anu (@svector_eth) header
anu (@svector_eth) profile picture

software engineer @aeonframework | run your agent at https://xitter.twitterapi.xyz/t.co/nW7q0w6Vlr

nous
Joined March 2023
Photo by anu (@svector_eth)Photo by anu (@svector_eth)Photo by anu (@svector_eth)Photo by anu (@svector_eth)Photo by anu (@svector_eth)Photo by anu (@svector_eth)Photo by anu (@svector_eth)Photo by anu (@svector_eth)Photo by anu (@svector_eth)Photo by anu (@svector_eth)
What our scanner found on @tirth_8205's code-review-graph: an AI agent connected to it could be steered into reading any file on your machine, far outside the repo. Full report below ⤵️
2
3
12
909
When the guardrail IS the bug 🔓 VulnScanning Ep.6: 3 safety checks that failed open, all found by Aeon, all patched. 00:19 @omnigent_ai: "allow" when confused (High) 02:13 @Opencodex: a buffer with no limit 03:16 @Capminal: a mint priced 74% too cheap (High) 05:12 6 patterns, one checklist
1
3
1
23
1,741
The @aeonframework VulnScanning #6 is live!
When the guardrail IS the bug 🔓 VulnScanning Ep.6: 3 safety checks that failed open, all found by Aeon, all patched. 00:19 @omnigent_ai: "allow" when confused (High) 02:13 @Opencodex: a buffer with no limit 03:16 @Capminal: a mint priced 74% too cheap (High) 05:12 6 patterns, one checklist
3
2
16
417
Still waiting for the base:0xbf8e8f0e8866a7052f948c16508644347c57aba3 chart to wake up. I believe it's only a matter of time before we see a strong move. Patience is key @base fam. Let's see what comes next..
aeon is now listed on @OpenRouter! Your agent can pick from hundreds of models with one key while our app page on their website shows their usage live
7
3
32
849
What our scanner found on DeepTutor: in the default no-login mode, any website open in your browser could call the admin API, including a route that runs commands. Full report below ⤵️
1
1
13
1,267
aeon is now listed on @OpenRouter! Your agent can pick from hundreds of models with one key while our app page on their website shows their usage live
2
6
1
47
2,885
YUSA is now a listed skill pack in the @aeonframework community registry. One read-only skill that scans every installed SKILL.md for instructions hidden from the operator: Unicode TAG smuggling, zero-width splits, look-alike letters, hidden HTML. No keys. No network. github.com/yusasecurity/yusa
1
2
6
229
telegram out there mogging iMessage & Whatsapp proud to support it as our main channel for @aeonframework 🤝
Any Telegram message can now become an app. ⚡ Downloads instantly (less than 4 KB)
🎨 Interactive and natively rendered
💸 Payments and viral mechanics built in 🛠️ Build your own. More info and docs for devs: t.me/BotNews/122
3
3
30
1,337
anu retweeted
i asked my aeon agent to build a uniswap v4 hook based on hyperliquid perp markets for elysium. it seems to be the first uniswap v4 hook deployed on elysium mainnet. it’s called PerpRegimeFee. it reads hyperliquid perp market conditions and dynamically adjusts the pool’s LP fee: cheaper when markets are calm, higher when funding gets stressed and volatility rises. it’s now live on @Enter_Elysium and @base , built, tested and deployed through @aeonframework deploy-uni-hook skill. 11/11 behavioral tests passing on a Base mainnet fork. Elysium: elysium.kinetiq.xyz/address/… Base: basescan.org/address/0x190D7…
aeon build me a v4 hooks that react to perp markets dont make any mistake xitter.twitterapi.xyz/aaronjmars/status/2097…
2
3
1
14
632
Your API keys might be sitting in your logs right now! Aeon VulnScanning Ep.5 ⏱ Chapters 00:00 Intro: secrets leak sideways 00:26 Kaneo: Gitea token exposed to every workspace member (High) 00:35 The bug 01:50 ds2api: API keys in the logs + a path-traversal classic 02:00 The bugs 03:17 fumadocs-openapi: an open proxy by default 03:32 The bug 04:29 The pattern: rotate, don't just upgrade
1
3
1
18
1,896
A week in the @aeonframework trenches🧵 30th Oct --> 6th Nov - Aeon accepted in the @NEARProtocol's RED program - Founder's takes - October's grinding recap
2
2
1
32
2,091
Elysium is live on Definitive. Swap in from any chain and trade tokens on @Enter_Elysium with limit, DCA, stop-loss and take-profit orders.
10
10
1
59
4,022
stare into the abyss of the benchmark industry long enough and you realize most of it is fake spent the last month building our own eval system for aeon security. one of the hardest engineering problems i've ever faced. tldr: once you know what you're actually evaluating, the "top" models aren't the ones you need. especially in cyber. i've seen some REALLY niche models outperforming opus 5.5 or astra, on very difficult & long tasks.
Nice DeepSWE score! Does it survive a lowercase filename? Introducing MaxxBench: 89 DeepSWE tasks with small changes to the instructions or starting code. Same engineering problem, slightly different requirement. Models clustered around 74% on DeepSWE end up 23 pp apart. Good at coding, or good at DeepSWE? 🧵
7
2
17
1,186
The aeon team has millions of github stars on their security contributions. Glad Sage2 can help with the next million!
Replying to @aeonframework
@aaronjmars on how Sage 2 by @levantolabs helps Aeon route bug bounties autonomously, flipping as the policy streams in. xitter.twitterapi.xyz/aaronjmars/status/2117…
1
1
6
418
anu retweeted
Cybersecurity is the only engineering role AI won't replace.
94
59
29
1,184
52,914
Aeon got accepted into NEAR AI Red, the @NEARProtocol's new cybersecurity program. Private, uncensored security models running inside hardware enclaves and our powerful vuln scanner gets to hunt with them 👀
7
8
3
52
2,568
anu retweeted
technically, every company has vulnerabilities. some just haven’t discovered theirs yet.
2
9
302
lfg. @aeonframework just got accepted into NEAR AI RED program ⭐ Let's defend software together 🤝 With private & uncensored AI 💯
Uncensored AI is changing the balance of power in cybersecurity. We're building to shift it toward defenders. NEAR AI RED is a new program for security teams, with private, uncensored AI to work with.
8
10
69
2,333