# Altumptic

> Altumptic is an independent security research and engineering lab. It studies how the software that guards keys and servers breaks under attack, and publishes open tools, specifications and incident analyses with their sources and known limits. Founded in 2025 and led by thefear.

## Flagship releases
- [Phobia Wallet](https://altumptic.com/products/phobia-wallet): An open-source, self-custody wallet for Windows, Linux and Android. No account, no email, no KYC, no telemetry — and every network request can be forced through Tor. Channels: https://t.me/PhobiaStat, https://t.me/PhobiaReleases, https://github.com/thefear078/Phobia-Wallet
- [LemonSees](https://altumptic.com/products/lemonsees): An open-source security operations console that watches Linux servers over a plain SSH login — telemetry, file integrity, threat intel mapped to MITRE ATT&CK, incidents and compliance. Nothing is installed on the servers. Channels: https://www.producthunt.com/products/lemonsees, https://github.com/Altumptic/LemonSees

## Research & engineering log
Permanent identifiers, newest first. Full log: https://altumptic.com/research
- ALT-10 · 2026-10-15 · Analysis · Published — [Two billion downloads a week: the npm attacks of September 2025](https://altumptic.com/research/npm-september-2025): A phished maintainer, a crypto-clipper in chalk and debug, and the Shai-Hulud worm.
- ALT-09 · 2026-10-15 · Analysis · Published — [The xz backdoor: the attack that waited two years](https://altumptic.com/research/xz-backdoor-two-years): A patient maintainer, a hidden build step and an SSH backdoor caught by half a second of latency.
- ALT-08 · 2026-10-15 · Analysis · Published — [Bybit, $1.5 billion: the keys held, the screen lied](https://altumptic.com/research/bybit-signing-interface-2025): The largest crypto theft on record went around the keys — through the signing interface.
- ALT-07 · 2026-10-15 · Analysis · Published — [The ATB website attack: what is known, what is not](https://altumptic.com/research/atb-website-attack-2026): A $400,000 ransom note, a two-hour countdown and claims that do not match public figures.
- ALT-06 · 2026-10-15 · Analysis · Published — [Japan's cyber emergency, in numbers](https://altumptic.com/research/japan-cyber-emergency-2026): Twenty-plus companies hit in weeks, one cloud provider disrupting 495 organisations.
- ALT-02 · 2026-10-15 · Release · Stable · v3.0.0 — [LemonSees](https://altumptic.com/products/lemonsees): Agentless security operations console where the SSH session is the agent.
- ALT-05 · 2026-10-14 · Architecture · Published — [LemonSees: why the SSH session is the agent](https://altumptic.com/research/lemonsees-agentless-architecture): Agentless collection over one multiplexed SSH connection, and what it costs.
- ALT-04 · 2026-10-14 · Protocol · Published — [Phobia Wallet: security design notes](https://altumptic.com/research/phobia-wallet-security-design): Vault cryptography, Tor routing with a kill-switch, supply chain — and the known limits.
- ALT-03 · 2026-10-14 · Policy · Active — [Vulnerability disclosure policy](https://altumptic.com/security): How to report a vulnerability: PGP key, scope, timelines and safe harbor.
- ALT-01 · 2026-10-09 · Release · Beta · v4.10.0-beta.5 — [Phobia Wallet](https://altumptic.com/products/phobia-wallet): Self-custody wallet for 18 chains with Tor inside the binary and a kill-switch.

## Engagements
The lab takes a few outside engagements in areas it already publishes on:
- Security audits & penetration testing: Applications, APIs and infrastructure tested the way an attacker would — with written authorization, a clear scope and nothing left on your systems. (Method in practice: ALT-04: https://altumptic.com/research/phobia-wallet-security-design)
- Security protocol & cryptography engineering: How your product stores keys, encrypts data and talks to the network — designed, built and documented so anyone can check it later. (Built in ALT-01 Phobia Wallet: https://altumptic.com/products/phobia-wallet)
- Security monitoring: See what runs on your Linux servers, who connects and who attacks them — with nothing installed on the servers — plus the reports an auditor asks for. (Built on ALT-02 LemonSees: https://altumptic.com/products/lemonsees)

## The lab
- Website: https://altumptic.com/
- Founder & Principal Researcher: thefear — https://altumptic.com/founder
- thefear elsewhere: https://github.com/thefear078, https://x.com/thefear078, https://www.reddit.com/user/Particular_Lime_7004/, https://www.tiktok.com/@thefear078, https://t.me/thefear078
- GitHub organization: https://github.com/Altumptic
- Contact: thefear078@gmail.com, Telegram https://t.me/thefear078
- Security reports: thefear078@gmail.com (PGP 117BA978F33280B512EE84B5D2783C4FDE430CA6), policy https://altumptic.com/security