
Security Engineer @0xpolygon | Eternal n00b.
Florianópolis, Brazil
Joined April 2016
- Tweets41
- Following485
- Followers126
- Likes466
I just got my Speaker @EFDevcon ticket.
Next stop: Mumbai 🇮🇳 Join me at Devcon 8 from November 3–6, 2026 for four days of big ideas, technical depth, community, and the people building the future of open source technology. devcon.org/ticket/dutra/muy6…
Gustavo Dutra retweeted
Today we're launching a crypto campaign to support the people of Nepal and contribute to the Government of Nepal's Prime Minister Disaster Relief Fund.
To help, donate at NepalRelief.org.
Stablecoins work best when money has to move fast to people who need it. While many others collected donations for Nepal in a more traditional sense, we built a path that leverages blockchain technology that lands as local currency in the government's relief fund.
The campaign is powered by Polygon's Open Money Stack, Coinme, and @CrossRiverBank. Blockchain for Impact has already pledged $100,000.
No one's pain matters more because of geography. But some tragedies just hit differently when they touch a place that's part of your own story, and Nepal has always felt close to home for me.
I was born in the Kumaon belt of Uttarakhand, India, right alongside Nepal, and my maternal family comes from that same region. Communities on both sides of the border have been connected for generations, through family, culture, faith, food, trade and everyday life. India and Nepal have what we often call "Roti-Beti ka rishta," ties of family and shared life that run far deeper than a line on a map, and Prime Minister Modi, speaking recently about Nepal, called its people our brothers and sisters.
I want to do my small part to stand with them, and I hope you'll join me. This campaign lets people around the world contribute in stablecoins to support relief and rebuilding efforts in Nepal.
Gustavo Dutra retweeted
🚨Critical security update for LEDGER hardware wallets
A critical vulnerability has been identified in the Ethereum app on Ledger hardware wallets. It could allow a malicious application to alter the details of a transaction during signing, without this being visible on the device screen.
This has been fixed in Ethereum app version 1.22.2. If you use a Ledger device, please update ASAP
While you're in there, it's also good practice to make sure Ledger Live and your device firmware are fully up to date.
Gustavo Dutra retweeted
The Polygon Heimdall v2 security engagement kicks off Monday.
Six figures in guaranteed rewards.
A first-of-its-kind security engagement bringing elite researchers and AI auditors into the same review.
Sign up below.
Applications are now open for the Sherlock x @0xPolygon Heimdall v2 security engagement.
Individual security researchers and teams building AI auditors / agents are welcome to apply.
Accepted applicants will receive next steps by email - Kicks off June 15.
Apply here 👇 docs.google.com/forms/d/e/1F…
Gustavo Dutra retweeted
My first blog post for @monad's security team is out.
We spent a month building an AI system to hunt vulnerabilities in the Monad blockchain
here's what we learned
Floripa’s community is on fire since @eth_floripa
Today we have one more @Logos_network circle
Next week it’s @openclaw meetup
The next, our (unofficial) @ethereum Hub Floripa opens its doors
All while @Founder_Haus keeps weekly healthy events for founders, builders and investors to connect
RT and come visit 😘
Gustavo Dutra retweeted
We’re officially announcing @habitchainxyz 🟦
A habit-tracking app with real skin-in-the-game built on @Base.
🏆 Winner of 3 hackathons (w/ @pera_he @dutraguss)
Huge thanks to @buildonbase, Incubase, and the community for the support.
Join the waitlist 👉 habitchain.xyz/
Stake on yourself 💪
HabitChain | Stake on Yourself
Build lasting habits with real financial stakes on Base.
habitchain.xyzHappy to share that @habitchainxyz is in the last stages of Incubase, as part of @Base Batches #002.
And we just launched our waitlist! 🚀
habitchain.xyz/
Get ready to stake on yourself!
@buildonbase 🟦 @BaseBrasil_ 🇧🇷
Gustavo Dutra retweeted
Bugs cost less when caught early. 💸
At Security Budgets: Pay Now or Pay Exploits Later, @dutraguss and @mis4nthr0pic reflect on the balance between speed and safety, and what it really takes to build with care.
Gustavo Dutra retweeted
🏄♂️ NEW SPEAKER CONFIRMED! ✨
We’re thrilled to welcome Gustavo Dutra (@dutraguss) to ETH Floripa 2025!
Gustavo is Senior Security Engineer at @0xPolygon, where he works on strengthening the security foundations of blockchain infrastructure.
Gustavo Dutra retweeted
1/10
We've received a lot of questions about what the volunteer experience at a Web3Privacy event really looks like.
So, here’s the breakdown: what you give, what you get, and the different ways you can join the crew for the Cypherpunk Congress in Buenos Aires
Gustavo Dutra retweeted
CHAMADA DE ARTIGOS 2025
Mais artigos, novos autores, pwnage e 0days. Com esses objetivos iniciamos a nova Chamada de Artigos 2025 para a segunda edição!
Envie seu artigo para : [email protected]
Gustavo Dutra retweeted
Hello hackers! Another @pwncollege semester ends, continuing @ASU's @ace_inst's never-ending quest to revolutionize the way hackers learn to become productive members of the cybersecurity community. Read on to learn what this means for students and Capture the Flag! 🧵
Gustavo Dutra retweeted
You expected a campus... but not this kind of campus 😎🎬 Here’s the official PBA Lucerne aftermovie!
You’ll hear straight from our brilliant students, our instructors (legends) and our CEO @PaulineVorms, all reflecting on what made this ride at PBA Campus Lucerne @hslu unforgettable.
Quick recap?
2.5 weeks of intense learning, building, debating, fixing, friendshipping, presenting, and connecting.
- 80+ students from all over the globe.
- Two specialized tracks.
- One governance module with actual policymakers.
- Debates that made us rethink everything.
- Enough coffee and bananas to power Spain and Portugal
- New friendships, the real ones type.
- Big ideas. Real connections.
And somehow... still enough energy left to dance at the end or get lost in the swiss alps🕺💃
To our students, we saw you walk in with wide eyes, and walk out with your heads high.
You locked in.
You got uncomfortable.
You grew.
You built things on @Polkadot that actually mean something.
And now, you’re officially part of the PBA fam 💜
Lucerne is done but post-PBA blues is still hitting.
Still, one thing’s clear, wave 8 is calling 😶🌫️⌛️🌴
(You in?)
Enjoy the weekend!
I wasn't expecting to make so many friends from all over the world and learn this much in only 3 weeks.
Thank you so much to all @AcademyPolkadot staff and all my new peers that were part of that amazing cohort!
🎓Yesterday, we wrapped up our Polkadot Blockchain Academy Campus in Lucerne — a beautiful, emotional closing ceremony 🎉
To our amazing students:
You showed up with curiosity, coded through late nights, and built a real community. You’re now part of the PBA Alumni — and we can’t wait to see what you do next 💪
The future of #Web3 is now in your hands.
It's been a wild and exciting journey so far. I'm learning tons at the @AcademyPolkadot
Gustavo Dutra retweeted
The time has come, and with it your reading material for the week.
Phrack #71 is officially released ONLINE! Let us know what you think!
phrack.org/issues/71/1.html
I just received this NFT for taking part in the Encode Club Solidity Bootcamp Q2 2024 with @encodeclub. opensea.io/assets/matic/0xdB…
Gustavo Dutra retweeted
#H2HC2023 20 anos, inscricoes abertas! Nao percam a comemoracao de 2 decadas @h2hconference
youtube.com/shorts/hszbYD7xu…
Gustavo Dutra retweeted
Just added support to LDAP Serialized Payloads in the JNDI-Exploit-Kit. This attack path works in *ANY* java version as long the classes used in the Serialized payload are in the application classpath. Do not rely on your java version being up-to-date and update your log4j ASAP!



























