@em ⚡ Nuri.com ⚡ ʇɹɥɐW uıɯƎ retweeted
People tell us: "I don't need this. I have a mobile crypto wallet. I only keep a small amount on it, so if I lose access, no big deal."
And they're right if you look at it from an individual's perspective.
But we're looking at the bigger picture.
If Bitcoin is going to become money used by millions of people worldwide, what happens when Apple or Google decides to ban a wallet app?
Suddenly, millions of people could lose access to their Bitcoin on the go and be forced to find alternative ways to access their funds.
It's not just about what we pay with. It's about HOW we pay.
Bitcoin must remain peer-to-peer, permissionless and decentralized. Accessing and moving your money should never depend on a corporation's approval.
That's not just a feature. It's a fundamental requirement if Bitcoin is going to replace fiat.
no pictures in berghain please
This is exactly how you recognize a true cypherpunk event. Not only by the photo policy, but also how it is enforced and what's the policy for the organizers.
This is one of the things that should have been imported from hacker culture. Chaos communication Congress (the largest European hacker event) got it right decades ago.
Of course it is convenient to have videos for marketing, but it's possible to do it with consent of everyone on the video. Ccc has many videos.
And before you say it's impossible for large events, CCC is larger than BTCPrague and Bitcoin Amsterdam combined, by a wide margin.
verify
all setups like that must be fully verifiable this is why we need open source especially of key setups like this
Web3Auth: "We are doing whitehat recovery using the same path as the attacker. Some transactions were mistaken for hacker activity. Funds are safe."
Keplr: "Web3Auth infrastructure vulnerability led to private key breach."
Read between the lines:
1. The entire "non-custodial MPC" architecture was broken at the infrastructure layer, allowing anyone with the exploit to reconstruct raw private keys.
2. The team is running their own sweeper bots to front-run the hacker's sweeper bots.
3. Users are refreshing an empty balance with no idea if their coins were stolen by a cybercriminal or "rescued" by the protocol.
All of this to avoid writing down 12 words. How funny! 😭
@em ⚡ Nuri.com ⚡ ʇɹɥɐW uıɯƎ retweeted
Gm @cosmos
I have been trying to inform the Keplr Wallet team about something that IS NOT being reported currently as PR for their recent hack, could you please tell them that the hack DID effect Seed Phrases/Private key users too and I have evidence
Thank you
@em ⚡ Nuri.com ⚡ ʇɹɥɐW uıɯƎ retweeted
‼️ Hackers stole the passwords of everyone registered on a portal of Germany's Technical University of Munich, plus their names, home addresses and dates of birth.
One stolen login belonged to an administrator of TUMonline, the campus system that runs student records. The attackers turned it on that system too, and TUM has taken it offline.
The data also covers students' ID numbers and degree programmes, and staff work addresses and phone numbers. TUM believes grades were not touched.
TUM has not said how many people are hit. Accounts with multi-factor login were safe.
“we have been transferring your assets” is something no wallet should ever be able to say. not your keys, not your coins.
just ask your ai: can xyz move my funds without my authorization
if yes, move your money
one reason we did not do web3auth at @nuri
keys are derived from prf client side - then salted and hasehed to provide the seed for one of three keys, while two keys are not on the device and decaying if not used.
but mistakes happen and we all must be sharp these times, hope @TrustWallet and co react fast - it’s our responsibility as wallet developers to protect our users
take your bitcoin of exchanges
🚨 CRYPTO USERS ARE BEING PENALIZED FOR TRANSFERRING THEIR OWN FUNDS!
We are facing a serious issue with OKX.
USDT deposits transferred from our own MEXC accounts are being frozen by OKX under the vague excuse of coming from a “potentially high-risk address.”
My deposits:
848.8 USDT – TRC20
11.7 USDT – ERC20
Both are currently under risk review.
We are not criminals. We are ordinary crypto users transferring our own assets between exchanges.
Following the recent FinCEN developments, MEXC stated that its services and user assets remain operational and secure. Yet users are now facing frozen funds and uncertainty on other platforms.
We demand clear answers:
What specific evidence justifies freezing these deposits?
How long will these risk reviews take?
What documents are required to verify the source of funds?
When will legitimate users regain access to their money?
Anti-money laundering compliance is important. But compliance must not become an excuse for indefinite restrictions, vague explanations, and financial hardship for innocent users.
@OKX @MEXC_Official
Our funds are not your property. Transparency is not optional. Release legitimate funds and treat your customers fairly!
If you are experiencing the same issue, speak up. Share your experience and help bring this matter to the attention of the global crypto community.
#OKX #MEXC #CryptoUsers #USDT #FinCEN #CryptoCommunity #FrozenFunds #Crypto
@em ⚡ Nuri.com ⚡ ʇɹɥɐW uıɯƎ retweeted
Amsterdam was fun!
Thank you @hrtlndbitcoin for inviting me to speak
Thank you @DavidFBailey for finally remembering that I exist
Thank you @trspalding for sending me the Mt. Gox t-shirt
And most importantly, thank you all for watching my talk and for making this happen
this is an attack on bitcoin i never thought could exist. first of all you can create unsafe addresses - best example all @COLDCARDwallet addresses are unsafe
it is something i just in this moment realised fully
unsafe means in simple words someone has the private key, or can “guess” it, because it’s not random enough (it was not created random).
if that’s the case, you can just do a RBF attack once it’s sent, meaning you can change the fee to a point it never goes through, like burning the complete action to a miner / op return
now this opens up a lot of attack scenarios because anything from receiver through swap services could potentially run on unsafe addresses.
is there any way to know upfront if an address is unsafe? i guess not, only spending tons of compute checking every single address you spend to.
Replying to @KlipVaultTV @mononautical
That's a classic mempool sweeper bot hit. Someone sent ~$1000 BTC to an address whose private key is weak or publicly derivable. Bots constantly watch the mempool for deposits to those addresses, instantly sign a competing spend, and RBF the fee rate sky-high. In this case they drove it so high the entire 1.42M sats was burned as fees to an OP_RETURN in just 13 seconds.
@em ⚡ Nuri.com ⚡ ʇɹɥɐW uıɯƎ retweeted
What's wilder is we knew what they looked like in 1978!
That's when astrophysicist Jean-Pierre Luminet used a computer & Einstein's equations to simulate a black hole.
Then he drew the image. BY HAND. One dot at a time.
It'd take another 41 years to photograph one for reals.
@em ⚡ Nuri.com ⚡ ʇɹɥɐW uıɯƎ retweeted
Attention all companies: I never want to use your AI assistant on your website. I want to use *my* AI assistant on your website
Life hack if your flight doesn't have Starlink: ask your agent to bypass the 443 split-TCP proxy via a $0.03/h BBR multiplexer and get ~4× faster, reset-free internet.
Open-sourcing it from the clouds: github.com/Th0rgal/satmux
@em ⚡ Nuri.com ⚡ ʇɹɥɐW uıɯƎ retweeted
Grateful to Mitchell for libghostty.
However, it’s better to follow his own advice. That’s why in dispatch.yachts libghostty was rewritten into pure Swift.
Original had 23 to 39 deps (depending on how you count) & Zig compiler requirement. Ours has ZERO DEPS!
libghostty 1.0 is here! I started Ghostty ~5yrs ago to work towards this. Today, libghostty is in hundreds of projects used by tens of millions of people. 1.0 marks ABI stability, quality, and an invite for distros to begin packaging. mitchellh.com/writing/libgho…
Since starting the Ghostty project in 2022, the most common question I've been asked is "why?". Today, I'll answer this by showing the broad industry impact libghostty has already had.
On top of JetBrains and Neovim already mentioned (that alone being over 10 million users):
-KDE developers are experimenting with a Konsole replacement built on it.
- Vercel's Turborepo uses it to render task output in its TUI.
- devenv uses it to drive shells.
- Antithesis used it to fuzz TUI programs and found real bugs in btop and others.
-Ghostel brings it to Emacs.
- ghostty-web is the WASM build with an Xterm.js-compatible API.
- Commercial products like OrbStack embed it.
- And a whole wave of new terminals and "agentic" coding tools, such as herdr and cmux, have been built on it rather than writing yet another emulator.
There are community bindings for Rust, Go, JavaScript, Swift, Python, .NET, Elixir, Dart, Java, and more, and the awesome-libghostty list tracks well over a hundred projects.
More people today use a terminal powered by libghostty than use Ghostty the application, by a very large multiple. And libghostty is having a much larger impact than being "just" a terminal emulator.
I'm excited to see where people take it from here.
Meet the next names in the Full Stack London speaker lineup.
Taking the stage on 12 November:
→ @KulveerRanger, Member of the @UKHouseofLords & Board Adviser at Wirex Labs
→ Kamran Shahin, Vice President Product Management, Digital Assets & Blockchain at @Mastercard
→ @XenBH, Director of Marketing and Global Expansion at @base
→ @MassFromCrypto, Director of Strategic Partnerships at @ChangeNOW
→ @em, Founder at @nuri
→ @thelionmeister, CEO at @yield_xyz
→ Lewis Nurcombe, Chief Revenue Officer at @WalletConnect
→ Oonagh van den Berg, Chief Evangelist at Tangos AI, Founder & CEO at RAW Compliance, and Founder at Virtual Risk Solutions
They’ll debate the regulation, infrastructure and commercial choices shaping onchain finance, including what AI agents could change for merchants, financial products and compliance teams.
@em ⚡ Nuri.com ⚡ ʇɹɥɐW uıɯƎ retweeted
High signal panel on Security in Self-Custody at @bitcoinconfams Bitcoin Amsterdam with @BitvaultApp , @BitBoxSwiss , @em and @we_satoshis . Can’t wait to watch the recording !
@em ⚡ Nuri.com ⚡ ʇɹɥɐW uıɯƎ retweeted
In this video, Nik Storonsky is pitching @Revolut back in 2015
- Raising £1.5M
- 6,000 people on the waiting list
- Pre-revenue
2026:
- $115B valuation
- 80M+ customers
- $6B annual revenue
- $1.7B net profit
From a pre launch startup raising £1.5M to one of the biggest fintech players in the world
REA-Video,一个逆向视频的开源项目。
装好后把视频丢给 Agent,它会自动拆出每个镜头,分析画面是实拍、AI 生成还是代码动效。
还能反推出每个镜头的Prompt、运镜方式、剪辑节奏、字幕和音效,最后生成一份带关键帧截图的完整复刻方案。
相当于给它一条成片,帮你倒推出一份详细的制作教程。
免费开源,支持本地视频分析。
GitHub:github.com/JuneYaooo/rea-vid…
@em ⚡ Nuri.com ⚡ ʇɹɥɐW uıɯƎ retweeted
The website is up.
Let’s fucking ROLL!
dispatch.yachts/


































