A safer financial internet @ProximusLabs | Senior dev | @superteamPOL member 🇵🇱
Building in Public
Joined July 2024
- Tweets9.3K
- Following880
- Followers3.8K
- Likes43K
Pinned Tweet
Cybersecurity will be one of the most important sectors of the next decade.
PROXIMUS Research Labs Foundation is building for that future, with PROXY Token planned to launch on @solana.
AI agents, digital payments and connected devices give attackers more decisions to manipulate. In WEF’s 2026 survey, 87% of respondents identified AI-related vulnerabilities as the fastest-growing cyber risk in 2025.
The stakes grow when software can move money or grant access. A compromised website, misleading instruction or unsafe wallet permission can turn an ordinary action into a loss. Security needs to be part of the decision before that action executes.
@ProximusLabs brings action reviews, policies and evidence into application workflows. Developers submit an intended action, receive an allow, challenge or block decision, and enforce it before execution. The application integration makes that control effective. More automation makes dependable security more important. That is the long-term opportunity we are building around.
The official mint, launch date and final access terms will be published before launch.
Www.proximus.sh
236 new sign-ups on waitinglist!
Did not sign-up yet?
Sign up below
Www.proximus.sh/waitinglist
Last week I switched all my crypto cards for the best one I have tested till now. They are also opening markets that almost no card provider does.
@PulsarMoneyApp
Join me on Pulsar Money!
1. Download Pulsar:
pulsar.money/download
2. Create your account.
3. Scroll down to "Have an invite code?", tap "Enter Code", and enter my code for some specials👀
XRNYF
It is time to block drainers forever. Everyone who got in, find the open-source SDKs on our organisation Github from Monday!
proximus.sh/documentation/sd…
Easily connect your github repos, find vulnerabilities in minutes.
We are closing in on 240 waitinglist entries. Today, another 10 people get beta access.
Early Access codes dropping tonight in your e-mails if you are lucky!
Sign-up now.
proximus.sh/waitinglist
We are getting there..
Want to get into Proxy-1-deepseel-v4.1-flash-1017-unrestricted?
$0.40 / hour
4.7k tokens/second
Literally, unrestricted.
Reply and send me a DM for access.
proximus.sh
It is so funny that this still does not include SECURITY.
Damn why does no one like this.. guess everyone wants everything drained
but hey at least AI agents get drained lol lets go
YC (@YCOMBINATOR) IS LITERALLY TELLING FOUNDERS WHERE THE NEXT BILLION-DOLLAR CRYPTO STARTUPS WILL BE BUILT
- APIs for AI agents
- AI Trading Agents
- New USD stablecoins
- Non-USD stablecoins
- Stablecoin-powered neobanks
- New exchanges & trading UIs
The playbook is here.
Step 1: Pre-signed nonce
Step 2: Share PK
Step 3: everyone tries to get the wallet and sell no one can
Step 4: @mikadontlouz rugs the token for 40k and blames accidently sharing PK.
Ye straight to jail but prolly not because lipfiller cabal will just keep rugging you forever.
LA lip filler cabal strikes again
So @mikadontlouz launched a coin and posted a private key of a wallet holding 50% supply instead of the CA
Someone got that private key and nuked the chart and made 38k.
Can't make this shit up lol.
Oh ye was just a matter of time they found one in NGINX
A PoC/exploit has been discovered for vulnerability CVE-2026-42530
PT ID: PT-2026-50439
Read on dbugs: dbu.gs/vulnerability/PT-2026…
Vendor: F5
Product: NGINX Open Source
Description: NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This may cause a Use-after-Free in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Link: github.com/udyz/cve-2026-425…
Finding vulnerabilities through a KYC'd [lol] bounty program doesn't pay anymore.
Find a 0-day, get 300 bucks.
Ye red team and PoC everything in the open with haste
Since the @Apple Bug Bounty Program is by far the worst program I've ever hacked on, I am going to be dumping all of the data/POCs/report write ups etc for everything found during the 4 months of hacking them. This will include POCs for vulns that didnt meet their bar for a bounty so wasnt reported to them, so you may be able to find ways to escalate some of them. Ill be uploading the data all this weekend.
Banks are better off using @BitGo
binance.com/en/square/post/3…
Case:
A red hat hacker discovers an exploit putting $10M in user funds at risk.
They report it to the company. The company refuses to pay and claims to have fixed it.
But the exploit still works.
The hacker drains the $10M, immediately contacts the company, and offers to return 95%, keeping 5% as a reward.
The company is furious.
But they failed to protect $10M in user funds despite being warned.
What would you do?