Torgin (not your keys not your coins)

Auditor at @chain_security.
Opinions are my own.

[Torgin (not your keys not your coins) @MTorgin]

Lots of Alpha in my talk on MEV and block production from @EthereumZurich this weekend.

Check it out!
https://t.co/l8skmWepAo

[Torgin (not your keys not your coins) @MTorgin]

@EmilieRaffo Great at organizing BBQs tho 🔥 🥩

[Torgin (not your keys not your coins) @MTorgin]

Come join us. You'll learn a ton. Incredible gigabrains around here. 🧠🧠🧠

[ChainSecurity @chain_security]

1/8
We're hiring for technical and sales roles!
1. Blockchain Security Engineers (multiple)
2. Business Development Engineer

Here’s a bit about what working at ChainSecurity looks like.👇🧵

[Torgin (not your keys not your coins) @MTorgin]

Proud to be working with the best. I get to learn from these guys every day 💪💪

[ChainSecurity @chain_security]

The ETHSecurity badge distribution from @thedaofund is finished.
7 ChainSecurity auditors earned their place.

@hritzdorf co-uncovered issues that delayed Constantinople and shaped Istanbul & Berlin hard forks. 100+ protocols audited since 2017. Designed ChainSecurity's deployment validation framework. 13 academic papers on blockchain & cloud security.

@a_permenev co-authored Securify and VerX, two foundational smart contract analysis tools. 3rd & 4th place at Paradigm CTF (2021, 2022).

@k_besic introduced read-only reentrancy as a vulnerability class. Lead auditor for @enzymefinance. Co-led the disclosure that protected $100M+ across Curve, MakerDAO, Enzyme, Abracadabra, TribeDAO, Opyn.

@trooocher reported 100+ bugs in the Vyper compiler. Lead auditor for @CurveFinance. Helped push ChainSecurity to #5 on the Ethereum Execution Layer Bug Bounty leaderboard.

Dominic Brütsch is auditing at ChainSecurity since 2018, before DeFi existed. Lead auditor for @SkyEcosystem. Found a bug in Geth, earning a spot on the Ethereum Foundation Bug Bounty leaderboard.

@simon_perriard is ChainSecurity's ZK lead. Found a bug in the Solidity compiler. Disclosed critical soundness bugs in EY's Nightfall V3 circuits and served as lead auditor in top-tier DeFi projects.

@MatthiasEgli co-disclosed vulnerabilities in the Ethereum protocol itself and oversees all our audits as Managing Director.

TheDAO's mission is to make Ethereum safer. ETHSecurity is how they vet the researchers capable of contributing to that work. Congrats to everyone who made it on this epic list.

[Klara Kovačević @klarakova]

Here's another angle @MTorgin ✨

[Torgin (not your keys not your coins) @MTorgin]

@chain_security My vote's for @the_weso for sure

[ChainSecurity @chain_security]

We made people eat bugs at Devconnect Buenos Aires. Check the first comment to see who’s in the video & vote for the best reaction.

🏆 Winner gets a lifetime bug supply + a printed copy of the EF mandate.

PS: This is not an April's fools, we're completely serious.

[Torgin (not your keys not your coins) @MTorgin]

THE READING 📖📖📖 k

[Lukasz @stoczek_eth]

EF Mandate reading by @chain_security was AN EXPERIENCE

s/o to @EmilieRaffo and the team for putting this together!

this kind of stuff happen only at @EthCC or @EFDevcon

[Torgin (not your keys not your coins) @MTorgin]

Looking forward to it!

[Stake Capital Group @StakeCapital]

Ship Fast, Get Rekt.

Tomorrow at @EthCC, @JulienBouteloup joins the panel on what happens when speed beats security.

With @MTorgin (@chain_security), @PabloSabbatella (@opsek_io) @0xFlint_ (@Certora), and Debra Nita Ravindran (@YAPGlobalTeam).

14:15 - Hepburn Stage.

[Torgin (not your keys not your coins) @MTorgin]

The llamas have the best swap interface ❤️❤️

[0xngmi @0xngmi]

someone just swapped $50m for $36k on cowswap through aave's frontend, effectively losing 50m

if you try to make this swap on llamaswap the UI won't let you at all, buttons get locked

we've spent years building a price API with the highest coverage of defi tokens to avoid this

[Torgin (not your keys not your coins) @MTorgin]

My public address for TheDAO researcher application is torgin.eth

[Torgin (not your keys not your coins) @MTorgin]

Google Ads scams are on the rise again. Here's what to do if you see one:

[Klara Kovačević @klarakova]

9/13

What to do if you find a malicious ad:
- Report via https://t.co/R6CD4V4gEX
- Collect screenshots + landing URL
- Escalate through Google’s abuse form with your official domain via https://t.co/w6miW2jqDz
- Warn your community

[Torgin (not your keys not your coins) @MTorgin]

@EmilieRaffo @markgadala 😂

[Aave @aave]

Aave V4's third security audit has been published by @chain_security.

Review their findings below.

[Torgin (not your keys not your coins) @MTorgin]

DeFi composability is the future of Finance.
@CurveFinance and @frankencoinzchf, both audited by @chain_security 😎

[Michael Egorov @newmichwill]

🇨🇭Just discovered that the fastest crypto-native way of paying CHF bills is this:

- Buying ZCHF on @CurveFinance;
- Sending those to @mtpelerin;
- Paying CHF from there, conversion is 1:1!

Powered by our FX pools apparently

[Torgin (not your keys not your coins) @MTorgin]

Did not know this before!

[ChainSecurity @chain_security]

Inaccurate gas estimates on @ton_blockchain can lead to critical security issues. 🛡️

Today, our TON specialists share the knowledge gained from vulnerabilities uncovered during recent DeFi audits.

Dive into the technical details: https://t.co/7xup9Z6lab

[Torgin (not your keys not your coins) @MTorgin]

@EmilieRaffo Love the shirt @EmilieRaffo!

[Torgin (not your keys not your coins) @MTorgin]

Looks siiiick 👀👀👀

[Emilie | ChainSecurity @EmilieRaffo]

Ready for our Solana Breakpoint side-event with @keel_fi and @sanctumso 🏁

[Michael Egorov @newmichwill]

Briefly checked this one. Still not everything clear to me, and @yearnfi team told that the official post-mortem is still to be made only after they understand everything.

But two takeaways for buidlers:
- Be careful with unsafe math. It's unsafe unless you proved it is safe;
- Fuzz, fuzz, fuzz. Don't trust yourself and fuzz again.

[Torgin (not your keys not your coins) @MTorgin]

@EmilieRaffo @sarahxmary @chain_security Can confirm 😆

[ChainSecurity @chain_security]

🧵Hola Buenos Aires! ChainSecurity is in town for @EFDevcon & @partyactionppl 🇦🇷

From talks, panels, MC duties, and community events,
here’s your full chronological guide to where you can catch our team 👇