Shufan Wang

Graduate of SJTU, EPFL | Engineer @chain_security cracking solidity and cairo | Opinions are my own

[ChainSecurity @chain_security]

⚠️ It has just been decided to delay the Glamsterdam hard fork on the Hoodi testnet because of security impacts we identified in this blog post: https://t.co/A6rIgIP8zV

We already found 13 real-world examples and are in responsible disclosure with the affected projects.
Please check your contracts as soon as possible, as the EF is determining how many contracts are impacted in which way.

Feel free to reach out to us with questions via [email protected].

[ChainSecurity @chain_security]

1/8
We're hiring for technical and sales roles!
1. Blockchain Security Engineers (multiple)
2. Business Development Engineer

Here’s a bit about what working at ChainSecurity looks like.👇🧵

[ChainSecurity @chain_security]

The ETHSecurity badge distribution from @thedaofund is finished.
7 ChainSecurity auditors earned their place.

@hritzdorf co-uncovered issues that delayed Constantinople and shaped Istanbul & Berlin hard forks. 100+ protocols audited since 2017. Designed ChainSecurity's deployment validation framework. 13 academic papers on blockchain & cloud security.

@a_permenev co-authored Securify and VerX, two foundational smart contract analysis tools. 3rd & 4th place at Paradigm CTF (2021, 2022).

@k_besic introduced read-only reentrancy as a vulnerability class. Lead auditor for @enzymefinance. Co-led the disclosure that protected $100M+ across Curve, MakerDAO, Enzyme, Abracadabra, TribeDAO, Opyn.

@trooocher reported 100+ bugs in the Vyper compiler. Lead auditor for @CurveFinance. Helped push ChainSecurity to #5 on the Ethereum Execution Layer Bug Bounty leaderboard.

Dominic Brütsch is auditing at ChainSecurity since 2018, before DeFi existed. Lead auditor for @SkyEcosystem. Found a bug in Geth, earning a spot on the Ethereum Foundation Bug Bounty leaderboard.

@simon_perriard is ChainSecurity's ZK lead. Found a bug in the Solidity compiler. Disclosed critical soundness bugs in EY's Nightfall V3 circuits and served as lead auditor in top-tier DeFi projects.

@MatthiasEgli co-disclosed vulnerabilities in the Ethereum protocol itself and oversees all our audits as Managing Director.

TheDAO's mission is to make Ethereum safer. ETHSecurity is how they vet the researchers capable of contributing to that work. Congrats to everyone who made it on this epic list.

[ChainSecurity @chain_security]

EIP-1167 Proxy Contracts are considered minimal. But thanks to EIP-7702 you can do better now. Smaller size. Cheaper Deployment. Cheaper Calls.

Check it out: https://t.co/T3kcwvamzP

[ChainSecurity @chain_security]

Incorrect state proofs could have rekt a few large protocols - we teamed up with @CurveFinance to fix this before any harm could be done.
Technical details: https://t.co/92qQ9k2BPC

Credits for uncovering the bug goes out to @agureevroman !

[ChainSecurity @chain_security]

ChainSecurity is hiring.

A high-impact role—diverse, fast-paced, and built for long-term growth. Work with top-tier teams, travel globally, and become a key player in Web3 security.

Know someone who fits? We'd love to talk to them!

https://t.co/Lm3rCZuuks

[Shufan Wang @blake_uni]

My first round trip, and probably not my last round trip ;)

[Emilie | ChainSecurity @EmilieRaffo]

Dropping your next summer hit with @MacroMate8 & the Mooncrashers, because the biggest joke today is the value of our ETH bags 🤡

[ChainSecurity @chain_security]

We've been alerted of an impersonation attack where fraudsters pose as ChainSecurity employees, offering fake discounts on future audits. Stay vigilant—do not engage if contacted.

If in doubt, contact us through our website, our official X account, or your previously trusted ChainSecurity contact. Stay safe!

[ChainSecurity @chain_security]

1/6 🧵Hello Denver! This coming week, @chain_security is in town for @EthereumDenver! 🇺🇸

Below is where you can connect with us, either by attending our events or by listening to our talks. 👇

[ChainSecurity @chain_security]

🤝 As one of the whitelisted security service providers for @UniswapFND, we look forward to actively contributing to the security of v4!

[Shufan Wang @blake_uni]

@BenjaminOnIP @BenjaminOnIP Is your name from the person in "The Community" variety show?

[ChainSecurity @chain_security]

1/11 🧵@EFDevcon came to an end 1 month ago!

If you missed our presentations, here’s where you can find them back alongside some cool takeaways 👇

[Shufan Wang @blake_uni]

@Super4DeFi Maker所有数据可以直接看这个更清楚
https://t.co/6clD7Zv7rs

[Shufan Wang @blake_uni]

@krakenfx HPOS10I

[Shufan Wang @blake_uni]

CatWifScarf
CatWifMask

Winter Edition ❄️

[Shufan Wang @blake_uni]

@yumemono3333 Soooo cute! Thank you 💕

[Shufan Wang @blake_uni]

@redtheminer @wublockchain12 没有，除非你用的是智能合约钱包

[Shufan Wang @blake_uni]

Caught @merkleplant_eth in person at devcon! What a nice day 😸

[ChainSecurity @chain_security]

1/5 🧵 We recently conducted a security assessment of the TRON-peg USD Coin. The coin is going to be deployed on the @trondao network and be backed by USDC locked on @ethereum.

Below is more info about our review 👇

https://t.co/O2ZXPm3nLd