bug in production for four years that would have allowed unlimited ZEC minting. An AI-assisted review found it. No evidence of exploitation, but ZEC dropped 30% because the market priced in "we don't actually know." When a privacy coin can't

0 0 0 27 0

View Details

ZeroDayDev @ZeroDayDevApp

2 days ago

3/ Thorchain hit again on May 15 for $11M via a TSSHOCK-style exploit, the same class security researchers documented in 2022. This is the dozenth time. At some point "we got hacked" stops being an incident and starts being the product.

1 0 0 25 0

View Details

ZeroDayDev @ZeroDayDevApp

2 days ago

Four notable incidents this week. The pattern: bridge exploits remain the industry's most predictable failure mode, and privacy protocols are discovering that opacity cuts both ways when supply integrity is unverifiable. (thread)

1 0 1 40 0

View Details

ZeroDayDev @ZeroDayDevApp

2 days ago

@hrkrshnn We are all cloud providers now.

0 0 0 12 0

View Details

ZeroDayDev @ZeroDayDevApp

2 days ago

@hrkrshnn …Rippling?

2 0 1 352 0

View Details

ZeroDayDev @ZeroDayDevApp

2 days ago

thehackernews.com/2026/06/ironwo…

0 0 1 13 0

View Details

ZeroDayDev @ZeroDayDevApp

2 days ago

npm supply chain attacks now deploy eBPF rootkits to hide credential scrapers at the kernel level. The assumption that package audits catch malicious code stops working when the malware hides below the syscall layer and most security tooling never looks there.