We spent years finding vulnerabilities before attackers did. That was the easy part.
Teams already know what's broken. Nobody has the bandwidth to close it.
Today we raised $16.5M to make Cantina the security workforce for your security workforce. https://t.co/GWF2OICZsr
Arkis has partnered with @spearbit, the security research firm behind reviews for @Morpho, @coinbase and @liquid_col to create the first fully verifiable, tamper-proof digital provenance for institutional smart contracts.
@spearbit's sign-off is required before any release reaches production, and anyone can verify it independently. https://t.co/wedM8FCGkE
We're hiring for Lead web3 security researchers at Cantina, if you've done audits before send us your application and let's chat! π
https://t.co/zn5GbEg4VB
Weβre putting real engineering time into getting this right. If you want to follow progress or get early access, the waitlist is in the original post.
The AI security tool weβre building surfaced a high-severity vulnerability in Cosmosβ bug bounty, confirmed on HackerOne. Weβre designing it for signal > noise so organizations can prioritize real risk.
The waitlist is now open.
Mark your calendars, November 20th is Season 1 of Ultimate Security Games, live in Argentina.
Watch smart contracts get hacked in real time as three teams race to be first to steal the funds.
We're grateful to the sponsors who made this happen:
@monad@coinbase@immunefi@sigp_io@PashovAuditGrp
Get your tickets for the in-person event -- link in the reply.
Weβre hiring πͺ
Cantina is looking for Security Researchers to join our network and work on deeply technical smart contract and protocol audits.
The ideal candidate is:
β’Experienced in Solidity and EVM vulnerabilities
β’Curious, rigorous, and collaborative
Link below:
Full report isn't out yet, but it seems like the attacker can replace target address with its own. So check that your computer isn't affected. https://t.co/bkddZOPHBv
Npm package maintainer got pwned and now a bunch of packages he maintains (including debug-js) have malware in them. Check your deps immediately:
https://t.co/dQ8LmKf0bK
After 2.5 years of auditing at @OpenZeppelin I'll be joining @spearbit starting next week! Really appreciate all the opportunities I got at OZ and looking forward to the future π
@0xTendency Hey there,
DMs are open π€
Yeah I've been checking the social media much less recently, everything is going great! Thank you for checking in π
Recording of the Workshop on Security Research Tools
- Check the chain
- Decompile Contracts
- Build a Critical POC (Live)
Video:
https://t.co/mAp6YWTW9n
Slides:
https://t.co/zw4yEMN5M9
I normally find retweeting my own stuff pretty cringe, but it seems like lot's of you haven't seen these yet and I honestly think they're severely underrated :P
https://t.co/DjqwwSxaQ7