Tarık Köseler

Co-founder @Pre_sign_ · pre-sign verification for Solana multisigs · open source

[Tarık Köseler @Tarkwiac]

The question a signer should be able to answer before approving: who controls what after this executes? Here's the Drift case, replayed byte for byte. No wallet needed.

[Presign @Pre_sign_]

April 1, 2026: two pre-signed approvals handed Drift's admin to an outside address. Drift says users lost $295M. We replayed the exact bytes those signers signed through Presign → CRITICAL: "Admin moves outside the multisig." No wallet needed: https://t.co/MqBqzCAneE

[Presign @Pre_sign_]

@SolPlay_jonas As promised: we cast Squads v4 votes on devnet through Anza's programmatic signer, signed offline and relayed later (up to 92s, past blockhash expiry). Presign rated the envelope LOW and missed the vote. Fixed: it now decodes it and flags the vote CRITICAL before signing.

[Presign @Pre_sign_]

Shipped: Presign recognizes the programs replacing durable nonces.

A Squads vote signed offline through Anza's programmatic signer is flagged CRITICAL before signing and HIGH once landed. Blueshift Vector envelopes are recognized too.

Tested on devnet: https://t.co/3VhmcJPien

[Tarık Köseler @Tarkwiac]

The question a signer should be able to answer before approving: who controls what after this executes? Here's the Drift case, replayed byte for byte. No wallet needed.

[Presign @Pre_sign_]

April 1, 2026: two pre-signed approvals handed Drift's admin to an outside address. Drift says users lost $295M. We replayed the exact bytes those signers signed through Presign → CRITICAL: "Admin moves outside the multisig." No wallet needed: https://t.co/MqBqzCAneE

[Presign @Pre_sign_]

Why Solana signatures expire in ~30s: blockhash validity is counted in slots, and slots got faster.

In Squads the proposal waits on chain; members land only their own votes.

A vote pre-signed with a durable nonce stays valid until used or cancelled. Drift's attackers had two.

[Presign @Pre_sign_]

Those two pre-signed transactions, replayed byte for byte. No wallet needed: https://t.co/MqBqzCAneE

[Mert Darendeli @MerttDarendeli]

@Pre_sign_ @colosseum @solana @SuperteamTR @multisig Tell us where we're wrong. Paste any public Squads proposal into https://t.co/nPc8UkEhKl. If the one-sentence brief misreads it, reply with the link: every miss becomes a test case. No wallet, no keys.

[Presign @Pre_sign_]

Submitted. Presign: before you approve a Squads multisig proposal, see who controls what afterwards, with on-chain evidence. Replay the Drift approvals, no wallet needed: https://t.co/MqBqzCAV4c

[Tarık Köseler @Tarkwiac]

@Pre_sign_ @solana @colosseum @SuperteamTR To be precise about today's beta: you paste a Squads proposal or a transaction into https://t.co/tNjKDTHU4p and get a one-sentence brief with on-chain evidence. The browser extension that does this inside the wallet flow is still a developer preview.

[Tarık Köseler @Tarkwiac]

@Pre_sign_ @solana @colosseum @SuperteamTR Yes, this is who we are.💪🏻💪🏻💪🏻

[Presign @Pre_sign_]

Your wallet asks: "Approve?"

But do you know what you're actually approving?

Presign checks a crypto transaction before you sign it, and tells you in plain words what it will do.

Know exactly what you sign. 👁
https://t.co/Jmuc26e6GV

[Superteam Türkiye @SuperteamTR]

8 teams, one night. Malatya is on fire 🔥

[Tarık Köseler @Tarkwiac]

@Aycelllaaa @sudoenes @colosseum @SuperteamTR We were also there 🥳💪🏻💪🏻

[Enes Toraman @sudoenes]

today we wrapped up our Submission Night with 8 teams 🚢

we got our projects ready for the @colosseum

huge thanks to everyone who joined
and much love to @SuperteamTR for making this possible ❤️

HIGHER MALATYA🚀🫶

[Superteam Türkiye @SuperteamTR]

Malatya is not sleeping until the projects are shipped 🫡

See you at Submission Night #3 🌙

[Enes Toraman @sudoenes]

Submission Night #3 with @SuperteamTR 🌙

Colosseum deadline is close.
Malatya is staying up to get projects ship ready.

📍 İnönü University, Faculty of Engineering
🗓 Oct 3 · 21:30

[Tarık Köseler @Tarkwiac]

🚀 Today, we had an insightful meeting with the @SuperteamTR team about our #Colosseum hackathon project, AI Web3 Security Agent & Defender.

We shared our vision, technical architecture, and how we are building an AI-powered security layer for the Solana ecosystem.

🎯 Our goal is to help users detect and avoid phishing, scam tokens, drainer contracts, and risky transactions before they sign.

The feedback, ideas, and discussion gave us valuable insights to take the project to the next level. 🙌

Building safer Web3, one transaction at a time. 🛡️

@Solana @SuperteamTR @SuperteamEarn @Colosseum

#Solana #BuildOnSolana #Web3 #CyberSecurity #AI #Blockchain #Colosseum

[Tarık Köseler @Tarkwiac]

🚀 Today, we had an insightful meeting with the @SuperteamTR team about our #Colosseum hackathon project, AI Web3 Security Agent & Defender.

We shared our vision, technical architecture, and how we are building an AI-powered security layer for the Solana ecosystem.

🎯 Our goal is to help users detect and avoid phishing, scam tokens, drainer contracts, and risky transactions before they sign.

The feedback, ideas, and discussion gave us valuable insights to take the project to the next level. 🙌

Building safer Web3, one transaction at a time. 🛡️

@Solana @SuperteamTR @SuperteamEarn @Colosseum

#Solana #BuildOnSolana #Web3 #CyberSecurity #AI #Blockchain #Colosseum

[Tarık Köseler @Tarkwiac]

@MerttDarendeli @SuperteamTR @solana @superteam @colosseum 💪🏻💪🏻🔥🥳