Eamonn | Procur3

@Procur3 - Web3 security procurement.

75+ vetted security firms covering 30+ security services in one place.
Web3 security procurement made instant & cheaper

[Eamonn | Procur3 @e3onchain]

@QuillAudits_AI 🔥

[Eamonn | Procur3 @e3onchain]

Just seen this today.

A lot of hacks go unreported from the main channels.

Bridge related and previously audited

[Cysic Foundation @cysic_fdn]

A message from Cysic to the party responsible for the exploit:

In the interest of reaching an amicable resolution, we are offering a recovery bounty of approximately 10% for your cooperation in returning approximately 90% of the identified ETH proceeds from the unauthorized minting of 10,000,000 CYS.

Specifically, return 275.872 ETH in native ETH on Ethereum mainnet to the following address controlled by the Cysic Foundation:

0xe3e8E1147a47dCf42fa73892D74928544fe5a6A9

The return window is 72 hours from the on-chain publication of this message on Ethereum mainnet.

Upon verification that 275.872 ETH was received at the designated address by the deadline, you may retain the remaining identified ETH proceeds, approximately 30.652 ETH, as the recovery bounty. This bounty is excluded from the 275.872 ETH repayment amount and does not need to be returned. We will publicly acknowledge your cooperation and consider Cysic’s ETH recovery claim under this offer resolved.

We have reconstructed the key stages of the attack and preserved the supporting technical and on-chain evidence. If the funds have not been returned by the deadline, the matter will be escalated with law enforcement to pursue a full criminal investigation.

BSC on-chain message: https://t.co/4sVLZbtggc

ETH on-chain message: https://t.co/93Rkj9okBT

[Eamonn | Procur3 @e3onchain]

Everything you need to have ready when posting your security audit RFP and how this drastically changes the quality of the quotes you get back.

Share if useful

[Procur3 @procur3]

The Pre-audit checklist every team should refer to when planning their external security reviews (smart contract audits & pentesting).

Link in comments.

[Procur3 @procur3]

2 security RFPs listed yesterday.

- A token audit for a team on @CantonNetwork

- A smart contract audit for a protocol on @base

Planning your smart contract audits? Use Procur3.

[Eamonn | Procur3 @e3onchain]

@TiwariHash6 @procur3 @CantonNetwork @base Great question.

If you post a audit rfp for your Canton contracts, you select the language tag Daml.

That then shortlists those firms with Daml experience and only they can bid for the RFP.

So you won't have a solana-native audit firm bidding on solidity / daml contracts

[Eamonn | Procur3 @e3onchain]

2 new security audit RFPs went live on @procur3 today

1 x token audit on @CantonNetwork

1 x protocol on @base

Both looking for smart contract auditors that are vetted and experience.

[Eamonn | Procur3 @e3onchain]

@big_duca On TG - Ethsecurity chat
Usually go there to see if the exploit is really bad or if the company was only moving their funds from one wallet to another

[Eamonn | Procur3 @e3onchain]

Agreed - AI loves blogs

Get your blog game up. I am religious with it.

0 marketing background but we're doing well.

Still a way to go

[Tibo @tibo_maker]

traffic from ChatGPT is skyrocketing on my apps

and Ilias shares a gem here
this is such a good framework

side note: i looked into it and blog posts are 73% of what AI looks at when replying

blogging is faaarr from being dead

[Eamonn | Procur3 @e3onchain]

@procur3 @ShieldifySec Congrats team!

[Eamonn | Procur3 @e3onchain]

Another security RFP closed on @procur3

This time for a pentest of a wallet.

Congrats @ShieldifySec team on winning the engagement.

Our comparison tooling allows you to shortlist auditors based on relevant experience, merit, timelines and so much more.

Decision making becomes easier and protocol teams have confidence in the selection they make.

gProcur3

[Procur3 @procur3]

A wallet provider put one scope to the market and let specialist firms compete for it.

The wallet team compared coverage, timeline and named reviewers before making the award.

Congratulations to @ShieldifySec on winning the engagement following a competitive RFP process

[Eamonn | Procur3 @e3onchain]

This is @procur3's 10th security audit RFP this month.

From Layer 1's to lending protocols, bridge tokens and wallets - any security service can be procured here.

Proud to see the momentum we're gaining.

Back to work on making it the best experience possible.

[Procur3 @procur3]

New security audit RFP is live.

- Smart contract audit
- Daml language
- Submission deadline of 26th October

If you're ready for mainnet, use Procur3 to source your auditor.

Web3 security procurement done right.

[Procur3 @procur3]

On Oct 14 Pirate Chain found a transaction validation flaw that let an attacker mint roughly 39.8M ARRR out of nothing. Supply up about 20%.

The new coins went straight into the Sapling shielded pool, where nobody can follow them.

[Eamonn | Procur3 @e3onchain]

It's Sunday which is Monday for me.

A day to focus on SEO, marketing and optimisation.

Review the last 7 days, track growth and ship out improvements.

Tomorrow we focus on outreach.

[Eamonn | Procur3 @e3onchain]

@ColinGardiner Is this a group or more 1-on-1 with the team that is selected

[Eamonn | Procur3 @e3onchain]

The 9 RFPs were consolidated into 7. They are now live.

Submit your proposals through @procur3

Rust, Typescript, ZK and more- pick your poison

[Procur3 @procur3]

7 security audit RFPs are now live on Procur3.

Around 160,000 lines of production and reviewable code across Rust, TypeScript and ZK systems.

Submissions close 22 October.

Review the scopes and submit through Procur3.

[Eamonn | Procur3 @e3onchain]

New feature walkthrough for auditors registered on @procur3

Particularly relevant for Layer 1 / large defi protocol security RFPs.

Summary: Foundation teams can procure multiple security reviews at one time. If your security firm is bidding on them all, you most likely can do a discount of some sort.

Now, you can present this to the foundation teams when you submit your proposals.

I've been working hard on making sure your audit firm's value prop and offering has the highest chance of success in terms of visibility. The content of the submission relies on you / your BD's that are submitting the proposals.

Enjoy and let me know in the comments if there are any feature requests you have.

[Eamonn | Procur3 @e3onchain]

🫡

[Procur3 @procur3]

We're proud to have supported the @Nuxaris team with their smart contract auditor search for their cBNB contracts.

They're now bringing BNB to @CantonNetwork as $cBNB

Wishing the team all the best!

[Eamonn | Procur3 @e3onchain]

9 New security RFPs landing today / tomorrow on @procur3

- Rust
- Typescript
- Layer 1 review
- Compact

Notifications on

[thisvishalsingh 🪐 Cryptography Security Researcher @thisvishalsingh]

Hi,

offering a free, full-day security review/consultation for
privacy(DeFi pool, ledger, fundraising, etc using ZKPs, MPC, FHE, tees),
scaling(L1/L2, zkVMs/provers),
interop projects
whether already deployed or still in development.

I will thoroughly review your protocol.

can bet that this one day review will be valuable than past review.

DM me to schedule your review!

The slots for Q4'2026 & Q1'2027 is open and is filling fastly.

ship securely.

[Eamonn | Procur3 @e3onchain]

Working with Layer 1 teams using @procur3 for managing their security programs has been insightful:

- multiple stakeholders involved (10+)
- Existing apps used include Notion, github, telegram, slack, accounting tools, docusign, emails, kyc/kyb and more
- No audit trail of decisions
- No way to streamline rfps, performance ratings, spending data, audit engagement milestones etc
- No centralised source of truth

We've built all of this and more specifically for the larger enterprise teams that need a proper way to stay on top of their security operations

Reach out if you want a demo of what we've built.

[Procur3 @procur3]

Legal at contract.
Operations at kickoff.
Security at draft report and remediation.
Finance at final report.

Four teams waiting on stages they cannot see, all asking the same engineer on Slack.

One record fixes it.