Shreyas

Security Researcher at @CredShields | Bug Bounty Hunter | Audits : Solidity & Rust | Pentester

[Shreyas @SPY8OY]

@0xRajkumar @p_tsanev @Certora Congratulations bro 👊

[Joran Honig @joranhonig]

I think something dangerous is happening to audits.

It seems like there are fewer audits and audit prices have gone down.

Cheaper audits should be good right?

Not necessarily

🧵👇

[Shreyas @SPY8OY]

@only01Essential @cantinasecurity Congratulations mate 🥳

[Shreyas @SPY8OY]

@0xWeb3boy congratulations Ser !

[Shreyas @SPY8OY]

@4gontuk Congratulations man 🥂

[Rayaa 🚩| Rust and Solidity Smart Contract Auditor @OxRayaa]

1/ 🚨 DamlForest just dropped — The CryptoZombies for DAML Smart Contract Security 🌲🔐

Hunt real vulnerabilities, fix DAML contracts in-browser, and grow your tree from Seedling → Ancient Tree.

12 Trails
50+ hands-on challenges
6 Growth Stages

Live Demo: https://t.co/yoW7RhRb7G
Open Source: https://t.co/EjkazttX1S

#DAML #Canton #SmartContracts #BlockchainSecurity #Web3Education

[100proof.org @1_00_proof]

A two-part story (in images).

[Prasad Kuri @park17311]

🔍 What is DAML & Canton?

Most blockchains focus on decentralization.
DAML + Canton focus on something harder:

Multi-party trust with real privacy.

A quick overview for developers, auditors & security researchers 👇

[Shreyas @SPY8OY]

@0xvivekd @immunefi Bro is on 🔥

[Shreyas @SPY8OY]

@HackenProof @m4rio_eth 🔥🔥🥂

[Sock @sockdrawermoney]

Or that contests remain the most effective form of audit when it comes to finding more bugs faster per dollar than any other method.

@zellic_io should open source the @code4rena platform and operational manual so projects or foundations or VCs or @ethereum or @_SEAL_Org can run these as I always felt they were: public goods. cc @samczsun

[Shreyas @SPY8OY]

Great work 🫡

[Mitchell Amador @MitchellAmador]

Big news from Immunefi: we just shipped Proof of Duplicate, and it's *the* feature I've been wanting to see for a long time.

For years, one of the most frustrating experiences a whitehat could have was submitting a report, putting in the hours of research, the careful write-up, the working PoC… and getting back a one-line "duplicate, closing."

No justification and no transparency. No way to push back. That era is over.

Starting now, when a submission is closed as a duplicate, it points to the original report. The researcher can read the original. They can compare the reports for themselves... and if they believe the call was wrong, they get a formal dispute button.

Verdict upheld means the report stays closed. If the verdict is overturned, the report gets reopened and goes back through triage like nothing happened, including reward eligibility.

This matters beyond the feature itself. The whitehat community is the immune system of crypto. Every protocol secured, every exploit prevented, every billion in TVL that didn't get drained.

For this immune system to keep working, things have to keep improving for whitehats. Proof of Duplicate is just one piece. There will be more.

SR Summer 2026 is coming.

[Mitchell Amador @MitchellAmador]

Big news from Immunefi: we just shipped Proof of Duplicate, and it's *the* feature I've been wanting to see for a long time.

For years, one of the most frustrating experiences a whitehat could have was submitting a report, putting in the hours of research, the careful write-up, the working PoC… and getting back a one-line "duplicate, closing."

No justification and no transparency. No way to push back. That era is over.

Starting now, when a submission is closed as a duplicate, it points to the original report. The researcher can read the original. They can compare the reports for themselves... and if they believe the call was wrong, they get a formal dispute button.

Verdict upheld means the report stays closed. If the verdict is overturned, the report gets reopened and goes back through triage like nothing happened, including reward eligibility.

This matters beyond the feature itself. The whitehat community is the immune system of crypto. Every protocol secured, every exploit prevented, every billion in TVL that didn't get drained.

For this immune system to keep working, things have to keep improving for whitehats. Proof of Duplicate is just one piece. There will be more.

SR Summer 2026 is coming.

[International Cyber Digest @IntCyberDigest]

POV: you are downloading npm packages in 2026

[Shreyas @SPY8OY]

This was not expected 😭
Code4rena is the place where every security researchers started their journey. C4 will always hold a special place in everyone’s heart 🙌

[Code4rena @code4rena]

After careful consideration, we’ve made the decision to wind down @code4rena. This community has meant a great deal to everyone who has been part of building it, and sharing this news is not easy.

[Shreyas @SPY8OY]

@chrisdior777 Here 🙋‍♂️ we have already started doing DAML audits

[Shreyas @SPY8OY]

@tpiliposian 🔥🔥

[Shreyas @SPY8OY]

@0xcastle_chain 🫡

[Shreyas @SPY8OY]

@adrianhetman @unsafe_call @immunefi All the best ser !!

[Shreyas @SPY8OY]

@0x158_ @0xGreed_ @HackenProof Congratulations brother 🥳