Mert Darendeli

Co-founder @Pre_sign_ · pre-sign verification for Solana multisigs · open source

[Mert Darendeli @MerttDarendeli]

Two Drift council members approved transactions they didn't fully understand. We built Presign so the next signer can: paste a Squads proposal, see who controls what after it executes, with evidence.

[Presign @Pre_sign_]

April 1, 2026: two pre-signed approvals handed Drift's admin to an outside address. Drift says users lost $295M. We replayed the exact bytes those signers signed through Presign → CRITICAL: "Admin moves outside the multisig." No wallet needed: https://t.co/MqBqzCAneE

[Mert Darendeli @MerttDarendeli]

@NBelferman Thanks, appreciated! Your "money only moves once the work is accepted" is the same instinct from the other side: be sure of what an approval does before it counts. Rooting for Worqen 🙌

[Mert Darendeli @MerttDarendeli]

🚀 Today, we had an insightful meeting with the @SuperteamTR team about our #Colosseum hackathon project, AI Web3 Security Agent & Defender.

We shared our vision, technical architecture, and how we are building an AI-powered security layer for the Solana ecosystem.

🎯 Our goal is to help users detect and avoid phishing, scam tokens, drainer contracts, and risky transactions before they sign.

The feedback, ideas, and discussion gave us valuable insights to take the project to the next level. 🙌

Building safer Web3, one transaction at a time. 🛡️

@Solana @SuperteamTR @Superteam @Colosseum

#Solana #BuildOnSolana #Web3 #CyberSecurity #AI #Blockchain #Colosseum

[Tarık Köseler @Tarkwiac]

The question a signer should be able to answer before approving: who controls what after this executes? Here's the Drift case, replayed byte for byte. No wallet needed.

[Mert Darendeli @MerttDarendeli]

@NBelferman Thanks, and sorry for the late reply! We've since renamed to Presign and narrowed it to Squads multisig proposals: who controls what after an approval executes. Good luck with Worqen at the Fair.

[Mert Darendeli @MerttDarendeli]

@AnarchyAlchemis Agreed for drainers. The case simulation misses is control: Drift's approval moved no tokens, it handed the admin role to an outside address. That's why we narrowed Presign to multisig proposals: who controls what after this executes?

[Presign @Pre_sign_]

Why Solana signatures expire in ~30s: blockhash validity is counted in slots, and slots got faster.

In Squads the proposal waits on chain; members land only their own votes.

A vote pre-signed with a durable nonce stays valid until used or cancelled. Drift's attackers had two.

[Presign @Pre_sign_]

Submitted. Presign: before you approve a Squads multisig proposal, see who controls what afterwards, with on-chain evidence. Replay the Drift approvals, no wallet needed: https://t.co/MqBqzCAV4c

[Mert Darendeli @MerttDarendeli]

@Pre_sign_ @colosseum @solana @SuperteamTR @multisig Tell us where we're wrong. Paste any public Squads proposal into https://t.co/nPc8UkEhKl. If the one-sentence brief misreads it, reply with the link: every miss becomes a test case. No wallet, no keys.

[Presign @Pre_sign_]

April 1, 2026: two pre-signed approvals handed Drift's admin to an outside address. Drift says users lost $295M. We replayed the exact bytes those signers signed through Presign → CRITICAL: "Admin moves outside the multisig." No wallet needed: https://t.co/MqBqzCAneE

[Mert Darendeli @MerttDarendeli]

@raopreetam_ Same pattern on Solana: Drift's admin was handed to an outside address by an approved multisig proposal, and nothing in the program was broken. The question a signer needs answered before approving is "who controls what after this executes?"

[Mert Darendeli @MerttDarendeli]

@BoundPay 🔥🔥

[Mert Darendeli @MerttDarendeli]

@BoundPay 🔥 🔥

[Mert Darendeli @MerttDarendeli]

@Pre_sign_ @solana @colosseum @SuperteamTR Be honest 👀 Have you ever clicked “Approve” on a crypto transaction without fully understanding what it would do?

That’s the problem we’re trying to solve with Presign.

Would you trust a tool that explains what you’re signing before you approve it?

[Presign @Pre_sign_]

Your wallet asks: "Approve?"

But do you know what you're actually approving?

Presign checks a crypto transaction before you sign it, and tells you in plain words what it will do.

Know exactly what you sign. 👁
https://t.co/Jmuc26e6GV

[Superteam Türkiye @SuperteamTR]

Superteam TR Colosseum CWF Demo Day https://t.co/DKcVB5i3ox

[Superteam Türkiye @SuperteamTR]

8 teams, one night. Malatya is on fire 🔥

[Enes Toraman @sudoenes]

today we wrapped up our Submission Night with 8 teams 🚢

we got our projects ready for the @colosseum

huge thanks to everyone who joined
and much love to @SuperteamTR for making this possible ❤️

HIGHER MALATYA🚀🫶

[Eren Bilgiç @Erenbblgc1]

Had a great sync with the team today to review our progress.
​🎯 Goal: Finish all development next week and launch a fully functional product.
​Almost at the finish line. More updates soon! ⚡
​ @SuperteamTR @Colosseum @ernrekaratas_ @sudoenes
​#Solana #Blockchain #Colosseum

[Büşra Erdem @BusraErd520]

🚀 Had a great meeting with the @SuperteamTR team about our #Colosseum hackathon project! The valuable feedback we received for our architecture focused on real-time efficiency and scalability will give a huge boost to our project. Thanks for all the insights!

@Solana @SuperteamTR @SuperteamEarn @Colosseum @sudoenes

[Enes Toraman @sudoenes]

16 builders on the 18th floor building for colosseum
malatya is cooking fr 🔥
another shipyard done w/ @SuperteamTR