Alexander Shchepetov

Independent smart contract security researcher & on-chain engineer at @azuroprotocol

[Alexander Shchepetov @apetov_]

🟢 Open to senior roles
about me: https://t.co/i0Y0EOIrdQ

[Alexander Shchepetov @apetov_]

Another piece of good news in the last two days. Thank you, @immunefi !

https://t.co/8yYOYs24EV

[Alexander Shchepetov @apetov_]

I just found a confirmed bug on @immunefi #immunefitribe https://t.co/FkrdEOP84D

[Alexander Shchepetov @apetov_]

A duplicate is OOS in practice: Immunefi and the project already know about the bug and they've already received a report on it. But this isn't visible anywhere, so the bug hunter submits the same bug blind, and it gets rejected as a duplicate. The hunter already loses time writing and submitting that report.

Why should it also count against their accuracy stats? @immunefi

[Alexander Shchepetov @apetov_]

I just found a confirmed bug on @immunefi #immunefitribe https://t.co/8yYOYs24EV

[Alexander Shchepetov @apetov_]

@newmichwill This was always necessary to do when developing protocols

[Alexander Shchepetov @apetov_]

@Lady_Sin_Filtro That shot of Poseidon rising out of the water looks more convincing than a lot of modern CGI

[Alexander Shchepetov @apetov_]

noooo

[Alexander Shchepetov @apetov_]

Just submitted my first bug report on Immunefi.
I'm curious to see if anything comes out of it.

[Alexander Shchepetov @apetov_]

@gurwinder_sui Hard pass on being free render farm for puking-cat videos

[Alexander Shchepetov @apetov_]

@maraoz Your take actually implies the opposite
DeFi is safer than ever now, since every possible vuln has already been found by these wonder AI agents and either exploited or reported

[Hardhat @HardhatHQ]

Hardhat 3.6.0 is out!

The packages @nomicfoundation/hardhat-viem-assertions, @nomicfoundation/hardhat-keystore, and @nomicfoundation/hardhat-typechain were updated as well.

Some of the changes include:

- An AGENTS.md/CLAUDE.md file and skills are included in the sample projects when using hardhat --init. To install them in an existing project, take a look at https://t.co/eyggc2CVGE
- Introduced two new Solidity hooks for plugins, and deprecated of several existing ones. See the release notes for more details.
- The hardhat flatten task now detects circular dependencies and fails accordingly.
- Several improvements and bug fixes in the hardhat-viem-assertions plugin.
- Environment variables now take precedence over the keystore.

You can check the release notes here
https://t.co/nX0RYIIPR0

https://t.co/somDWlZboG

https://t.co/3VDWiWzHZA

https://t.co/tlXtoTAQiJ

[Alexander Shchepetov @apetov_]

@philtsa I'd be a proud user of your project, or at least develop smart contracts for it

[Alexander Shchepetov @apetov_]

@solsweb3 @LYDart_Mclo Wow, you've taken me back to 2021!

[Alexander Shchepetov @apetov_]

@shahh This chart makes no sense unless it's backed by real growth.

[Alexander Shchepetov @apetov_]

When someone tells you how an enthusiast vibe-coded an app in 2 days and now it's worth $5M, ask them: would they buy it themselves for even $500K?

[Alexander Shchepetov @apetov_]

@0xDestinyae @_SEAL_Org @aandooor @zygbaeth The other side of a web3 protocol: almost daily we get messages falsely claiming a vulnerability, extorting money, pitching half-baked ideas, or pushing sketchy links. Every time you engage and get drawn in, you put real security at risk.

[Alexander Shchepetov @apetov_]

@PatrickAlphaC Don't run with scissors