Pat-Tastrophe:Leaked GitHub Token Could Cripple Virtuals' $4.6B AI&Crypto Empire
shlomie.ukGreat post. Highly recommended. Thank you for sharing it on HN.
My take: Many "Web3" applications naively rely on conventional "Web2" infrastructure, so they are exposed to conventional attack vectors.
The OP is just the latest example of this.
Here's an earlier example showing how easy it is to mess up a Web3 app if it naively relies on Web2 infrastructure:
https://moxie.org/2022/01/07/web3-first-impressions.html
The author of that earlier example is none other than Moxie Marlinspike, creator of Signal.
So unfortunate as AI agents combined with crypto has a lot of interesting potential that can be hampered if peoples first experience results in a rugpull. A case of the market rewarding speed over solid fundamentals.
Won't change until token holders force the devs to pay more attention on security.
What a shit show. Sounds more like an ad for a bogus bot. Gains of 4.57% overall facepalm So, compared to just monthly buys of SP500 it totally sucked.