[HybridStatAnim8]

At the time of writing, I scrolled 4 posts down and found one. GrapheneOS are security researchers, so they often are a first party source. As for the attacks, they have plenty of evidence for their claims. They avoid giving any attacks more publicity, but they usually provide evidence if you ask.

[fph]

Please provide a link to this post you found, so I can tell which one you think is a citation to a source. If you want some examples of recent posts that should have a source but don't, here they are:

https://grapheneos.social/@GrapheneOS/116442796907613215

https://grapheneos.social/@GrapheneOS/116442754144530576

https://grapheneos.social/@GrapheneOS/116439834987996043

https://grapheneos.social/@GrapheneOS/116439798112845463

https://grapheneos.social/@GrapheneOS/116439747793648606

(the linked post in Mastodon is the one displayed with a bigger font, not necessarily the first at the top of the page.)