Rust dev in fintech. Standing for privacy. Love breaking systems
Blockchain
Joined February 2025
- Tweets118
- Following68
- Followers37
- Likes3.3K
Spotify just announced a feature that could either save the music industry or destroy it.
Starting as early as Q1 2027, Spotify Premium subscribers will be able to use AI to transform any participating artist’s song into a completely different version. Turn a folk ballad into a dance track. Make a hip-hop song sound acoustic. Generate a cover where one artist’s voice performs another artist’s song. Remix a pop hit into lo-fi study music. Create the version of your favorite song that only existed in your head until now.
The remixes will be uploaded directly to Spotify. They’ll appear in playlists. They’ll count toward the original song’s chart position. And most importantly the original artist will earn royalties every time someone listens to a fan-created remix of their work.
Spotify has already signed a landmark licensing deal with Universal Music Group the world’s largest record label. Negotiations with Sony Music and Warner Music are ongoing. The feature will cost an additional $4–$5/month on top of Spotify Premium. And analysts project 7–8% of American subscribers will adopt it by 2028.
This is not Suno or Udio generating music from text prompts. This is fans remixing real songs by real artists with the artists’ permission, on the world’s largest streaming platform, with royalties flowing back to the creators.
A music industry analyst who’s covered streaming economics for 15 years told her team something after reading the licensing agreement that reframed how she understood the future of recorded music.
“Spotify just turned 640 million listeners into 640 million potential remixers. The question isn’t whether people will use it they will. The question is whether paying artists for fan remixes solves the economics of streaming or creates a world where the original recording is worth less than the infinite remixes generated from it.”
Here’s what Spotify’s AI remix feature actually is, who wins, who loses, and why this might be the most consequential decision in the music industry since the launch of streaming itself 🧵
22
Being a citizen of the most sanctioned country in the world literally saved my money and mental health this month. Thanks to my passport I couldn't deposit money to Binance and Revolut, so their hack and breakdown passed me by.
1
55
The first @rektoff_xyz lecture is over and I can say that the book was the most useful thing I read for a while because it gave me solid foundations to understand literally everything we've been taught today.
Last month I read the book "Code: The Hidden Language of Computer Hardware and Software", which really helped me to understand how computers work under the hood. I developed intuition about assembly language, memory and data representation. Highly recommend reading it.
1
2
43
Last month I read the book "Code: The Hidden Language of Computer Hardware and Software", which really helped me to understand how computers work under the hood. I developed intuition about assembly language, memory and data representation. Highly recommend reading it.
I've received an email with invitation to join @rektoff_xyz Solana security bootcamp. Can't wait to start the program and meet talented, bright and gifted security researchers there.
1
1
54
I really want to understand zero-knowledge proofs in depth, so I created a study plan to achieve my goal as a non-mathematician. Today, I completed a number theory course by The Open University, which was the first step on my journey. Moving on to linear algebra 💪
1
62
sunzenberg retweeted
As a Web3 Security Researcher
Please do this:
Before the audit
1. Gather all info about code & integrations
2. Push this into the AI for better context
3. Ask AI to split project into sections
4. Ask AI to get invariants, actors, assumptions
5. Ask it to write all of that into a JSON file
6. Go one section at a time
7. Check every answer against the code
During the audit
1. Find where the value moves
2. Find the main functions everything depends on
3. Pick one flow and hunt it manually
4. Walk it end to end
5. Ask what must never happen here
After you think you're done
1. You're not done
2. Complex integrations? Do more pass
3. Heavy math? Build fuzzing around it
4. New mechanism? Go deep on invariants again
5. Grind till the end
Spent a week exploring the code of Tare project and trying to break it. Failed to find anything worth submitting and was sure I missed something… but the code was just secure enough 🤣
The @Tare_io Audit Contest is complete!
No valid Medium or High severity issues were identified.
With no valid findings to reward, the fixed $27,000 USDC prize pool was distributed based on SR leaderboard points.
Top 3:
🥇 @iam0x52 — $4,670
🥈 bicktivism — $2,535
🥉 @maigadohcrypto — $1,071
Congrats to the researchers who participated.
Full results below 👇
2
80
sunzenberg retweeted
1/ How I use AI in smart contract audits (2026)
From 2023–2026, I entered 57 contests, reached top-3 30 times, won 21 and earned $627k in prizes.
109 highs + 156 mediums. 53 of them solos.
86 private audits.
This came from reading every line and building the mental model.
sunzenberg retweeted
Just published 778 findings in my website 0xsimao.com/findings from contests and private audits 🎉
There are links to the codebase at the right commit, so you can understand the bug yourself instead of just reading about it.
Might be the best way to study, enjoy 🫡
sunzenberg retweeted
Lots of people asking me how I did this. I want to summarize the whole process.
It’s called an independent audit or security research with no job, no invite, and no special access.
You do not need permission to audit because smart contracts are public code that holds money, and anyone can read them and report what is broken.
Here is the process.
→ Pick a relatively small, new project with a team you can actually message. New code has more bugs, and small teams reply faster. (EVM projects in most cases).
→ Get the verified source from the chain explorer. That is the real code and contract that is running.
→ Read it with a few questions in mind.
Who is allowed to move the money?
What happens at the risky moment when funds move between contracts?
Can a stranger trigger something only the team should?
You are hunting for just one wrong assumption at the moment, and you can as well use AI for faster reviews and code checks.
→ When you think you found it, prove it on a local copy of the chain, never on the real network.
A copy behaves like the real thing but touches no real funds. If you are right, it shows the money moving. If you are wrong, you find out before you embarrass anyone.
→ Write it short. What the bug is, what it costs, the exact code, and the exact command to reproduce it.
The best line you can give a team is "Do not trust me; run this yourself."
→ Send it privately. Don't post details while the bug is still open.
→ The team might bring you in to fix the bug with them, or rather, you submit your report and PoC (Proof of Concept).
Ask for their offer of a reward for the bug; criticals pay the highest.
→ Help them check the fix after the new changes.
The rule that matters most is to test on copies only.
Never inflate a medium bug into a critical.
Tools to learn. A chain explorer to read verified sources and Foundry to run a local copy of a chain and test against it.
The first bug is the hardest because you do not believe you can do it yet. But you can by finding the wrong assumption, proving it on a copy, reporting it with respect, and repeating it again.
sunzenberg retweeted
Solidity tip: every time you inherit a base contract, list every external/public fn you did NOT override. That's your unguarded attack surface.
KiloEx's $7M hole was a single unoverridden execute() in a forwarder.
Read the full report👇
medium.com/@KiloEx/kiloex-se…
sunzenberg retweeted
A massive, well-organized database of real on-chain exploits with full technical breakdowns.
- 845+ reproduced incidents
- detailed analysis for every hack
- Foundry PoCs you can run immediately
- easy navigation by chain and vulnerability type
crypto.training/hacks/
sunzenberg retweeted
Chat Control passed today.
Days like today are why DarkFi exists.
Not only in response to this vote, but in anticipation of every vote like it.
Our premise is simple: private conversation should not depend on who wins in Strasbourg.
Join the DarkFi chat (darkirc), today: darkrenaissance.github.io/da…
BREAKING:
The European Parliament just passed Chat Control 1.0
A proposal to stop the new law, which will allow big tech companies to voluntarily scan all private messages, needed an absolute majority of 361 voted but received only 314 votes.
As it was the last day before summer recess, many MEPs had returned to their home countries and didn’t take part in the surprise vote. Chat Control 2.0 is still being prepared. That law will make it mandatory to scan people’s private messages.
sunzenberg retweeted
how you can legally take $20,000,000 from a wallet
1) you need to find an inactive dao but has a decent treasury
2) you need to buy a lot of tokens related to the dao & initiate a governance proposal
3) don't tell anyone wait few days until the governance proposal passes
4) congratulations you just take the money legally from the dao wallet
5) in bonk fun case, 1 guy used ~ $4 million bonk to get access to $20 million
6) he got like $16 million profit
7) do you know how much $ worth bonk voted against his proposal? around $3k worth bonk
we are not in a serious industry
Recently I stumbled upon a smart contract designed to steal your money. Although the scam is pretty straightforward, I'd like to tell you about it, because I just saw a victim of a very similar trick in my Twitter timeline.
1
1
110
The malicious contract is verified on Tronscan, so the code is free to study. It has a function to check the allowance and transfers funds from victims to the scammer. I read through some of the transactions, and found out the contract has already taken money from real people.
1
1
41
For those who want to read the code or check transactions, here's the contract on Tronscan. Please stay safe out there and take care of your money 🙏
tronscan.org/contract/TURRtR…
1
1
35