Vibe coding your Dapp? No problem!
@TryNoahAI is now integrated with the FYEO Security Scanner!
Vibe coding shouldn't mean skipping security!
.@goFYEO's specialized Web3 security models, built on insights from 300+ audits are now integrated directly into Noah
Run affordable AI powered security audits, review findings, and work through fixes without leaving Noah
First 20 Noah built projects get free FYEO audit credits ↓
David Garrity retweeted
Damn. This is the most detailed map of Big AI’s incestuous relationships I’ve seen so far. And it’s interactive! ft.com/content/8475dc9b-b2d4…
David Garrity retweeted
this is the most disturbing thing I've seen in a long time. I'm not joking for once.
you can just hallucinate the entire internet with Qwen 3.8 27b running at 2,000 tokens/second?
part 2 of turning @cerebras + @Alibaba_Qwen 3.8 27B into an OS:
built an offline browser with zero network calls and mounted it directly the JIT ubuntu desktop.
no wifi. no scraping. zero packets sent to external CDNs.
you search a site, set a year, and qwen 27b at 1,950 tok/s synthesizes the entire DOM on the fly.
here is youtube in 2045 vs 1999:
→ search google for youtube inside the OS
→ scrub to 2045: instant futuristic feed
→ scrub to 1999: raw web 1.0 time capsule in seconds
at this speed, browsing isn't retrieving files from a server, it's querying an alternate reality.
a 2D browser window is just step zero.
imagine full operating systems, virtual worlds, and complex simulation engines existing purely as model weights. zero gigabytes stored on disk, just pure interactive reality streamed on demand.
What else becomes a possibility with the qwen 3.8 27b (dense) at 2000 tokens/sec?
David Garrity retweeted
I’ve been spending a lot of time talking to people at the forefront of AI, and what I’ve learned has been both fascinating and deeply concerning.
President Trump and President Xi will meet later this month at a moment when the technology is advancing faster than our ability to understand or control it. AI could soon become a third superpower, with implications that neither country can address alone.
Here’s my @WSJLive op-ed on the topic: wsj.com/opinion/ai-may-becom…
We are honored to partner with @AvaxTeam1 to bring our security scanner to @avax builders! #avalanche #aisecurity #web3
Morse Code Prompt Injection: How an Attacker Tricked Grok and Bankrbot Out of $200K
fyeo.io/blog/morse-code-prom…
David Garrity retweeted
Time to avoid being the next cybersecurity ground zero.
@goFYEO offers AI-powered security solutions, leveraging advanced techniques to protect Web3 projects from AI-driven exploits.
@MistralAI HACKED! unbiasedheadlines.com/articl…
#AI #cyberattack #cybersecurity #hackers
David Garrity retweeted
Building on the SEC's No-Action Letter related to DTC's tokenization service, DTCC has convened more than 50 firms through its Industry Working Group to inform the development of DTC’s tokenization service and support responsible exploration of digital asset use cases.
Join the conversation: dtcc.com/news/2026/may/04/dt…
April 2026: The Most Hacked Month in Crypto History fyeo.io/blog/april-2026-most… Need a security audit? DMs are open. #securityaudit #cybersecurity
The Aave x KelpDAO rsETH incident is a reminder: exploits aren’t just bugs — they’re failures in threat modeling.
When bridges break, collateral assumptions fail, and liquidity dries up, risk doesn’t stay isolated — it cascades.
Most protocols secure components.
Few model the system.
Threat modeling asks:
→ What if this dependency fails?
→ Where does bad debt flow?
→ How does risk propagate across protocols?
If you’re not modeling:
• Cross-protocol contagion
• Bridge failure modes
• Liquidity shocks
…you’re leaving gaps.
DeFi doesn’t break at the edges.
It breaks at the interfaces.
Breakdown 👇
fyeo.io/blog/aave-kelpdao-rs…
The hacks keep coming.
This time: Claude Code.
A dev tool shipped with source maps exposed on npm…
→ making it possible to reconstruct large parts of the codebase
Not a breach.
Not an exploit.
Just a build mistake.
But that’s all it takes.
Attackers don’t need zero-days anymore.
They just wait for you to ship them your internals.
fyeo.io/blog/claude-code-sou…
Axios just got supply chain’d. Two versions pushed a hidden dependency that installs a cross-platform RAT (macOS, Windows, Linux) during npm install.
No malicious code in Axios itself. Just a poisoned dependency. That’s the point. If you installed: [email protected] or [email protected] then assume compromise. Rotate everything.
This wasn’t sloppy. It was staged, timed, and designed to self-delete. Open source trust is now the attack surface. Read more -> fyeo.io/blog/axios-npm-suppl…
David Garrity retweeted
🚨NEW: Pete Hegseth is cutting Senator Mark Kelly’s military pension and demoting his rank as punishment for telling service-members to not follow illegal orders in a recent video.
RETWEET if you stand with @CaptMarkKelly against Hegseth!
David Garrity retweeted
In the last hour I learned that there are many Epstein files on the DOJ website where you can highlight the redacted text, copy it & paste it onto another document to read the redactions.
So this is REAL
The @krassenstein @EdKrassen have many of the files. Copy and share this everywhere
David Garrity retweeted
Are you at #Breakpoint2025? FYEO’s Lead auditor @baltha111 is there posing in the “recreate a famous @toly photo!” Need a @solana audit? We’re here for you. 🔐
David Garrity retweeted
Jeffrey Epstein had 1,571 names of contacts in his little black book.
Fewer than 40 names—just 2.4%—were circled.
Donald Trump’s was one of them.
Epstein had 14 phone numbers for Trump. Fourteen ways to reach him.
If that’s not “being on the Epstein List,” what the f*ck is?
David Garrity retweeted
🇺🇸The USA is compromised!
No point pretending anymore. The pattern is clear. Epstein’s newly released emails show he was in direct contact with top Russian diplomats, even offering to help Moscow “understand” Donald Trump. At the same time, Trump’s name appears in Epstein-related files that the FBI was reportedly told to flag. That alone creates a serious vulnerability.
Combine that with the one thing every intelligence analyst notices: Trump has never challenged Putin. Not once. Not on cyberattacks, election interference, assassinations or invasions. No other American president has behaved like this. Ever.
Russia has a long history of using compromising material to pressure powerful people. When Epstein’s communications link Trump and Russia, when senators say Trump references were flagged inside federal investigations, and when Trump consistently defends Russian interests over American ones, the risk picture becomes obvious.
This is not politics. It is national security. A president who may fear what Moscow knows or might reveal is a president who cannot act independently. When Trump refuses to stand up to Putin, and when Epstein’s files show Russia took a real interest in him, the conclusion is hard to avoid:
The United States is facing a compromised leader. Allies see it. Adversaries see it. And the pattern keeps getting clearer.
























