Computer engineer, smart contract security researcher.
Joined September 2020
- Tweets5.6K
- Following414
- Followers673
- Likes34K
Pinned Tweet
New blog post: an attack that could allow a vault operator to drain funds by manipulating liquidity w/ user funds and ping pong-ing the price up and down.
rokinot.github.io/pingpong
air gap everything from now on, screw it #AirGapSummer2026
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
rokinot retweeted
FYI for anyone in AI who wasn’t in crypto in 21, the thing that comes after the blowoff top is fraud season
fun times
Yo, @CurveFinance ! Saw your DAO is ready to rock and I gots to MAXIMIZE MY ALPHA ! So I went ahead and deployed it for you. Get at me in DM to verify and lets get this party started!!
I believe that in the next month or so I'll be able to make a return, or rather a first dive, through bug bounties. I've been working on my own AI-powered solution for several months and its almost in a state I'd call passable. I've been a bit of a perfectionist with it
what the FUUUUUU
DeepSeek V4.1 Flash 1017 runs at 1,521+ tok/s on Fireworks Ultrafast.
Fast enough to ship Tetris in 11 seconds, 7x faster than Claude Opus 5.5.
Join the Ultrafast waitlist: bit.ly/3UA0wKq
lets pay attention to any price reduction openAI/anthropic announces for the next month or two
🚀 Introducing DeepInfer, our in-house inference framework, now fully open source!
Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable.
🔗 github.com/deepseek-ai/DeepI…
1/4
new deepseek is awesome, its hallucinating way less bugs while being considerably cheaper by virtue of not overthinking like the previous one
not a big deal, they just used anvil default addresses balances, a 10 year old could pull this off
rokinot retweeted
Something non-obvious about audits:
Fixing a critical is often easier than fixing a medium.
Most criticals have clear root causes and clear fixes. Mediums live in tradeoffs — rewriting large chunks of code, changing how users interact, breaking integrations nobody wants to touch before launch.
Severity grades the bug. Not the remediation.