cvh @cvhessert

I build, automate & secure workflows | Head of Security @0xPolygonLabs | Re/Tweets are my own | 🇦🇷 Amsterdam, The Netherlands Joined December 2008

Tweets

659
Followers

689
Following

1K
Likes

1K

cvh @cvhessert

lessthan a minute ago

🚨Critical security update for LEDGER hardware wallets A critical vulnerability has been identified in the Ethereum app on Ledger hardware wallets. It could allow a malicious application to alter the details of a transaction during signing, without this being visible on the device screen. This has been fixed in Ethereum app version 1.22.2. If you use a Ledger device, please update ASAP While you're in there, it's also good practice to make sure Ledger Live and your device firmware are fully up to date.

0 0 0 5 0

View Details

cvh @cvhessert

3 days ago

Trying to solve every problem or risk usually means solving nothing particularly well

0 0 1 82 0

View Details

SHERLOCK @sherlockdefi

a week ago

Today, we are proud to introduce Sherlock Audit Engine. Audit Engine brings the strongest available AI security approaches into one coordinated review. We’ve spent months building it in private and testing it against high-stakes code. A new era of AI-native security review starts now. Audit Engine is now live.

69 42 292 45K 36

View Details

BuidlGuidl.eth @buidlguidl

a week ago

If an attacker has your private key, you can't just send a rescue transaction. The moment gas lands in the wallet, a sweeper bot takes it. BuidlGuidl's Hacked Wallet Recovery skill is built for exactly this, using EIP-7702 delegation: - the compromised key signs one harmless authorization locally and never leaves your terminal - a separate funded operator wallet pays the gas and broadcasts - one atomic transaction sweeps every token, NFT, and the native ETH to a safe wallet It's a portable agent skill, so it runs in Claude Code, Codex, Gemini CLI, Copilot CLI and others. github.com/BuidlGuidl/hac…

24 45 333 29K 402

View Details

Sandeep | CEO, Polygon Foundation (※,※) @sandeepnailwal

a week ago

Props to Robinhood chain but its good to see @0xPolygon lead the OG chains 💪💜

31 16 241 17K 2

View Details

cvh @cvhessert

2 weeks ago

Prevent what cannot be undone. Prove it continuously. Keep shrinking the unknown.

0 0 0 70 0

View Details

Nicolas Krassas @Dinosn

2 weeks ago

DEFCON: New Red Team Tactic doctoreww.github.io/EvilFontTool/

5 146 725 50K 678

View Details

Alex Chekholko @RHAlexander

3 weeks ago

Black Hat 2026 Thu keynote Shoshitaishvili says he is sitting on ~1k local privilege escalation bugs in the Linux kernel “we are finding major bugs faster than we can report them, much less fix them, what do we do now?”

1 4 10 2K 0

View Details

cvh @cvhessert

3 weeks ago

I just reserved my Cloudflare Wallet tag: cvh.cloudflare.pay Reserve yours now at cloudflare.pay

0 0 1 120 1

View Details

cvh @cvhessert

3 weeks ago

@blocksec @Certora Yes please 🙏

0 0 0 57 0

View Details

cvh @cvhessert

4 weeks ago

Would love for @Apple to add a duress PIN

sudo rm -rf --no-preserve-root / @pcaversaccio

4 weeks ago

25 28 314 26K 98

1 0 4 565 0

View Details

sudo rm -rf --no-preserve-root / @pcaversaccio

4 weeks ago

i recommend anyone who travels to use grapheneos and set up a duress pin & pw (and rotate both before every trip). the chances of being forced to unlock your phone, whether at a border crossing or somewhere on the street, are only going up in this insane world. it's _your_ fucking phone, your data, and your private life. nobody except you has any right to access its contents. period. grapheneos.org/features#duress

25 28 314 26K 98

View Details

Pablo Sabbatella @PabloSabbatella

a month ago

@SwiftOnSecurity We made a guide on the most important things to properly configure yubikeys before using them (for example, to have phishing resistant codes and protecting them with mandatory pin). github.com/Opsek/Yubikeys…

0 2 8 687 11

View Details

Introvert Problems @IntrovertProbss

a month ago

Sorry I missed your call, I was staring in horror at the screen wondering why on earth you couldn't just text me

50 613 6K 135K 177

View Details

cvh @cvhessert

a month ago

@frankdegods Why aren’t some shows not showing new episodes? Like those from @1000xPod ?

0 0 0 64 0

View Details

cvh @cvhessert

a month ago

@Freyskeyd @0xPolygon @Toposware Great working with you! Looking forward to your next endeavor. All the best!

1 0 3 317 0

View Details

cvh @cvhessert

a month ago

@0xTylerHolmes Thank you for your service

0 0 0 55 0

View Details

Fede’s intern 🥊 @fede_intern

a month ago

we never give up. hate us, but our balls are made of steel. a country that only knows how to suffer and fight

Janty @CFC_Janty

a month ago

You can’t even hate at this point Argentina is f*cking world class, they have a never give up mentality.

273 4K 59K 719K 1K

4 2 37 3K 0

View Details

cvh @cvhessert

2 months ago

@MulticaAI for everything

0 0 0 94 0

View Details

shadcn @shadcn

2 months ago

I didn't expect this tweet to be controversial. But here we are. Okay so look at the most popular apps you use every day. Now think about what they looked like two years ago vs today. They're all converging on the same three panels. An explorer on the left. A chat in the middle. A preview on the right. Look at the new apps being built. Same shape. That's Slack. Now think about how your team actually works. Work starts and happens in Slack. You only tab away for two things: context and ui. Context, because the data you need lives somewhere else. UI, because some things need buttons. Different buttons. An agent collapses both into one app. Context, it's already good at, it goes and gets whatever you need. UI, it's getting there. Soon it'll build the buttons right where you work. Whoever nails this shape owns where work happens next. The 2030 Microsoft Office.