Offside Labs

🚀 Web3 Security pioneers | Expert security auditors & consultants | Guarded $300M+ in digital assets | @Paradigm_CTF 2023 Champion 🥇

[Offside Labs @Offside_Labs]

We've landed the first place at Paradigm CTF 🥇

Major props to our rockstar team at Offside Labs and big thanks to the @paradigm_ctf organizers for a fantastic event🔥

Let's continue to make the Web3 universe a safer place, together! 🚀🏆

[Paradigm CTF @paradigm_ctf]

Official results are out! Congratulations to @Offside_Labs, @kalos_security, and @ChainLight_io for securing their position in the Top 3, as well as everyone else who participated!

Additionally, special thanks (in alphabetical order) to @ChainLight_io, @cmichelio, @osec_io, @SupremacyHQ, and @zellic_io for guest authoring challenges this year. If you're interested in guest authoring a challenge for next year, please reach out.

[Offside Labs @Offside_Labs]

Dive into our detailed security assessment of SolvBTC Vault:
https://t.co/8KnEGrmeRR

[Offside Labs @Offside_Labs]

We’ve officially completed a security review for @SolvProtocol. Proud to support their work building Bitcoin liquidity infrastructure on Solana.🤝

[Offside Labs @Offside_Labs]

4️⃣ Every withdrawal requires a signature from an authorized off-chain service. The on-chain contract verifies this signature before releasing any assets. If the signature doesn't match or is invalid, the transaction is rejected – no exceptions.

[Jupiter Lend @jup_lend]

Jupiter Lend has undergone rigorous, independent security audits from top-tier firms to ensure the protocol’s safety, correctness, and resilience.

Audits Completed:
• @zenith256
• @Offside_Labs
• @MixBytes
• @osec_io

In progress:
• @CertoraInc

We've also open-sourced the entire codebase and will soon launch a @code4rena open audit contest.

[Mooncake @mooncake_fi]

1st audit report by the best @Offside_Labs
https://t.co/qMX6LkhYjF

[btcSOL (Moved to Zeus App) @btcsol_co]

Laced Up and One Step Closer to Game Time

btcSOL has been fully audited by @Offside_Labs, one of the leading Web3 security firms providing audits for many top protocols in Solana ecosystem, e.g., Jupiter, Meteora, etc.

This process ensures the staking infrastructure and user experience of btcSOL is secure, robust, smooth, and ready for every user. Stake with confidence.

Together, we’re unlocking the next level of staking on Solana.

Shoot $SOL / $mSOL Score $BTC in less than 1 day 🏀

[Offside Labs @Offside_Labs]

🚨GMX V1🚨 Yet another Ethereum reentrancy exploit!

Keeper decreases long → sends ETH → triggers re-entry to evil contract.

During re-entry:
• Vault's `isLeverageEnabled=true`
• Evil contract bypasses PositionManager
• Opens short WITHOUT updating global price

Attack:
1. Flash loan → mint GLP (6M USDC)
2. Open huge short (1.5M USDC, 100x)
3. Global size ↗️ / short price ✗ → PNL jump → AUM ↗️
4. Burn GLP → massive profit

Reentrancy strikes again!

[GMX 🫐 @GMX_IO]

The GLP pool of GMX V1 on Arbitrum has experienced an exploit. Approximately $40M in tokens has been transferred from the GLP pool to an unknown wallet.

Security has always been a core priority for GMX, with the GMX smart contracts undergoing numerous audits from top security specialists. So, in this hands-on-deck moment, all core contributors are investigating how the manipulation occurred, and what vulnerability may have enabled it.

Our security partners are also deeply involved, to ensure we gain a thorough understanding of the events that occurred and minimise any associated risks as quickly as possible. Our primary focus is on recovery and pinpointing the root cause of the issue.

Actions taken:

Trading on GMX V1, and the minting and redeeming of GLP, have been disabled on both Arbitrum and Avalanche to prevent any further attack vectors and protect users from additional negative impacts.

Scope of the vulnerability:

Please note that the exploit does not affect GMX V2, its markets, or liquidity pools, nor the GMX token itself.

Based on the available information, the vulnerability is limited to GMX V1 and its GLP pool.

As soon as we have more complete and validated information, a detailed incident report will follow.

[r3kapig @r3kapig]

We would like to once again thank our gold sponsors @Offside_Labs && @osec_io for their tremendous support, as well as Google Cloud for their infrastructure sponsorship. Their assistance made our event possible

[Offside Labs @Offside_Labs]

We are thrilled to be the gold sponsor of R3CTF!
The game is just 10 hours away!
Show off your hacking skills and compete with the world’s best hackers!👇
https://t.co/fxO30VhF6V

[r3kapig @r3kapig]

Offside Labs (https://t.co/HDXGEWYO1m) is a top-tier security team founded by legendary CTF players who have won Pwn2Own, DEFCON CTF, and other major competitions. They now leverage their expertise in Web3, securing billions in digital assets through professional auditing service

[Flash.Trade | Perps on Solana @FlashTrade]

We have successfully completed our third audit with @Offside_Labs

Flash Trade is not just the fastest and cheapest but also the safest exchange on Solana ⚡️

Audit report in the link below⬇️

[Offside Labs @Offside_Labs]

We're thrilled to see the relentless hard work and improvement from @JupiterExchange 🔥Keep rocking it for everyone!

[⚔️ SIONG @sssionggg]

The day after Christmas, we shipped one of our biggest upgrades on the Jupiter aggregator program. The project started around March with steady improvements and ended with a final rewrite on our Jupiter aggregator program. To developers and integrators on top of the program, they probably won’t notice anything, everything is backward compatible (other than the logging change, error codes remain the same). With these improvements and the rewrite, you can see the improvements yourself here:
*Dune only could return the last 240 days*

The graph shows the amount of CUs a Jupiter swap takes (most of it is being used by the underlying swap of any AMM, Meteora/Raydium/etc) over the course of the last year. We started steadily at around 180k CUs per swap and now we are around 100k CUs per swap. Do note that this is just an approximation since there can be many factors that are affecting the CUs being consumed per swap (single-hop vs dual hop, light CU AMM vs heavy CU AMM, etc).

Any on-chain “find_program_address” is bad for CU consumption, that was the first thing we tried to remove. Around late April, we stopped using the ATA program to create the temporary wSOL account. That removed one on-chain “find_program address” call. So, any swap that is with SOL as input or output, it uses less CUs.

Then, instead of using the nice macros conveniently provided by Anchor for event logging, we wrote our custom method that is backward compatible with the Anchor event logging but without the on-chain “find_program_address” call. This helped quite a lot since there could be multiple event calls per swap. This improvement was shipped around early August.

In late August, we went on to improve our Solana version from 1.16 to 1.18 and our Anchor version from the very old 0.27.0 to the latest 0.30.1. Version upgrade was always painful especially when it came to Solana and how our program could be tightly coupled with other programs. We had to upgrade other programs to be on the latest version and went on to upgrade ours. There were some major changes from Anchor 0.27.0 to the latest 0.30.1 but eventually it was worth while for the effort after looking at the CU usage improvement that came with it.

The final improvement was the one that took the longest time since it involved replacing Anchor from the main program with “solana-nostd-entrypoint” (https://t.co/5NEhXPOdla). This was an entire new rewrite with close to 100% backward compatibility (we dropped a few inactive integrations, no more on-chain transactions). We first had to have the “no-std-entry-point” framework audited (thanks to @cavemanloverboy and @Offside_Labs). Then after the rewrite of the program, we had the aggregator program audited as well. With this upgrade, CPI is a lot cheaper with a lot less CUs. This is important because our aggregator program is basically just a program that CPIs into different programs by our AMM partners. This was shipped the day after Christmas.

Along the way, there were some minor improvements here and there. With the new “solana-nostd-entrypoint” upgrade, it also sets us up for more improvements down the road as well. All in all, CU improvement is important to help our users to land transactions faster and cheaper. Since the Jupiter aggregator program is also used by other products in the Jupiverse (LO/DCA/VA/Perps/Ape.Pro/etc), all these products are also benefited by these improvements as well.

Obviously, this is a team effort. Thanks @PierreArowana and @beeceeman!

[Offside Labs @Offside_Labs]

🎄✨ It’s Finally Here! ✨🎄

After a (very) long year, we’re excited to share… our website is live! 🎉

Take a look—it’s a little piece of us, made with love. 👉 https://t.co/xfqQRQGvk6

Merry Christmas & Happy Holidays!🎅🎁

[dr cavey phd ∿ @cavemanloverboy]

ecstatic to announce that solana-nostd-entrypoint has been audited by @Offside_Labs, generously funded by @JupiterExchange

hyperefficient DeFi is coming to Solana...

[GooseFX @GooseFX1]

Your security is our priority, and that's why our GAMMA pools are now fully audited by @Offside_Labs 🔥

We have been able to protect our smart contract thanks to their insights into our GAMMA pools.

A short 🧵