Gustavo Dutra (@dutraguss) profile picture

Security Engineer @0xpolygon | Eternal n00b.

Florianópolis, Brazil
Joined April 2016
I just got my Speaker @EFDevcon ticket. Next stop: Mumbai 🇮🇳 Join me at Devcon 8 from November 3–6, 2026 for four days of big ideas, technical depth, community, and the people building the future of open source technology. devcon.org/ticket/dutra/muy6…
2
6
121
Today we're launching a crypto campaign to support the people of Nepal and contribute to the Government of Nepal's Prime Minister Disaster Relief Fund. To help, donate at NepalRelief.org. Stablecoins work best when money has to move fast to people who need it. While many others collected donations for Nepal in a more traditional sense, we built a path that leverages blockchain technology that lands as local currency in the government's relief fund. The campaign is powered by Polygon's Open Money Stack, Coinme, and @CrossRiverBank. Blockchain for Impact has already pledged $100,000. No one's pain matters more because of geography. But some tragedies just hit differently when they touch a place that's part of your own story, and Nepal has always felt close to home for me. I was born in the Kumaon belt of Uttarakhand, India, right alongside Nepal, and my maternal family comes from that same region. Communities on both sides of the border have been connected for generations, through family, culture, faith, food, trade and everyday life. India and Nepal have what we often call "Roti-Beti ka rishta," ties of family and shared life that run far deeper than a line on a map, and Prime Minister Modi, speaking recently about Nepal, called its people our brothers and sisters. I want to do my small part to stand with them, and I hope you'll join me. This campaign lets people around the world contribute in stablecoins to support relief and rebuilding efforts in Nepal.
83
126
32
583
133,597
Gustavo Dutra retweeted
🚨Critical security update for LEDGER hardware wallets A critical vulnerability has been identified in the Ethereum app on Ledger hardware wallets. It could allow a malicious application to alter the details of a transaction during signing, without this being visible on the device screen. This has been fixed in Ethereum app version 1.22.2. If you use a Ledger device, please update ASAP While you're in there, it's also good practice to make sure Ledger Live and your device firmware are fully up to date.
20
40
27
308
511,687
Gustavo Dutra retweeted
The Polygon Heimdall v2 security engagement kicks off Monday. Six figures in guaranteed rewards. A first-of-its-kind security engagement bringing elite researchers and AI auditors into the same review. Sign up below.
Applications are now open for the Sherlock x @0xPolygon Heimdall v2 security engagement. Individual security researchers and teams building AI auditors / agents are welcome to apply. Accepted applicants will receive next steps by email - Kicks off June 15. Apply here 👇 docs.google.com/forms/d/e/1F…
8
12
1
55
11,372
Gustavo Dutra retweeted
My first blog post for @monad's security team is out. We spent a month building an AI system to hunt vulnerabilities in the Monad blockchain here's what we learned
38
20
15
240
37,629
Gustavo Dutra retweeted
Floripa’s community is on fire since @eth_floripa Today we have one more @Logos_network circle Next week it’s @openclaw meetup The next, our (unofficial) @ethereum Hub Floripa opens its doors All while @Founder_Haus keeps weekly healthy events for founders, builders and investors to connect RT and come visit 😘
8
6
2
35
1,644
Gustavo Dutra retweeted
We’re officially announcing @habitchainxyz 🟦 A habit-tracking app with real skin-in-the-game built on @Base. 🏆 Winner of 3 hackathons (w/ @pera_he @dutraguss) Huge thanks to @buildonbase, Incubase, and the community for the support. Join the waitlist 👉 habitchain.xyz/ Stake on yourself 💪
Happy to share that @habitchainxyz is in the last stages of Incubase, as part of @Base Batches #002. And we just launched our waitlist! 🚀 habitchain.xyz/ Get ready to stake on yourself! @buildonbase 🟦 @BaseBrasil_ 🇧🇷
1
5
220
Gustavo Dutra retweeted
Bugs cost less when caught early. 💸 At Security Budgets: Pay Now or Pay Exploits Later, @dutraguss and @mis4nthr0pic reflect on the balance between speed and safety, and what it really takes to build with care.
3
5
234
Gustavo Dutra retweeted
🏄‍♂️ NEW SPEAKER CONFIRMED! ✨ We’re thrilled to welcome Gustavo Dutra (@dutraguss) to ETH Floripa 2025! Gustavo is Senior Security Engineer at @0xPolygon, where he works on strengthening the security foundations of blockchain infrastructure.
1
3
3
220
What does it take to secure the backbone of Ethereum’s scaling ecosystem? @Agglayer by @Polygon is putting that question to the test with a $1,000,000 bug bounty on Cantina. Its cross-chain infrastructure is live for public review. Link below.
4
12
1
37
3,302
Gustavo Dutra retweeted
1/10 We've received a lot of questions about what the volunteer experience at a Web3Privacy event really looks like. So, here’s the breakdown: what you give, what you get, and the different ways you can join the crew for the Cypherpunk Congress in Buenos Aires
2
10
6
49
6,491
Gustavo Dutra retweeted
CHAMADA DE ARTIGOS 2025 Mais artigos, novos autores, pwnage e 0days. Com esses objetivos iniciamos a nova Chamada de Artigos 2025 para a segunda edição! Envie seu artigo para : [email protected]
1
28
1
101
8,144
Gustavo Dutra retweeted
Hello hackers! Another @pwncollege semester ends, continuing @ASU's @ace_inst's never-ending quest to revolutionize the way hackers learn to become productive members of the cybersecurity community. Read on to learn what this means for students and Capture the Flag! 🧵
1
23
1
111
13,577
You expected a campus... but not this kind of campus 😎🎬 Here’s the official PBA Lucerne aftermovie! You’ll hear straight from our brilliant students, our instructors (legends) and our CEO @PaulineVorms, all reflecting on what made this ride at PBA Campus Lucerne @hslu unforgettable. Quick recap? 2.5 weeks of intense learning, building, debating, fixing, friendshipping, presenting, and connecting. - 80+ students from all over the globe. - Two specialized tracks. - One governance module with actual policymakers. - Debates that made us rethink everything. - Enough coffee and bananas to power Spain and Portugal - New friendships, the real ones type. - Big ideas. Real connections. And somehow... still enough energy left to dance at the end or get lost in the swiss alps🕺💃 To our students, we saw you walk in with wide eyes, and walk out with your heads high. You locked in. You got uncomfortable. You grew. You built things on @Polkadot that actually mean something. And now, you’re officially part of the PBA fam 💜 Lucerne is done but post-PBA blues is still hitting. Still, one thing’s clear, wave 8 is calling 😶‍🌫️⌛️🌴 (You in?) Enjoy the weekend!
8
38
8
104
5,889
I wasn't expecting to make so many friends from all over the world and learn this much in only 3 weeks. Thank you so much to all @AcademyPolkadot staff and all my new peers that were part of that amazing cohort!
🎓Yesterday, we wrapped up our Polkadot Blockchain Academy Campus in Lucerne — a beautiful, emotional closing ceremony 🎉 To our amazing students: You showed up with curiosity, coded through late nights, and built a real community. You’re now part of the PBA Alumni — and we can’t wait to see what you do next 💪 The future of #Web3 is now in your hands.
2
42
22
1,190
It's been a wild and exciting journey so far. I'm learning tons at the @AcademyPolkadot
🎓 PBA Campus Lucerne is here—welcome to all our new students! 🎉 We’re excited to kick off this learning journey with such a passionate group and can't wait to see what they'll discover, build, and achieve together! 🌟
1
72
Gustavo Dutra retweeted
The time has come, and with it your reading material for the week. Phrack #71 is officially released ONLINE! Let us know what you think! phrack.org/issues/71/1.html
14
476
33
1,005
165,864
Gustavo Dutra retweeted
#H2HC2023 20 anos, inscricoes abertas! Nao percam a comemoracao de 2 decadas @h2hconference youtube.com/shorts/hszbYD7xu…
5
24
8
66
9,106
Gustavo Dutra retweeted
Just added support to LDAP Serialized Payloads in the JNDI-Exploit-Kit. This attack path works in *ANY* java version as long the classes used in the Serialized payload are in the application classpath. Do not rely on your java version being up-to-date and update your log4j ASAP!
20
576
76
1,538