CODESPECT

Every Attack Surface. One Team.
Smart contract audits · Web2 pentesting · AI agent hacking · Red teaming

[CODESPECT @CODESPECT]

As promised. Today, we have a big announcement

We're launching registration for SpecSiege.

It's our double-check format for audits. First, an internal private audit went through the code with a full manual review. Then the community review follows. 10 days of open review on a fairly large codebase, we know, but the chance to work on an ERC-6909 European bond platform, an institutional project, doesn't come around every day.
- €15K total pot (€13K community pool, €2K fixed for the lead researcher).
- If only Lows are discovered, €5K is distributed instead.

Simply find bugs after us and get rewarded. We value your participation. We're not here just to squeeze you.

Link below ⬇️

[Superteam Malaysia @SuperteamMY]

None of this happens without our partners 🙏

@AppWorks @jelawangcapital @sns @magicblock @KiraPayOfficial @SolanaFndn @Superscrypt @cradlefund @jito_sol @DWFLabs @CyreneAI @ElfaAI @solflare @RockawayX @MonkeDAO @birdeye_so @trepa_io @Kiln_finance @Arcium @solayer_labs @playsolana @solanaidentity @CODESPECT @AWSstartups @KASTxyz @solanaspaces @blockdev_id @impossible_ @FoundationVent @oro @ETHKL1

[CODESPECT @CODESPECT]

We just replied to the rest of the applicants for our upcoming SpecSiege.

The accepted cohort is starting tomorrow, the second pass over the ERC6909 Bond Platform.

[Talfao @talfao1]

Next week I will be attending @ethconf.

If you want to have a chat about how to move your protocol security to the next level, let's chat.

[CODESPECT @CODESPECT]

The 50 accepted participants for SpecSiege have just been emailed. A strong applicant pool, and an honour to have this group on board.

If you didn't get that email today, hold tight. We had more strong candidates than slots, and we're holding the "not this time" emails until the 50 confirms, that way anyone who'd be next in line moves up from a real waitlist instead of getting a rejection we'd want to walk back. Either way, you'll hear from us.

Thank you for applying.

[CODESPECT @CODESPECT]

The 50 accepted participants for SpecSiege have just been emailed. A strong applicant pool, and an honour to have this group on board.

If you didn't get that email today, hold tight. We had more strong candidates than slots, and we're holding the "not this time" emails until the 50 confirms, that way anyone who'd be next in line moves up from a real waitlist instead of getting a rejection we'd want to walk back. Either way, you'll hear from us.

Thank you for applying.

[CODESPECT @CODESPECT]

Registrations for SpecSiege are now closed.

Thank you to everyone who applied. We'll review every profile carefully and pick the 50 researchers who'll do the second pass and compete for the community pot.

We'll email every applicant the decision by Mon 1 June, 3 PM UTC. Please check your inbox by the end of Monday.

[CODESPECT @CODESPECT]

Registrations for SpecSiege close in 1 hour.

If you haven't applied yet and want a shot at the ERC-6909 bond platform, this is the moment.

Looking forward to seeing who's in.

https://t.co/MWXR1LAU6w

[CODESPECT @CODESPECT]

Less than 24 hours left to register for SpecSiege.

50 spots, ERC-6909 bond platform on EBSI, €13K community pot; findings ship in a real institutional report with your handle on them.

Closes Sun 31 May, 3 PM UTC.

🔗https://t.co/MWXR1LBrW4

[CODESPECT @CODESPECT]

@zerion @BundieDefi @0xYudhishthra GG

[CODESPECT @CODESPECT]

SpecSiege of the ERC6909 bond platform is going to be hard. We know.

So we're shipping a detailed README with the invariants the protocol must hold and the system's global properties. The project's own docs are extensive too, worth reading. None of it is required; all of it should sharpen the audit.

The hook: a reasonable way to break a documented invariant is a strong candidate for Medium, which unlocks the whole pool.

[CODESPECT @CODESPECT]

@0xmishoko Appreciate that, it is our key pillar.

[CODESPECT @CODESPECT]

One thing about SpecSiege worth knowing before registration closes on Sunday.

Even if nobody finds a Critical, High or Medium, we don't ghost the cohort. €5K is split among everyone who reports a valid Low. You don't do real work and walk away with nothing.

That's the floor we built in on purpose.

[CODESPECT @CODESPECT]

🔗https://t.co/BzPQWPbbBc

[CODESPECT @CODESPECT]

Our clients, Hyperwave, launched a compliant vault infrastructure for family offices and registered funds.

Great product, amazing company.

Custom on/off-chain components reviewed by CODESPECT.

[Hyperwave @Hyperwavefi]

Hyperwave Prime is live.

Private, permissioned, compliance-first vault infrastructure for family offices and registered funds.

Launch a branded on-chain yield strategy without writing a single line of code.

Apply: https://t.co/z2A50da90g

[CODESPECT @CODESPECT]

🔗https://t.co/MWXR1LAU6w

[CODESPECT @CODESPECT]

How judging works on SpecSiege for our upcoming contest.

@0xSynthrax leads, with the full CODESPECT team who audited the project behind him on verification (If needed). AI handles initial triage, humans make the call. Every submission gets a verdict, valid or invalid, with the reasoning. No silent rejections.

Submit findings as soon as you confirm them. POCs are appreciated. A lot of the issues we expect will come down to the lifecycle of objects and invariant breaks.

It will be challenging. But a second pass almost always surfaces something. Fresh minds catch what the first team stopped seeing.

[CODESPECT @CODESPECT]

A few more and we are reaching 100 registrations!

[CODESPECT @CODESPECT]

As promised. Today, we have a big announcement

We're launching registration for SpecSiege.

It's our double-check format for audits. First, an internal private audit went through the code with a full manual review. Then the community review follows. 10 days of open review on a fairly large codebase, we know, but the chance to work on an ERC-6909 European bond platform, an institutional project, doesn't come around every day.
- €15K total pot (€13K community pool, €2K fixed for the lead researcher).
- If only Lows are discovered, €5K is distributed instead.

Simply find bugs after us and get rewarded. We value your participation. We're not here just to squeeze you.

Link below ⬇️

[CODESPECT @CODESPECT]

🔗https://t.co/BzPQWPbbBc

END OF TREAD

[CODESPECT @CODESPECT]

Registrations for SpecSiege, the ERC-6909 bond platform, are open until 31 May, 3 PM UTC.

The response has gone well past what we expected, so today we set the cap: 50 spots, then we lock it.

Once registration closes, we'll select the 50, and everyone who applied will get the decision by email.

If you've been weighing it, this is the week to apply.

[CODESPECT @CODESPECT]

Registrations for SpecSiege, the ERC-6909 Bond Platform audit contest, are open until the end of the month (31 May 2026).

Then we'll close registration and choose the group of researchers. We're already amazed by the number of applications, so we'll definitely make the group bigger than we originally planned.

Great to see the community this thrilled. We're still polishing the rules to make the experience as smooth as possible for security researchers. That said, the competition will still be a challenge: the project goes through a full audit with CODESPECT first.

We're open to suggestions, so feel free to message us on X or reach out to @talfao1 directly.

We're really looking forward to kicking this off well!