Merulez

🛡️Security Researcher | Co-founder @ValvesSec

[Merulez @Merulez99]

Wrapped it in a valve 🫡

[Valves Security @ValvesSec]

Wrapped up the @Panoptic_xyz contest on @code4rena 🏆

We secured 1st place🥇 with 5 valid findings (1 High / 4 Medium), including 1 solo submission.

Really interesting system. Excited to see where Panoptic goes from here. Bright future ahead 🚀

[Merulez @Merulez99]

@LuboslavLubeno1 💪💪

[EZManager CL @EZManagerCL]

5/5
Read our @ValvesSec v1.5 audit report here:
https://t.co/ZIr4sZxQ5t

For more details on the changes:
https://t.co/lvKHUAxDU2

More v1.5 changes rolling out in the UI over the next few weeks! Check out the docs and contracts for a sneak peek 👀

[EZManager CL @EZManagerCL]

We’ve got some exciting things coming to EZManger in the next few weeks with this audit! @ValvesSec has been incredible throughout the process, and we’re happy to trust them to make EZManager as secure as possible.

[Merulez @Merulez99]

Someone just made the first donation to our Valves Security Training Hub on Giveth.

$18 from an anonymous contributor.

It may look small, but honestly this means a lot.

We spent countless hours building this because we wanted aspiring auditors to have a free place to train on real vulnerability patterns, not just random CTF puzzles.

Just a resource we wish we had when we started.

To whoever donated: thank you.

And to everyone supporting, sharing, testing, or learning from the hub - you are the reason we keep building this.

https://t.co/o1RYTDwSZf

[Merulez @Merulez99]

The goal was never to look like the biggest audit firm.

The goal is to be the team founders trust when they want honest, deep, no-BS security work before launch.

That’s what we’re building with Valves Security.

[Valves Security @ValvesSec]

We're on a mission to save millions (potentially billions) in exploits over the next 365 days.

Big names in the space already trust us with their protocol security. Your codebase deserves the same level of protection🛡️

Book an audit now: https://t.co/1iyOc1pRtp

[Valves Security @ValvesSec]

We're on a mission to save millions (potentially billions) in exploits over the next 365 days.

Big names in the space already trust us with their protocol security. Your codebase deserves the same level of protection🛡️

Book an audit now: https://t.co/1iyOc1pRtp

[Merulez @Merulez99]

@adeolRxxxx Bro audited the code and the fit at the same time 🤟

[Merulez @Merulez99]

Code4rena winding down does not make contest results worthless.
But it does change the lesson.
For years, contest placement was one of the cleanest public signals that someone could find bugs under pressure.
That still matters.
But in private audits, the harder skill is different:
- Can you explain the issue clearly enough that the team fixes it correctly the first time?
A leaderboard proves speed.
Client trust proves judgment.
You need both.

[Vesko210 @Vesko_210]

Not great for just one year... 😤
We should all do much better!

At @ValvesSec we’re stepping up. We are going to save millions in exploits over the next 365 days.

You should do the same.
Let’s secure this whole space together. 🔥

[Valves Security @ValvesSec]

Valves 🤝 EZManager (@EZManagerCL )

EZManager tracks every position lifecycle. From opening and rebalancing to capital changes, compounding, and collections.

We are going to ensure their contracts meet the highest security standards 🫡

[Vesko210 @Vesko_210]

Can’t focus?

Then force it.

Talk to yourself like a psycho: “DO IT. NOW! RIGHT FUCKING NOW!” 😤

That’s what helps me snap back when I get distracted.
Who else does this? 🔥

[SnuggleFi @SnuggleFi]

Hands-off farming is here! Agent Max automatically opens positions on MaxFi, making it even easier than before. Get ready for the MaxFi seed round next week! #DeFi #AutomatedTrading

[Merulez @Merulez99]

The first thing I check in any audit is not the complex math.

It is every place the code converts between two units.

Shares to assets.
Tokens to wei.
Seconds to blocks.
That boundary between “what the user thinks” and “what the contract stores” is where a lot of serious bugs hide.

[Merulez @Merulez99]

@bettercallsalva @Vesko_210

[Merulez @Merulez99]

@Vesko_210 It's like saying everyone who has a camera is a professional photographer 🤡

[Vesko210 @Vesko_210]

"You're saying auditors are better than Opus 4.7 and GPT 5.5?" 🤡

Bro… YES!!!

Auditors lead the AI, catch any misses, and actually stand behind the code that holds millions🔥

AI might be better in some casses, but if a non-auditor used it don't call it security...

[Plamen Tsanev @p_tsanev]

For the longest time node clients were gatekept and untouched by free AI auditing tools, but that is NO MORE! 🚀💫

Not only is your AI subscription auditing for you, but you can even choose which one! 🤯

More deterministic, more precise.

BETTER 🏆

"Plamen" V2 is live 😈🤖

[Pyro @0x3b33]

Contests are dead, cantina killed them

[Merulez @Merulez99]

The end of an era. Thank you for everything 🙏

[Code4rena @code4rena]

After careful consideration, we’ve made the decision to wind down @code4rena. This community has meant a great deal to everyone who has been part of building it, and sharing this news is not easy.

[Merulez @Merulez99]

@dork_fi Looks like security has been started, but not fully closed out. We’re often strongest as the second set of eyes that finishes the hard edge cases the first pass missed