Arion

Security Researcher || focusing on Formal verification || DM for FV engagements

[Arion @0xArion]

@0xdiid I think you're wrong, more than 70% of the TLS traffic now is post quantum or hybrid pq.

[Arion @0xArion]

@0xFlint_ @MartinMarchev @immunefi Even $250 on some programs lol

[Arion @0xArion]

@0x18a6 Run another one

[Arion @0xArion]

Highly recommend watching this!

Especially if you're still relaying on old school stuff in your auditing workflows

[yAudit @yAuditDAO]

yBorg - Week 1 Day 4

Today's speaker:
Andrew @andrew_anderson, ex-@OpenZeppelin and creator of @hob_app, walks through examples of running an audit with Hob.

Hot take: "Stop writing audit notes inline. You're gaslighting the LLM."

Watch and drop questions and comments below 👇

[Arion @0xArion]

@gakonst IMO in FV you shouldn't aim to have coverage on corner cases, focusing at the core of the system or the critical parts and prove they're doing what they intended to do correctly has better ROI.

And to ensure the quality/coverage of the specs you can use Mutation Testing.

[yAudit @yAuditDAO]

yAudit Fellowship Block 8: yBorg is off to a great start.

Here's the recording of the opening session with guest speaker engn33r @bl4ckb1rd71 recorded Monday.

engn33r's presentations starts at 13:29

[Arion @0xArion]

@DevDacian @cyfrin Very well deserved, congrats!!

[Arion @0xArion]

If you're considering @ShredSecurity as your security partner, you can also request Formal Verification as additional security layer with me for your protocol 🎯

[Shred Security @ShredSecurity]

5 incredible researchers joined our Researchers Network last month.

All of them are senior security researchers with proven track records and deep experience across different areas of Web3 security.

Our goal is to match the right researcher to each codebase based on its requirements, architecture, tech stack, and complexity, bringing specialized expertise to every audit we perform.

Meet the team: https://t.co/LSK9npluKh

Tell us about yourself here: https://t.co/Fnokk7Oh1X

[Arion @0xArion]

new collaboration with @ShredSecurity 🫡🫡

[kenzo @kenzowhitehat]

Looking forward to work with @AdityaK0010 @1nc0gSec @Abhan1041 @0xJustUzair and @0xArion 🫡

Follow @ShredSecurity for more updates!

[Arion @0xArion]

I've been accepted into this cohort 🎉

First experience with @yAuditDAO academy blocks.

Will try to share all my learning notes & insights here day by day 🫡

[yAudit @yAuditDAO]

🎉 yBorg acceptances go out today. Check your email! 📬

Huge applicant pool, so we had to make some tough calls.

Didn't get in or want to follow along from home? We'll post all speaker sessions and course materials here on X as we go. 🧠

Follow + turn on notifications 🔔

[Arion @0xArion]

@milotruck Duplicates are the enemy of this strategy

[Arion @0xArion]

This didn’t even age well 😭

[Artem Chystiakov @Arvolear]

All custodians will get hacked too.

[Arion @0xArion]

Even your symbolic/invariant tests may suck.

AI can now one shot unit, fuzzing, invariant & FV suites.

But how do you know the tests are actually good?

You need something alongside your “wisdom” that can challenge the suite also.

That’s where mutation testing comes in.

[Alex the Entreprenerd @GalloDaSballo]

You’re fucking up your tests

[Arion @0xArion]

@J4X_Security @Stature_finance @n4nika_ @rileapp @33audits @0xcastle_chain Very smart move actually, like having a different source of dopamine.
Recharging without taking a long break.

[Arion @0xArion]

Is This The New Meta For Auditors?

- @J4X_Security building @Stature_finance

- @n4nika_ building @rileapp

- @33audits build, then audit shop

- @0xcastle_chain Also, seems started to accept building requests.

Really interesting, Good luck to all of you 🫡

[Stature @Stature_finance]

Buying tokenized stocks shouldn’t require a DeFi survival guide.

Meet Stature.

Join the waitlist → https://t.co/nnutqiR0kD

[Arion @0xArion]

@Fricoben I discovered about verity just recently while exploring lean ecosystem.
What's the vision of verity?
do you aim to make it usable by production protocols? Or it will be just for verifying high assurance contracts only.

[Arion @0xArion]

@badcryptobitch @0xPolygon why?

[Arion @0xArion]

Goated advice from Alex.

I'm doubling down on Formal Verification & defensive security For months, and there's still a lot of room for improvement 🙌

[Alex the Entreprenerd @GalloDaSballo]

What the fuck is up with contest platforms??

[Arion @0xArion]

@BengalCatBalu Very informative and well written,
Thank you!!

[BengalCatBalu😽 @BengalCatBalu]

I spent a long time denying how LLMs were changing smart contract security. Now I’m excited about what comes next.

This article is my perspective for anyone overwhelmed by the changes or still trying to understand what they mean for our sphere. https://t.co/yMm45x0XuU