0xbepresent

Smart contract bug hunter | Found +200 H/M | 90+ audits | I like to observe things

[0xbepresent @0xbepresent]

Stablecoins are becoming a significant absorber of US debt. They mint stable, buy US debt with your dollars, pocket the 4-5 % yield, give you zero, and in the process become a huge, price-insensitive buyer of US debt pushing bill yields down and the dollar up. Bitcoin was created by US gov to save his economy.

[0xbepresent @0xbepresent]

An incredible trip, thank you for everything 🫡 @code4rena https://t.co/Gwkyw1ayec

[Code4rena @code4rena]

After careful consideration, we’ve made the decision to wind down @code4rena. This community has meant a great deal to everyone who has been part of building it, and sharing this news is not easy.

[LonelySloth @lonelysloth_sec]

"Coded" by Claude on Feb 1st.

"Audited" by Claude on Feb 2nd.

"Fixed" by Claude on Feb 3rd.

Deployed to mainnet (by Claude?) on March 19th.

Funded on April 24th.

Rekt (by Claude?) on April 28th.

Welcome to the future. 🤡🤡🤡🤡🤡🤡🤡

[0xbepresent @0xbepresent]

The number of truly decentralized protocols can be counted on one hand. In fact, devs of these protocols need opsec in case any 3-letter agency is interested. Regulations are coming—create the problem, offer the solution. https://t.co/8hEtvilGdD

[Arbitrum @arbitrum]

The Arbitrum Security Council has taken emergency action to freeze the 30,766 ETH being held in the address on Arbitrum One that is connected to the KelpDAO exploit. The Security Council acted with input from law enforcement as to the exploiter’s identity, and, at all times, weighed its commitment to the security and integrity of the Arbitrum community without impacting any Arbitrum users or applications.

After significant technical diligence and deliberation, the Security Council identified and executed a technical approach to move funds to safety without affecting any other chain state or Arbitrum users.

As of April 20 11:26pm ET the funds have been successfully transferred to an intermediary frozen wallet. They are no longer accessible to the address that originally held the funds, and can only be moved by further action by Arbitrum governance, which will be coordinated with relevant parties.

[WhiteHatMage @WhiteHatMage]

Never delegate critical thinking.

[Michael Egorov @newmichwill]

When a single private key can drain the protocol by design - it's probably not DeFi, it's CeDeFi. And that's ok, but it requires DevOps being very well organized.

I prefer building real DeFi

[Danish Hussain @astrodanish]

Your brain is under attack by a trillion dollar adversary intent on destroying it.

This is your David vs Goliath.

Resist the algorithm.

[doomer @doomerfied]

[ DOOMER ]

AFTER IRAN, THE US WILL SHIFT ITS FOCUS TO REGIME CHANGE IN THE ETHEREUM FOUNDATION, “WE’VE HAD ENOUGH OF THESE COMMUNISTS,” SAYS DONALD TRUMP: TRUTH SOCIAL

[0xbepresent @0xbepresent]

Thinking more about that deterministic tools + AI bridge...

If AI can reach high confidence on bugs by cross-verifying with tools like CodeQL (querying code paths precisely, no hallucinations), why not speed up judging in audit contests?

Attack vector hypothesis → AI runs CodeQL queries + maybe generates/runs PoC tests → flags/validates issues faster. Human judges focus on edge cases & severity debates instead of initial triage.

Could make contests way more efficient (fewer duplicates, quicker payouts). Built a tiny prototype with Ouroborus and it already feels promising.

https://t.co/atBw86mZ3r

[0xbepresent @0xbepresent]

Been vibecoding lately and it's honestly changing how I see smart contract audit.

What if we built better bridges between deterministic tools (like Slither) and AI? Created a quick CLI called Ouroborus that pipes Slither findings → AI verification (using CodeQL to double-check issues in the code). Super basic, but context engineering + focused inputs = way less hallucination and sharper focus.

Built the whole thing in ~2 days and cool... hacking just got even more interesting and fun.

https://t.co/1UwgU7wAIi

[0xbepresent @0xbepresent]

Been vibecoding lately and it's honestly changing how I see smart contract audit.

What if we built better bridges between deterministic tools (like Slither) and AI? Created a quick CLI called Ouroborus that pipes Slither findings → AI verification (using CodeQL to double-check issues in the code). Super basic, but context engineering + focused inputs = way less hallucination and sharper focus.

Built the whole thing in ~2 days and cool... hacking just got even more interesting and fun.

https://t.co/1UwgU7wAIi

[0xbepresent @0xbepresent]

@muellerberndt @Reddit Your theory involves NPCs right?

[0xbepresent @0xbepresent]

"There will even be people who continue to defend the system; most aren't ready to be unplugged." https://t.co/aLG1dx2YCG

[Bernhard Mueller @muellerberndt]

The Theory-of-Everything is finally here.

Exit the matrix today.

[Patrik Grobshäuser @ITSecurityguard]

My ClawdBot has HackerOne access now and he sends me money from his adventures. 🤑🤑🤑

[Pashov Audit Group @PashovAuditGrp]

Being a hacker is a lifestyle. Everything can get hacked. Hack it first. Disclose the vulnerability safely and ethically. Move on to the next.

Hack things for a living, it's the sh*t🫡

[0xbepresent @0xbepresent]

@gammichan Where is the other "imploding" part?

[sysls @systematicls]

https://t.co/FQe5bCBqW1

[Bernhard Mueller @muellerberndt]

The best way to audit is to build a "mental interpreter" of the entire codebase so you can run it in your head. It can take weeks. But then the bugs start falling out automatically. You might wake up in the morning with a new bug in mind.

[artsch00lreject @artsch00lreject]

now tell them jeffrey epstein is satoshi nakamoto