Kiki

Independent Security Researcher | prev @GuardianAudits |

$3B+ secured • 50+ audits • 15+ bounties

[Kiki @Kiki_developer]

There are tier 1 auditing firms, then there are tier 1 mediation teams. Thank you @immunefi 🙏

[Cyba Blockchain Security @CybaSecurity]

https://t.co/CAPoFWUIY7

[Kiki @Kiki_developer]

👀

[Cyba Blockchain Security @CybaSecurity]

Announcement of an announcement:

We'll soon, quite soon, publish our most comprehensive open-source contribution to the @Stacks ecosystem yet.

Stay tuned!

[Kiki @Kiki_developer]

@dannygfromnyc @windhustler Canes undefeated

[Dacian @DevDacian]

Happy to announce I've accepted an executive position @cyfrin, formally joining the leadership team as Head of Security Research.

We're working harder than ever to keep our clients safe while scaling our private audit business to handle epic demand.

🙏 Blessed 🙏

[Kiki @Kiki_developer]

@devtooligan Congrats! Been great seeing all the success come your way!

[Kiki @Kiki_developer]

@0xcuriousapple I’m sure it wasn’t an easy choice, the guys at Guardians are truly some of the best to work with

Best of luck in what’s next I’m excited to see what you build!

[Kiki @Kiki_developer]

@abarbatei Was just looking for something like this. Looking forward to giving it a read!

[WhiteHatMage @WhiteHatMage]

You can't mark a valid High/Critical issue as a duplicate of an "invalid" bug that wasn't fixed.

That's a scam.

[Cyba Blockchain Security @CybaSecurity]

1/2

We recently completed a security review for @GraniteBTC, a Bitcoin liquidity protocol built on @Stacks enabling users to borrow stablecoins against Bitcoin collateral through sBTC, developed by @trustmachinesco.

This engagement focused on reviewing fixes, hardening efforts, and protocol enhancements across the protocol’s lending system, covering changes across borrowing, liquidation flows, staking, governance, LP incentives, oracle integrations, withdrawal logic and related core functionality.

Granite combines Bitcoin-backed liquidity access with design choices such as isolated collateral, soft liquidations, and Bitcoin-native infrastructure.

Happy to support teams building BTCfi infrastructure. Always a pleasure working with security-oriented teams pushing the ecosystem forward.

[Kiki @Kiki_developer]

Truly trailblazers. C4 created a path where there wasn’t one and a global community for so many of us to actually make a career in this space.

Change is apart of life but It’s sad nonetheless to see C4 come to an end.

Thank you C4 🙏

[Code4rena @code4rena]

An important update from the C4 team. 🧵

[Raiders @__Raiders]

Two of my projects were selected for the @thedaofund Ethereum Security QF Round on @Giveth.

The round has a 500 ETH matching pool (roughly $1M+) backing around 100 Ethereum and L2 security projects.

It uses Quadratic Funding, which means $1 from 100 donors unlocks far more from the matching pool than $100 from 1 donor.

Voting is open until May 14. Here's what they do 🧵

[Findlay @0xboo]

2/ The Ethereum Security Subsidy Program is proud to be launching with access to 20+ of the leading audit providers active in the Ethereum ecosystem:
@AdevarLabs, @bailsecurity, @BlockSecTeam, @Certora, @chain_security, @cyfrin, @dedaub, @GuardianAudits, @hackenclub, @HackenProof, @Hashlock_, @hexens, @immunefi, @LeastAuthority, @lethalspoons, @NethermindSec, @Quantstamp, @QuillAudits_AI, @rv_inc, @SecurityOak, @sherlockdefi, @spearbit, @statemindio, @zellic_io, and @zokyo_io.

These top-tier security providers make the program possible through their commitment to support Ethereum mainnet.

[ABA @abarbatei]

1/2

One of the more detail oriented articles we've published, but the value it brings is significant.

As an auditor, it's interesting to see how one account can map to different addresses on Stacks, depending on whether you're on testnet or mainnet.

https://t.co/uE6dK48iyw

[hexens @hexens]

Cross-chain bridges remain critical infrastructure, proof verification is the core of their security model.

New disclosure on our research page: a vulnerability in the Polygon Plasma bridge that allowed transaction proofs to be forged.

At the time of discovery, $800M in POL was at risk, exploitable in a single transaction with no prerequisites.

The research covers how the proof verification breaks, how the exploit was built, and what it means for bridge security.

Full technical deep-dive: https://t.co/Zigi7VwNes

[ABA @abarbatei]

Solid work by @silverologist, @czm_alex and myself.
Always good to work on systems at this level with @AccountableData.

https://t.co/aEO5qHxJL2

[Kiki @Kiki_developer]

@CybaSecurity @abarbatei Looking forward to reading the report! 👀

[Zero Cool @ZeroCool_AI]

https://t.co/jWpjf13SO1

[Kiki @Kiki_developer]

GregoAi is getting better and better

[GregoAI @therealgregoAI]

https://t.co/hQyLivtcAn

[Kiki @Kiki_developer]

@0xSorryNotSorry Woohoo 🎉

[Kiki @Kiki_developer]

@abarbatei Gold indeed! Thanks for sharing these