Writing · 52 posts
Write-ups & postmortems
Write-ups, postmortems, incident notes, and projects. Lost crypto to a scam or a drained wallet? Start with what can and can’t be done.
- 2026
- Hedo: a trading desk with a moodethereum · trading · web3
- Onchain Air: a radio for when you cannot watch the chainethereum · radio · security
- Stonkers: memecoin-backed crayon NFT handsnft · defi · web3
- 2023
- Exfiltrating Data in Google Sheetssecurity · data-exfiltration · google-sheets
- 2022
- Spoofing Twitter Unfurling to Phish Userssecurity · phishing · social-engineering
- Sanctioned addresses on Ethereumcompliance · security · analysis
- EvoDefi Bridgesecurity · blockchain
- An analysis of crypto donations to Ukraineanalysis · ukraine · donations
- Changing the tech powering my websitetechnology
- How Bad Actors Can Abuse Block Explorers to Trick Yousmart contract · blockchain · security
- 2021 (the second half) In Review: Crypto Hacks, Scams & Shutdownsyear in review · security
- 2021
- Spoofing Twitter unfurling to phish yousecurity · phishing
- So You Wanna Build Your Own PFP NFT Project?fun · nft
- Do You Trust Links? Well, You Probably Shouldn't.security · phishing
- Investigating Twitter Reply Scam Ringssecurity · phishing
- Protect Yourself from 2FA Hackssecurity · phishing · 2fa
- 2021 (the first half) In Review: Crypto Hacks, Scams & Shutdownsyear in review · security
- Twitter Bot: @Beeple69Mtwitter
- How to Beat an Ethereum Sweeper Script and Recover Your Assets!security · blockchain · recovery
- Bad Actors Abusing ERC20 Approval to Steal Your Tokens!smart contract · blockchain · security
- 2020 In Review: Major Blockchain/Crypto Security Incidentsyear in review · security
- Malicious Crypto Apps Are Ramping Up on Google Playsecurity · phishing · applications
- 2020
- How to Ensure You’re Running the Legitimate Version of MetaMasksecurity · phishing
- HackTheBox: Money Flowz OSINT Challengewriteup
- Working With Binance to Return $10,000 of Stolen Crypto to a Victimsecurity · phishing · recovery
- The #TwitterHack Postmortemsecurity · phishing · analysis
- 2020 So Far: Personal Information Dumps and Cryptocurrencyyear in review · security
- Intercepting and Saving $5,000 Worth of Phished Cryptosecurity · phishing · recovery
- Phishing Campaigns Take Aim at Web3 DeFi Applicationssecurity · phishing · blockchain
- Discovering Fake Browser Extensions That Target Users of Ledger, Trezor, MEW, Metamask, and Moresecurity · phishing · browser extensions
- 2019
- 2019 In Review: Major Blockchain/Crypto Security Incidentsyear in review · security
- dApp Key Management: UX and Securitysecurity
- Nigeria, Indonesia, the US, and Vietnam are among the highest victim rates for crypto scamssecurity · phishing · analysis
- Research into trust trading scams on Twittersecurity · phishing
- Disclosure: Key generation vulnerability found on WalletGenerator.net — potentially malicioussecurity · phishing
- Discovering fake Trezor, MetaMask, and MyCrypto Android APKssecurity · phishing · applications
- Be careful with your KYC documentssecurity
- Hunting Huobi Scamssecurity · phishing
- The dangers of malicious browser extensionssecurity · phishing · browser extensions
- 2018
- Unique phishing method to look out for: the fullscreen APIsecurity · phishing
- The Trust Trading Scam Kitsecurity · phishing
- Using phishing tools against the phishers and uncovering a massive Binance phishing campaign.security · phishing
- @CryptoPhishingtwitter · phishing
- Dissecting some of the latest cryptocurrency exchange phishkitssecurity · phishing
- You need to stop trusting linkssecurity · phishing
- Dissecting a HitBTC phishing sitesecurity · phishing
- Following an Ethereum phishing scam down the rabbit holesecurity · phishing
- Web3 RPC API now in Postmanfun
- 2017
- How to ensure safety using EtherDeltasecurity
- Setting up an Ethereum nodefun · infrastructure
- 2014
- Another MySQL daemon already running with the same unix socketmysql
- Copying remote files to local machinescp