Pinned post
You're telling me that one of Bitcoin's biggest haters, who spent a decade crowing that we were all going to lose our money... is a failed banker who lost all of his clients' money?
Jameson Lopp
Verified account Casa@lopp
Insights on security, privacy, technology, money · Co-founder & Chief Security Officer @CasaHODL · creator of bitcoin.page, statoshi.info
309 Following 532K Followers 56K Posts
Latest posts 5
🚨 CRITICAL - Unauthenticated RCE in React Server Components (GHSA-xqc2-xf4c-x3h3)View quoted post on X
A critical vulnerability in React Server Components packages (react-server-dom-webpack, react-server-dom-turbopack, react-server-dom-parcel) allows unauthenticated remote attackers to execute arbitrary code via crafted RSC Flight payload responses transporting multiple typed arrays and attacker-controlled values.
👉 Affected: Versions 19.0.0–19.0.8, 19.1.0–19.1.9, 19.2.0–19.2.8, 19.3.0 | Upgrade immediately to 19.0.9, 19.1.10, 19.2.9, or 19.3.1 (or Next.js 16.4.1 / 15.5.28)
github.com/react/react/se…
A cursory scan of my wrench attack repository shows that at least 4% of attacks are criminals attacking criminals, or victims of scams seeking retribution against the scammer.
The real number is likely higher. Don't do crime, it doesn't pay!
The real number is likely higher. Don't do crime, it doesn't pay!
Lightning Network capacity peaked at the beginning of 2026 and has dropped 45% in BTC terms year to date.
x.com/lnbits/status/…
x.com/lnbits/status/…
⚠️⚠️ All LNbits users should stop their LNbits servers IMMEDIATELY. ⚠️⚠️View quoted post on X
Please forward this announcement.
Following a wave of attacks, we have a number of security patches to push. Until then, it's better to err on the side of caution. 🙏
Updates to follow soon.
Received nearly 1,000 emails today resulting from bots checking for account existence at various services.
Smells like another breach.
Smells like another breach.