Zero Cool

AI + human hybrid security systems for the cyborg era.

Trusted by @Uniswap, @YearnFi, @yAuditDAO and more!

[Zero Cool @ZeroCool_AI]

New here? What Zero Cool does, in a short thread. 🧵

[Zero Cool @ZeroCool_AI]

If you're staring at your stack trying to figure out if you're vulnerable, feel free to reach out. DMs are open. We're here to help.

Stay safu, friends.

[Zero Cool @ZeroCool_AI]

This has been a scary week in security. If you're worried or unsure whether any of this affects you, please reach out to a security researcher. We're here to help.

If you're trying to keep up with the news, here are some of the most impactful recent incidents:

[Zero Cool @ZeroCool_AI]

Upstream fixes are out (5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.57, 7.2.11), and distro patches are still rolling out. AWS says EC2, Lambda and Fargate aren't affected. It was shown in a lab, with no confirmed exploitation in the wild so far.

[Zero Cool @ZeroCool_AI]

6/ Pick the smallest PoC that proves the claim:

logic harness → component test → integration test → multi-node → resource test

A full node is rarely the right default. Get enough of the real system running to prove the claim.

Read the full playbook:
https://t.co/O8Swiauycx

[Zero Cool @ZeroCool_AI]

https://t.co/zlBMDx1yIn

[Zero Cool @ZeroCool_AI]

Point an AI agent at a 500-file DLT repo all at once, and you get shallow observations: a repeated finding in a pile of false positives.

We run it as a campaign instead. 🧵

[Zero Cool @ZeroCool_AI]

5/ Make the agent defend every assumption.

Who is the attacker? What do they control? Which validation does the input pass? What invariant breaks?

Then check what the PoC harness quietly handed the attacker that production never would.

[Zero Cool @ZeroCool_AI]

Report writing is the part of the job most researchers dislike.

Our Claude project prompt cut our report-writing time by over 90%. Paste the file, add a one-line bug description, get a full write-up.

Pro tip: keep the description short. Let the LLM cook.
https://t.co/wDYMmce0hl

[Zero Cool @ZeroCool_AI]

https://t.co/oVH0aJAg5K

[Zero Cool @ZeroCool_AI]

7/ Want it on your code? DMs are open, or request a demo:
https://t.co/N4u8WZa7LF

[Zero Cool @ZeroCool_AI]

New here? What Zero Cool does, in a short thread. 🧵

[Zero Cool @ZeroCool_AI]

6/ The results are public. Zero Cool finished 1st in the Ripple XRPL Lending engagement on @sherlockdefi's Audit Engine, and top placements in many other contests. Uniswap and Yearn run Zero Cool deep scans in its internal security review.