Comi Roa

Business Development & Strategic Partnerships. Web3 - Security -Enterprise @nethermind. Building Ethereum & Agentic AI projects @NethermindSec

[Nethermind @Nethermind]

We open-sourced a DeFi transaction builder for AI agents. No black box. No hidden API calls.

Protocols are JSON playbooks. Resolvers handle token addresses, decimals, slippage, approvals. You get deterministic unsigned tx data back.                                                                                                                                                                                                                      
44 actions across 12 protocols. Adding a new one is a JSON file.

https://t.co/PYISLWVtEn

[Nethermind Security @NethermindSec]

𝗕𝘂𝗶𝗹𝗱𝗲𝗿 𝘀𝗽𝗼𝘁𝗹𝗶𝗴𝗵𝘁: 𝗦𝘁𝗮𝘁𝗲𝗺𝗶𝗻𝗱

AgentArena's competitive model is producing results. In the last three competitions, Statemind's independent audit agent earned $2,000+ in bounties, one of around 10 active agents competing in parallel on each task.

Our platform doesn't just host agents. We support builders end-to-end: integration assistance, finding validation, performance feedback, and ongoing technical monitoring. Statemind has been building with us from the start.

Multiple agents. Independent strategies. Third party-based arbitration. Protocols benefit from broader coverage. Builders earn for what they find.

https://t.co/TtKzaQPHRY

[Comi Roa @ComiRoa]

More security shipping from @NethermindSec
When Your ZK Proof Proves Nothing . . . read the thread 👇
#Web3Security #SmartContracts #Audits @ethereum #ZeroKnowledgeProof

[Nethermind Security @NethermindSec]

https://t.co/OsAsVhwdZT

[Gateway FM @gateway_eth]

https://t.co/9e25xNe8EV is partnering with @NethermindSec to bring advanced audits and formal verification services directly into Gateway Apps.

Nethermind Security covers smart contracts, rollups, ZK systems, and the full off-chain stack (relayers, oracles, sequencers, provers) across EVM, Starknet/Cairo, Circom, Noir, Rust/Solana, and zk-VMs.

Through this integration, teams on Gateway Apps get:
- Smart contract & ZK audits
- Formal verification for high-assurance components
- Full-stack security from L1/L2 to off-chain services

Now available on Gateway Apps.

[Startale 💿 @StartaleGroup]

Introducing Startale Superstars, our new incubation program to create the next iconic Mini App on Startale App, focused on consumer, gaming, and bold new concepts.

Build fast. Launch to thousands. Create your killer app with us on @soneium by @Sony Block Solutions Labs.

Selected teams will share a $250K prize pool and receive hands-on support from launch. We’ll work with you every step of the way.

Learn more about Startale Superstars below 👇🏻

[Comi Roa @ComiRoa]

Process. Transparency. Strong reviewers. That’s how you ship a secure mainnet.
Honored to back @StoryProtocol as an auditing partner.
#Web3 #CryptoSecurity #SmartContractAudit #NethermindSec

[Nethermind Security @NethermindSec]

Projects don’t ship secure mainnets by accident. They do it with process, transparency, and strong reviewers.

Nethermind Security supports @StoryProtocol as an auditing partner, helping reinforce the standards set across their ecosystem.
https://t.co/yIfFUGKKdI

[Comi Roa @ComiRoa]

Excellent breakdown of audits + bounties + ecosystem reviews. Worth your time, especially if you’re gearing up to launch. ⛓️🛡️ @StoryProtocol @NethermindSec @Nethermind

[Raúl @ethicraul]

We are starting a series of articles on the security measures taken in preparation for @StoryProtocol mainnet, and after.

I think it's a good read for young projects as well, since the first article also reads as "As a web3 project, how do I procure security audits, configure audit contests, bug bounties, etc?". It goes over dev process, and our ecosystem efforts to help key projects get their code reviewed as well.

Shout out to the great teams that have audited our mainnet launch and beyond
@fuzzland @slowmist @HalbornSecurity @trust__90 @FuzzingLabs
Contest and bug bounty providers:
@cantinaxyz
Our ecosystem auditing partners:
@BlockSecTeam @NethermindSec and @HalbornSecurity

[Comi Roa @ComiRoa]

Next week we’re heading to Buenos Aires 🇦🇷 for Devconnect! Ping me if you’ll be around 📲 I always have time for a chat about Security… or an asado with chimichurri 🥩🔥 #Devconnect #BuenosAires #BlockchainSecurity #Networking #AsadoTime

[Nethermind @Nethermind]

@EFDevcon @ethereum Audits, formal verification, and preventive assurance for smart contracts and protocols.

Our team brings deep expertise in cryptography, zero-knowledge systems, and privacy, ensuring rigorous security from design to deployment.

[Kintsu @Kintsu]

🛡️ Nethermind Security Audit Complete

@NethermindSec has completed the audit of Kintsu’s liquid staking protocol for @monad — reviewing sMON’s staking logic, withdrawal mechanics, and more.

Another step toward secure and reliable liquid staking on Monad.

[Comi Roa @ComiRoa]

Big news! 🚨 @NethermindSec is now an official partner for the @arbitrum & @Optimism audit funding programs. Shipping on either stack? Your audit may be partially or fully covered. → Learn how to apply . . .👇

[Nethermind Security @NethermindSec]

Nethermind Security is an official partner for the Arbitrum and Optimism audit funding programs.

If you’re launching, upgrading, or scaling on either ecosystem, your audit could be partially or fully covered.

Learn how to apply ⬇️

[Comi Roa @ComiRoa]

@fede_intern @piku_dao @FuzzingLabs @LeastAuthority @alignedlayer @ethrex_client Hola @fede_intern! Soy Jose de Nethermind Security y estamos interesados. Me mandas tu TG handle en un DM y seguimos x ahi? https://t.co/yc6st0z9Ya

[Nethermind Security @NethermindSec]

We are excited to announce that Nethermind Security completed the review of Ventual's @ventuals liquid staking (vHYPE) ahead of their HIP-3 launch.

Big shoutout to the Ventuals team for a highly collaborative process from the initial kickoff call all the way to the fixes review.

[Comi Roa @ComiRoa]

🔥 Big moves on @0xPolygon!
@NethermindSec is proud to back our frens @Areta + shoutout to @bernard_xyz & team for crushing it 👏
The Security Audit Marketplace is LIVE.
👉 https://t.co/ndf8LyPQFa

#Web3 #Security #Polygon #Nethermind

[Bernard ⚡️⚡️⚡️ @bernard_xyz]

1/ We're excited to announce the launch of the Security Audit Marketplace for @0xPolygon!

Bringing 25+ top-tier auditors to the next generation of builders on Polygon to unblock security for good!
--> https://t.co/CRbq9C0cFc

[Nethermind @Nethermind]

🌏 Nethermind is in Singapore for Token Week.

Catch us at

NextFin (Oct 1),

Token2049 (Oct 1–2), and the

Ethereum Intelligence Summit w/ @hetu_protocol (Oct 2).

[Comi Roa @ComiRoa]

Proud to stand with @spheron as they power the future of open AI infra ⚡

[Spheron Network @spheron]

We’re glad to be featured in @MessariCrypto’s deep dive highlighting Spheron’s role in building open AI infra⚡️

With 44K+ nodes & $15M+ ARR, we’re challenging the centralized cloud🥊

As we’re building the open GPU layer for AI🤌

[Comi Roa @ComiRoa]

The LUKSO Bridge is live! 🚀 Congrats to the team! They also leveraged Nethermind Audit Agent as part of their security process. Always proud to support innovation in the ecosystem.

#NethermindSecurity #AuditAgent #Web3Security #SmartContractAudit #LUKSO #Ethereum

[LUKSO @lukso_io]

The LUKSO Bridge is Now Live! 🚀

The wait is over. You can now bridge LYX between LUKSO and Ethereum via @Hyperlane as part of the first phase of our progressive rollout.

Start bridging → https://t.co/Wg0jzxnQt8
Read more → https://t.co/2ce0XL84gn

[Comi Roa @ComiRoa]

Not all audits are created equal. @NethermindSec goes beyond contracts into ZK circuits, privacy & formal proofs. The invisible layer is our playground. 🛡️ #DeFi #Blockchain #CryptoSecurity #SmartContracts #Audit

[Rekt News @RektHQ]

Most auditors stop at contracts.

@NethermindSec goes deeper, into ZK circuits, privacy layers, and formal proofs where trust itself is coded.

The invisible layer is where they operate.

And that’s why they belong here.

https://t.co/UcqlhGktZC

[Comi Roa @ComiRoa]

@nethermind is bridging finance, regulation, and @ethereum innovation. Proud to stand with @ethereum_NYC at NextFin Summit.

[Nethermind @Nethermind]

Proud to support @ethereum_NYC: NextFin Summit, bringing financial institutions, regulators, and Ethereum’s core builders together to shape the next chapter of blockchain adoption.

See you later today.

[Nethermind Security @NethermindSec]

🚨 What can go wrong when deploying a proxy contract and its implementation?

Can you spot what’s off in the way that this Vault gets deployed and initialized?

- The initialize function sets up ownership, pausability, and UUPS hooks.
- The constructor sets the initial vaultBalance

👉 Insight: The constructor doesn’t call the disableInitializers function, so the implementation contract can be taken over by an attacker. Also, the constructor sets the initial vaultBalance, but the issue with this approach is that the vaultBalance will be changed in the implementation’s contract storage, not the proxy’s contract storage. To initialize the value in the storage of the proxy contract, the logic should be moved from the constructor to the initialize function.

[LayerAkira @LayerAkira]

Introducing the AKIRA-BOUT MOAR TOKENS CAMPAIGN

→ 8 moar new token listings
→ 4 weeks
→ $10k prize pool
→ trade to earn tickets
→ one ticket gets drawn
→ winner takes all.

Let the games begin: https://t.co/iPukq9JECa