Patrick Collins's banner

Patrick Collins

@PatrickAlphaC • 112,891 subscribers

Co-founder of 🛡️@cyfrin | 🟪 @soloditofficial | 🦅 @codehawks | 🎓 @cyfrinupdraft | ⚔️ @battlechain

Shorts

Just messin' around with my plaintext private key and a .env file. Felt cute, might delete later.

Just messin' around with my plaintext private key and a .env file. Felt cute, might delete later.

48,052 Aufrufe

I got to beta test the Keycard Shell wallet, and this is my live reaction to seeing the EIP-712 digest included in a Safe wallet signing request. (ZERO other wallets have this, but it makes verifying signatures MUCH easier) This is my genuine initial reaction.

I got to beta test the Keycard Shell wallet, and this is my live reaction to seeing the EIP-712 digest included in a Safe wallet signing request. (ZERO other wallets have this, but it makes verifying signatures MUCH easier) This is my genuine initial reaction.

26,028 Aufrufe

This past week, we launched the Cyfrin Updraft AI-based full-stack coding course. And I must warn you, only take this course if you want the burden of being able to become a one-person powerhouse. Here is what you can do with this new knowledge, and what you'll learn 👇

This past week, we launched the Cyfrin Updraft AI-based full-stack coding course. And I must warn you, only take this course if you want the burden of being able to become a one-person powerhouse. Here is what you can do with this new knowledge, and what you'll learn 👇

25,423 Aufrufe

When the hardware wallet shows the EIP-712 digest

When the hardware wallet shows the EIP-712 digest

12,405 Aufrufe

A 318 clean and jerk that helped me grab 3rd at the Bay State games in MA. Aaaaannndddd now back to crypto…

A 318 clean and jerk that helped me grab 3rd at the Bay State games in MA. Aaaaannndddd now back to crypto…

16,477 Aufrufe

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

The Battlechain testnet is now LIVE. Come enter the ultimate red-team platform. Give us feedback so we can launch mainnet very soon, and fix web3 security.

The Battlechain testnet is now LIVE. Come enter the ultimate red-team platform. Give us feedback so we can launch mainnet very soon, and fix web3 security.

Patrick Collins

72,361 Aufrufe • vor 3 Monaten

We need to talk about hardware wallets. 1. If you have one, you're probably signing transactions without checking calldata. 2. If you don't have one, you're more susceptible to hacks. One of these needs to change.

We need to talk about hardware wallets. 1. If you have one, you're probably signing transactions without checking calldata. 2. If you don't have one, you're more susceptible to hacks. One of these needs to change.

Patrick Collins

148,329 Aufrufe • vor 1 Jahr

1 year ago, I made a video about how blind signing would cause massive pain. Since then, we've seen hack after hack (recently, Drift protocol for almost $300M), where clear signing could have helped mitigate. Today, we finally have a systemic upgrade to wallet UX 👇

1 year ago, I made a video about how blind signing would cause massive pain. Since then, we've seen hack after hack (recently, Drift protocol for almost $300M), where clear signing could have helped mitigate. Today, we finally have a systemic upgrade to wallet UX 👇

Patrick Collins

31,710 Aufrufe • vor 2 Monaten

ByBit Exchange Hack ($1.4B Transactions) - Security Researcher Explained 1. What the transaction did 2. How it could have (potentially) been prevented 3. How to spot this kind of transaction

ByBit Exchange Hack ($1.4B Transactions) - Security Researcher Explained 1. What the transaction did 2. How it could have (potentially) been prevented 3. How to spot this kind of transaction

Patrick Collins

137,260 Aufrufe • vor 1 Jahr

I spent 2 hours today in 23° F (-5° C) onboarding as many people as possible in Boston to cryptocurrency. I gave away ~$225 in Ethereum using: - ZKSync Era's Clave (AA Wallet) - onchaingift / Coinbase Wallet / Base L2 All while learning how much Boston knows about crypto. 👇

I spent 2 hours today in 23° F (-5° C) onboarding as many people as possible in Boston to cryptocurrency. I gave away ~$225 in Ethereum using: - ZKSync Era's Clave (AA Wallet) - onchaingift / Coinbase Wallet / Base L2 All while learning how much Boston knows about crypto. 👇

Patrick Collins

107,003 Aufrufe • vor 1 Jahr

I made a 🦊 wallet plugin that: 1. Decodes your calldata 2. Uses that decoded data as input to an AI 3. Which then searches the web to see if the transaction has anything "fishy" about it. Here is an example where you'd be sending money to the ByBit hackers, but it catches it!

I made a 🦊 wallet plugin that: 1. Decodes your calldata 2. Uses that decoded data as input to an AI 3. Which then searches the web to see if the transaction has anything "fishy" about it. Here is an example where you'd be sending money to the ByBit hackers, but it catches it!

Patrick Collins

67,873 Aufrufe • vor 1 Jahr

The ultimate plumbing course for developers and security researchers affected by AI 👇👇👇

The ultimate plumbing course for developers and security researchers affected by AI 👇👇👇

Patrick Collins

46,098 Aufrufe • vor 8 Monaten

.Cyfrin Audits has been working tirelessly to shift security left, into developers' hands, since day 1. - Building tools like Cyfrin Solodit 🟪, Aderyn, Moccasin - Teaching people how to become auditors at Cyfrin Updraft 🟩 - Doing conventional audits And we just took another step

.Cyfrin Audits has been working tirelessly to shift security left, into developers' hands, since day 1. - Building tools like Cyfrin Solodit 🟪, Aderyn, Moccasin - Teaching people how to become auditors at Cyfrin Updraft 🟩 - Doing conventional audits And we just took another step

Patrick Collins

17,893 Aufrufe • vor 3 Monaten

🌪️ What's happening with Tornado Cash and Coinbase is STILL one of the most important battles happening today in Web3. Let me explain, or just watch my video

🌪️ What's happening with Tornado Cash and Coinbase is STILL one of the most important battles happening today in Web3. Let me explain, or just watch my video

Patrick Collins

100,003 Aufrufe • vor 3 Jahren

How do you know what you're signing on your hardware wallet is correct? Asking this question could have saved Radiant Captial $50M last year, and could save you even more. If you're on a security council, DAO, or you own a hardware wallet, you need to know this 👇

How do you know what you're signing on your hardware wallet is correct? Asking this question could have saved Radiant Captial $50M last year, and could save you even more. If you're on a security council, DAO, or you own a hardware wallet, you need to know this 👇

Patrick Collins

51,046 Aufrufe • vor 1 Jahr

You can now learn: - Assembly - Huff - Formal Verification - High-Level Wallet/Web3 DevOps On Cyfrin Updraft, in an outstanding new 13 hours of content. 🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉 Let's give you a taste of what you'll learn in these two new courses:

You can now learn: - Assembly - Huff - Formal Verification - High-Level Wallet/Web3 DevOps On Cyfrin Updraft, in an outstanding new 13 hours of content. 🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉 Let's give you a taste of what you'll learn in these two new courses:

Patrick Collins

63,287 Aufrufe • vor 2 Jahren

"We already have to use JavaScript for the front end, so instead of learning another tool, we just use it on the back end, too" "JavaScript everywhere"

"We already have to use JavaScript for the front end, so instead of learning another tool, we just use it on the back end, too" "JavaScript everywhere"

Patrick Collins

36,244 Aufrufe • vor 1 Jahr

"but ser, if you ask your claude/openai/chatgpt/cursor/windsurf/openclaw to ignore sensitive files, it will - use the .cusorignore/rules/llm.md/etc file" If that is your security posture, you've already lost. Private keys should never be in plaintext

"but ser, if you ask your claude/openai/chatgpt/cursor/windsurf/openclaw to ignore sensitive files, it will - use the .cusorignore/rules/llm.md/etc file" If that is your security posture, you've already lost. Private keys should never be in plaintext

Patrick Collins

10,129 Aufrufe • vor 4 Monaten

The Safe site was actually compromised!!! (More info on the $1.4B Bybit hack) We initially speculated that it was the exchange's computers that were hacked, but it looks like it was the Safe UI the whole time! The fix is still the same. Use the Cyfrin/safe_tx_hashes tool 👇

The Safe site was actually compromised!!! (More info on the $1.4B Bybit hack) We initially speculated that it was the exchange's computers that were hacked, but it looks like it was the Safe UI the whole time! The fix is still the same. Use the Cyfrin/safe_tx_hashes tool 👇

Patrick Collins

26,491 Aufrufe • vor 1 Jahr

Your Evolution as a Solidity Developer

Your Evolution as a Solidity Developer

Patrick Collins

32,873 Aufrufe • vor 2 Jahren

Python devs. Use uv.

Python devs. Use uv.

Patrick Collins

24,334 Aufrufe • vor 1 Jahr

Security researchers only want one thing and it's disgusting

Security researchers only want one thing and it's disgusting

Patrick Collins

32,871 Aufrufe • vor 2 Jahren

You MUST secure your web2 environment in order to secure your web3 environment. In this video, I show how one could steal a private key from your server using the react2shell exploit. Just by visiting your website. Update ASAP if you have not already!

You MUST secure your web2 environment in order to secure your web3 environment. In this video, I show how one could steal a private key from your server using the react2shell exploit. Just by visiting your website. Update ASAP if you have not already!

Patrick Collins

11,929 Aufrufe • vor 7 Monaten

A gas optimization for the whole family! ...Or at least an auditor near you.

A gas optimization for the whole family! ...Or at least an auditor near you.

Patrick Collins

17,524 Aufrufe • vor 1 Jahr

They lost $500k by installing a bad extension! And having cryptocurrency credentials on their device...

They lost $500k by installing a bad extension! And having cryptocurrency credentials on their device...

Patrick Collins

15,245 Aufrufe • vor 1 Jahr