Twitxy Saved

Mudit Gupta

Verified account Polygon

@Mudit__Gupta

CTO @0xPolygon Labs | Blockchain Security Researcher | Ethereum & Web3 dev

🦇🔊
mudit.blog Joined March 2010
1.1K Following 68K Followers 11K Posts

Latest posts 5

Mudit Gupta Verified account @Mudit__Gupta
I couldn’t find a single critical CVE in SBCL, the main Lisp compiler and runtime.

Modern language implementations have been disclosing critical CVEs every day now.

Maybe we should all just move to functional programming.
5 replies 0 reposts 19 likes 2.6K views View on X
Mudit Gupta Verified account @Mudit__Gupta
ULPT - You can get your competition banned in India with one letter. Lmao.
Aditya Kalra Verified account @adityakalra 1d
‘NO SUCH ORDER PASSED BY HER LADYSHIP’

India’s government ordered blocking of 100+ illegal betting websites based on two court orders. But @Reuters has found the court orders were fake.

The two court orders carried blue court seals, a fake QR code and made-up case numbers such as “Writ - A 30480/2026”. They were sent by individuals who claimed to be lawyers, and asked for immediate implementation by Indian government.

The government sent them to internet providers to take down websites. The forgeries are the latest sign that fake orders are slipping past India's official content removal mechanism, considered one of the world's strictest

Following questions from Reuters, Uttar Pradesh police have opened a forgery investigation after Reuters queries to the Allahabad High Court, while the Rajasthan High Court told Reuters in an email the order did not exist on its server.

Who sent the orders to the government & how did officials order takedowns? Read.

tinyurl.com/49c8ju4z With @MunsifV, edits @Saad_Scrawls
View quoted post on X
2 replies 0 reposts 28 likes 3.9K views View on X
Mudit Gupta Verified account @Mudit__Gupta
Building an Agent that controls an Agent that controls Agents that build and maintain Agents that build and maintain Agentic applications, all on cloud.

It's truely the future. Claude cowork is done for.

Will make it public when the bazillion bugs are fixed lol.
10 replies 0 reposts 37 likes 3.4K views View on X
Mudit Gupta Verified account @Mudit__Gupta
Attackers are now publicly attacking critical repos with malicious PRs
PRs. Make sure you review all external contributions comprehensively.

A GitHub account created at 01:26 UTC today spent six hours trying to get into wallet repos at chainapsis (Keplr/Vizor) and Zingo Labs (Zcash).

When Codex review flagged its "diagnostics" PRs that POSTed signing keys, it opened an AGENTS(.)md PR telling AI reviewers that uploading secrets is the project convention. Then it went quieter: a crate it had just published, lwd-uri-util, with the stealer in build(.)rs, slipped into Zingo PRs inside a full-file CRLF rewrite.

build(.)rs runs on cargo build, cargo check, even rust-analyzer opening the project. It grabs env vars, git/gh/AWS/npm/cargo creds, Keplr MCP vaults and macOS Keychain entries.

Your AI reviewer reads AGENTS(.)md too. Review it like CI config, not docs.