Bhaskar

Blockchain Developer | Web3 Security Researcher | {Solidity, Rust, Move} | Tokenisation | RWA | IIITN | DLT | prev: @quillaudits_ai

[Bhaskar @0xPSB]

Really enjoyed the challenges—happy to place in the Top 15 at Wonderland CTF with the team!
🫡

[Bhaskar @0xPSB]

Interesting insight from the data 📊

CoinGecko consistently stays much closer to CoinMarketCap pricing than LiveCoinWatch for both USDT and USDC.

Built charts to compare accuracy, trends, and provider win rates over time.

#DataAnalytics #CryptoData #OpenSource #FinTech

[Bhaskar @0xPSB]

Built a Stablecoin Rate Tracker 🚀

Tracks USDT & USDC prices across CoinGecko, LiveCoinWatch, and CoinMarketCap, stores historical data in Google Sheets, and generates analytics dashboards using Python.

https://t.co/rUu8kySvg7

#NodeJS #Python #Crypto #Web3

[S3v3ru5 @S3v3ru5_]

I used property testing during a Solana AMM audit. This blog post walks through the seven properties and their reasoning, the sequence-based test structure, and a case where my own test had a bug that looked like a real finding: https://t.co/lgyDEI30WK

[0xaudron @0xaudron]

📢Currently, many firms and protocols are actively looking for DAML-focused auditors.

If you want to position yourself early in this niche, here’s a structured roadmap to become a strong DAML auditor and start getting booked faster:

1. Always start with the official docs:

- DAML official docs: https://t.co/M0fr8f24Ia
- Canton Network docs: https://t.co/fYlc3ydrdO

2. Refresh with writeups:

Great for understanding real-world attack surfaces and audit methodology.

- https://t.co/9LHhjvzko2
- https://t.co/BPHBf9s4Md
- https://t.co/lzzx22vIEd
- https://t.co/k0ItmD4nJ6

3. Read Real Audit Reports:

This is where most people level up.

- https://t.co/uQCET3sHiV
- https://t.co/Vgbsw5X6rA
- https://t.co/7Ga09sIRtc

Pro tip: Reproduce findings locally and try identifying additional edge cases the auditors missed

4. Learn the tools:

- daml-lint : Static analyzer
- daml-props : Property-based testing
- daml-verify : Formal verification

Kudos to @OpenZeppelin for creating tools.

The strongest auditor combines automated testing (including AI) alongside manual.

The DAML/Canton ecosystem is still early. If you consistently study docs, review audits, train your AI agent, and practice on live codebases, you’ll be ahead of most auditors entering the space.

📌Bookmark this thread if you're serious about DAML security.

[Emperor Osmo 🐂 🎯 @Flowslikeosmo]

Only 35 protocols cleared $2M in monthly revenue last month.

Here are the top 25 by revenue:

1. @tether $476.6m
2. @circle $191.1m
3. @HyperliquidX $48.3m
4. @Pumpfun $33.2m
5. @Polymarket $20.2m
6. @Grayscale $19.6m
7. @SkyEcosystem $15.1m
8. @AxiomExchange $11.3m
9. @Paxos $10.3m
10. @aave $9.4m
11. @phantom $6.9m
12. @edgeX_exchange $6.4m
13. @titanbuilderxyz $6.4m
14. @Courtyard_io $5.7m
15. @LidoFinance $4.6m
16. @chainlink $4.5m
17. @JupiterExchange $4.0m
18. @gmgnai $3.9m
19. @ether_fi $3.8m
20. @AerodromeFi $3.7m
21. @PancakeSwap $3.4m
22. @Uniswap $3.1m
23. @MetaMask $2.7m
24. @phygitals $2.7m
25. @Securitize $2.7m

The entire onchain economy runs on maybe 25 businesses.

[Dami-Defi @DamiDefi]

Top RWA Projects by Institutional Partnerships 2026

The biggest names in traditional finance are already inside these protocols:

$ONDO: Clearstream and 360X bulk tokenized securities listing via Deutsche Börse. BlackRock, Franklin Templeton, Fidelity, JPMorgan, Goldman Sachs, Mastercard, and PayPal all identified as compliance partners- 153 institutional relationships total

$CFG: Coinbase strategic investment and Preferred Tokenization Infrastructure designation. LayerZero multichain reach across 165+ ecosystems. Pharos L1 framework for tokenized US Treasuries at scale

$LINK: Fidelity International's first tokenized USD liquidity fund powered by Chainlink. DTCC selected Chainlink as data layer for tokenized collateral platform launching Q4 2026. Abu Dhabi ADI Foundation integrating full Chainlink stack into dirham-backed stablecoin

$MPL: Circle providing USDC loan capital from corporate treasury to Maple lending pools. Aave strategic partnership bridging institutional capital into DeFi's largest lending protocol

$XLM: Government of Bermuda moving national payment rails and government disbursements onto Stellar. Franklin Templeton expanding tokenized US Treasury fund for European institutions

$PENDLE: Official advisor to the Vietnamese government on building its international financial hub alongside BlackRock, Morgan Stanley, and Deutsche Bank

$MNTRA: Ondo Finance multi-chain USDY vault partnership boosting staked OM 30% to $180M. Google Cloud partnership for enterprise blockchain scalability

$AVAX: Animoca Brands direct investment targeting RWA and digital identity in Middle East and Asia

$POOL: Cicada Partners institutionalizing PayFi lending. Hex Trust licensed custody for yield-bearing Treasury products on Flare Network

$PRO: Milo integration creating the first crypto-native homebuying stack. Three of the largest single-family REITs now using Propy's agentic closing platform

Deutsche Börse. DTCC. Fidelity. BlackRock. JPMorgan. Goldman Sachs. The Vietnamese and Bermudian governments.

These are not crypto-native partnerships. These are the institutions that run the global financial system, and they are all building on RWA rails right now

[Zeus 🇬🇧 @ZeusRWA]

This week, 4 articles for you to take a look at if you have the time.

1) A beginners guide to every Asset Being tokenized.

2) RWA Vaults Explained - How Real World Yield Comes Onchain

3) Real World Assets and the Return of Structured Finance

4) PreStocks: Bringing Private Markets to the Masses

[LonelySloth @lonelysloth_sec]

"Coded" by Claude on Feb 1st.

"Audited" by Claude on Feb 2nd.

"Fixed" by Claude on Feb 3rd.

Deployed to mainnet (by Claude?) on March 19th.

Funded on April 24th.

Rekt (by Claude?) on April 28th.

Welcome to the future. 🤡🤡🤡🤡🤡🤡🤡

[Massimo @Rainmaker1973]

Mathematician Srinivasa Ramanujan discovered nearly 4,000 theorems and equations, original and revolutionary.

Some of his findings were so advanced that they remained unproven for decades after his death. He also foresaw several ideas that later emerged in modern mathematics and physics, including modular forms, string theory, and black hole cosmology.

[Curiosity @CuriosityonX]

While you slept last night, completely motionless in your bed, our galaxy shifted millions of kilometers through the cosmos.

You woke up in the same room, on the same planet, but unimaginably far from where you were the night before.

The Milky Way does not glide silently through the universe. It is racing through space at about 600 kilometers per second, carrying with it billions of stars, planets, and everything they contain on the journey. It is a good reminder that, even when life seems motionless, you are always in motion.

[Richard Chen @richardchen39]

Hot take: There isn’t lack of VC money in crypto. In fact I’d argue there’s still oversupply of capital.

What’s lacking is courage. Courage to build something that defines a new unproven category.

Right now I’m mostly seeing copycats chasing what’s already working. But no one cares about the 69th prediction market, 69th yield vault, 69th stablecoin neobank, etc.

Polymarket, Morpho, Redotpay, etc. won because they were early to new categories before they became obvious.

[Pavel Durov @durov]

WhatsApp’s “encryption” may be the biggest consumer fraud in history — deceiving billions of users. Despite its claims, it reads users’ messages and shares them with third parties. Telegram has never done this — and never will 🤝

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[S3v3ru5 @S3v3ru5_]

A partial liquidation can leave bad debt and drain a borrower's entire collateral, even at HF = 0.99, if LT * (1 + bonus) >= 1.

@D4r3_D3v1L_ checked 22 protocols using partial liquidation. 4 are vulnerable, 6 have on-chain constraint.

I wrote two posts breaking this down:

[Trail of Bits @trailofbits]

Physicists catch formula errors in seconds with a trick most DeFi developers have never heard of. You should learn dimension analysis. 🧵

[aditya @adxtyahq]

Rust Ownership.

[SAMMY @sammyXXIV]

superteam laughing at your submission before announcing frens and family as winners

[s1r1us (mohan) @S1r1u5_]

a hacker uses claude to find a bug -> reports it.

the triager uses claude to validate it -> confirmed.

the developer uses claude to verify, agrees -> patch shipped.

and all of them did thier job except it wasn't a vulnerability, there was no job, all of them consulted one oracle to validate the information and had shared psychosis together because their source of information is one in different layers.

now apply this everywhere, programming, governemnts, medicine, etc. different people asking the same oracle independently, and all grounding their reality to an LLM.

there is a good chance whole new startups are in this shared delusion spinning out of these llms, even their customers using llm to make their buying decision.

we once built religions out of information scarcity. now it seems we have information abundance but lacking comprehension, and we’re building new kind of religions?

[Bhaskar @0xPSB]

In the upcoming version, we’re integrating AI agents and Aadhaar-based verification for registered government authority wallet addresses to ensure authenticated oversight.
Because public money should come with public verification. 🇮🇳

[Bhaskar @0xPSB]

If ₹10 Crores are sanctioned for a public project, can you independently verify where every rupee went?

Today, most public spending is hidden behind reports and manual approvals that citizens cannot easily audit.

@BhushanHem58814
@geeky_kartikey @piyushJha__ @itsNikku876

[Bhaskar @0xPSB]

Every document generates a QR code for instant public verification — tamper-proof, transparent, and independently verifiable public records ⚡

#Monad #MonadBlitz #Blockchain #PublicGoods #Web3

cc:
@geeky_kartikey
@piyushJha__
@itsNikku876

[Bhaskar @0xPSB]

Check our project here: https://t.co/1nMDGX2q3v

#Monad #Web3ForIndia