Don Dodge

Tech veteran Cyfrin, CodeHawks, Google, Microsoft , Napster, AltaVista

[Patrick Collins @PatrickAlphaC]

There are a few protocols that do security the right way.

@aave is one of them.

They invited a security team to their offsite to help build their new protocol with security in mind from day 1.

But not all teams are doing this

[Patrick Collins @PatrickAlphaC]

.@cyfrin has been working tirelessly to shift security left, into developers' hands, since day 1.

- Building tools like @SoloditOfficial, Aderyn, Moccasin
- Teaching people how to become auditors at @CyfrinUpdraft
- Doing conventional audits

And we just took another step

[Cyfrin Audits @cyfrin]

It lives exactly where your devs live.

→ Works directly inside Slack, Discord, Telegram, and IDEs via MCP.

→ Proactive Messaging: It doesn't wait to be asked. It listens to your chats and Google Meet voice calls, surfacing security insights in real-time.

[Cyfrin Audits @cyfrin]

The lifecycle:
1️⃣ You open a PR.
2️⃣ Cygent auto-reviews it inline on GitHub.
3️⃣ You ping Cygent in Slack: "Hey, fix finding H-1."
4️⃣ Cygent writes the Solidity, tests it, and pushes the commit.
5️⃣ You review and merge.

[Cyfrin Audits @cyfrin]

Cygent fixes this.

Old tools: "Here is a list of problems. Good luck."

Cygent: "I found a critical MEV risk in withdraw(). I wrote the fix, verified the build, and opened a PR for you."

You ping Cygent like any other coworker. Tell it what to fix, and it handles the rest.

[Cyfrin Audits @cyfrin]

Your newest AI security engineer has just arrived.

Cygent isn't just an AI bug scanner; it learns your codebase, works alongside your team, and writes the PRs to fix them.

- Finds bugs
- Gets on calls
- Schedules tasks
- Proactive security advice

All in your chat interface 🧵

[Cyfrin Audits @cyfrin]

Roadmap:
✅ Testnet — LIVE NOW
🔜 Prediction markets on attack periods
🔜 Prividium (private attack transactions)
🔜 AI Desktop support (no terminal needed)
🔮 Mainnet

Cyfrin is 100% bootstrapping this.

$3.4B in losses last year proves that what web3 is doing isn't working.

Come break some contracts → https://t.co/4CBiaaP090

[Cyfrin Audits @cyfrin]

The lifecycle:

1. Deploy audited contracts to BattleChain with real liquidity
2. On-chain Safe Harbor protects whitehats legally
3. DAO approves contracts for attack mode
4. Whitehats, AI agents, experimentalists, open season
5. Survive? Promote to production → deploy to mainnet

If you get hacked on BattleChain, that's the plan. You're on the ultimate red team platform.

[Cyfrin Audits @cyfrin]

BattleChain fixes this.

Bug bounties: "find a vuln, write a report, we'll pay you (maybe)."

BattleChain: "find a vuln, exploit it, keep 10%, return the rest."

You stole the money. You sent it to the recovery address. You keep your cut.

No politics.
No discretionary payouts.

On-chain Safe Harbor agreements make it legal.

[Cyfrin Audits @cyfrin]

AI is accelerating the problem on both sides.

LLMs produce insecure code 45% of the time. A study of 1,000+ AI-generated Solidity contracts found severe flaws in the majority.

Meanwhile, Anthropic tested AI models against 405 exploited contracts; they exploited OVER HALF. Cost per scan: $1.22. Exploit revenue doubling every 1.3 months.

[Cyfrin Audits @cyfrin]

Web3 lost $3.4 BILLION to crypto hacks in 2025 (@chainalysis). The Bybit exploit alone was $1.46B. North Korea stole $2B+.

Why? Web3 has no staging environment. You go from testnet (fake money, no adversaries) straight to mainnet (real money, real adversaries). Nothing in between.

[Cyfrin Audits @cyfrin]

As of today, BattleChain testnet is LIVE.

The pre-mainnet, post-testnet blockchain, where whitehats legally attack your smart contracts before they reach production.

Deploy. Get attacked. Ship stronger.

Here's why we built it, what it is, and how you can get involved 🧵

[Cyfrin Audits @cyfrin]

Vote for us in the Nominee Selection of the Security Council.

Voting is open from March 22nd, 2026 - 12:32 pm UTC until March 29th, 2026 - 12:32 pm UTC.

Member Election starts Apr 12, 2026.

https://t.co/oLq9v9Bn2M

[Cyfrin Audits @cyfrin]

Cross-chain bridges have lost more user funds than any other category of web3 infrastructure. 🔗

Not because bridge teams are careless. Because bridge security is fundamentally harder than single-chain protocol security.

Here's why.
🧵

[Cyfrin Audits @cyfrin]

ERC-8004 is now live on Ethereum mainnet: the standard for trustless AI agents, enabling portable identity, verifiable reputation, and cryptographic validation.

We're proud to have audited the contracts alongside @Nethermind and the @ethereumfndn Security Team🛡️🙌

[Cyfrin Updraft 🟩 @CyfrinUpdraft]

This isn't theory. You'll build actual programs:

→ Oracles
→ Piggy Bank (PDAs)
→ Dutch Auction (SPL Tokens)
→ AMM (Constant Sum)
→ Cross-Program Invocations

Each project in BOTH Anchor and Native Rust.

That's 6 Anchor + 6 Native programs you'll ship.

[Cyfrin Updraft 🟩 @CyfrinUpdraft]

Solana developers, this one's for you 🚀

Introducing: The Solana Development Course on Updraft

Build real programs—Oracles, AMMs, Auctions—in both Anchor AND native Rust.

Completely free.

Here's everything you need to know 👇

[Cyfrin Updraft 🟩 @CyfrinUpdraft]

Your Updraft challenge NFTs now have a home 🏠

We heard you: you've been minting proof of your skills, but nowhere to show them off.

That changes today.

Your on-chain achievements are now front and center on your Cyfrin profile 🧵

[Don Dodge @DonDodge]

Connecting BLE chips to Hubble Betwork satellites around the world is astounding. Getting TI to embed Hubble is a giant step forward for the industry.

[hubblenetwork @hubble_network]

Big news 🚀
TI Bluetooth Low Energy chips will now ship with global connectivity via Hubble and Texas Instruments.
• 90M+ terrestrial gateways worldwide
• No GPS
• No cellular
• No gateways to deploy
See it live at #CES2026 — TI Booth N115
Details: https://t.co/yTUnZ6fl30

[Cyfrin Audits @cyfrin]

@CyfrinUpdraft Our security work scaled dramatically.

75+ private audits completed in 2025:
• Secured $50B in TVL
• Discovered 1,000+ vulnerabilities
• 37 critical, 82 high, 164 medium-severity issues found
• Supported protocols like Metamask, Wormhole, Ethena, Uniswap, & more.