Ilya Druzhinin

Web3 security researcher

[Ilya Druzhinin @ilyadruzh]

Critical bugs are still hiding in production at some of Web3's most sophisticated protocols. #ZK-heavy systems are especially exposed: a single mistake in circuit constraints, field arithmetic, or prover/verifier assumptions can break core security guarantees.

[Ilya Druzhinin @ilyadruzh]

d33f1272ca5777b2c0432e5ce1c42f904b8409688aba1e583c7260948a10ba3d REPORT.en.md

[Ilya Druzhinin @ilyadruzh]

I found a critical vulnerability in a #Web3 project that could put up to $1 billion at risk. Today, I submitted my security report to the project team. This post is simply to document that fact.

[Ilya Druzhinin @ilyadruzh]

Bugged Blockchain Challenge is LIVE! 🔥

A deliberately vulnerable blockchain awaits your hacking skills! Break into the node or wallet, and submit your top exploit report for a chance to win a massive 100 TON bounty!

Full details at https://t.co/zuNcp8VHg7.

[VictorrrR @VicRdev]

Awesome equippable @RmrkApp NFTs for @phdays WEB3 CTF EVM and TON #web3 #ctf #evm #ton https://t.co/ExN5wwDSCY

[Ilya Druzhinin @ilyadruzh]

We’ve launched the ultimate hunt for bugs and hacker mastery — the epic #CTF has begun at https://t.co/WtiosOn7G2! On the menu: blazing challenges in #EVM and TON security — plus one juicy Bug Bounty worth 100 #TON!

[VictorrrR @VicRdev]

@PositiveWeb3 just launched TON Graph VSCode extension that lets you visualize The Open Network (TON) code graphs right in your editor (FunC, Tact, Talk).

Grab it now from the VSC Marketplace
https://t.co/limsl9w5km

#TON #VSCode #TONGraph #PositiveWeb3 #FunC #Tact #Tolk

[Ilya Druzhinin @ilyadruzh]

FYI @ton_society 😉

[Positive Web3 @PositiveWeb3]

Unleash security mode on your TON smart contracts! 🚀 Our cutting-edge research exposes deadly pitfalls & hidden hacks that can torch your tokens. Level up your blockchain game—read the ultimate guide now 👉
https://t.co/vYigsxvBqi #TON #SmartContracts #Blockchain

[Ilya Druzhinin @ilyadruzh]

At the end of May there will be a #Web3 #Security conference at the biggest international cybersecurity festival PHDays.
CFP is open now, you can apply. Any language accepted, we are multicultural event.

Flight and accommodation paid by the organizers😎

[Positive Web3 @PositiveWeb3]

Updated (v2) TON audit guide with revamped security guidelines (carry-value pattern, replay protection, etc), improved messaging/gas management, clarified contract upgrades, and added FunC/Tact best practices. #TON #SmartContracts @ton_society https://t.co/gqan2vqMLi

[Positive Web3 @PositiveWeb3]

New #Web3Security Conf 😎

🚀 Call for Papers is Open!
🎉 We pay for flight and lodging for speakers!

Join us at Positive Hack Days 2025 – the biggest cybersecurity event!

📅 May 22-24, 2025

🔹 Hardcore #Web3 security talks

🔗 Submit your paper: https://t.co/uCh6n4BxH6

[Positive Web3 @PositiveWeb3]

Formal verification of #Solidity smart contracts in the #ConCert framework.

https://t.co/KfcMCESCF4

#coq #web3 #web3security

[Positive Web3 @PositiveWeb3]

How We Trained an #LLM to Find Vulnerabilities in #Solidity Smart Contracts

https://t.co/b09CRCo7Y2

By @VicRdev

[Ilya Druzhinin @ilyadruzh]

What interesting #Web3 security conferences do you know of?

[Ilya Druzhinin @ilyadruzh]

7 billion dollars on this smart contract is not a bad incentive to explore a new platform at the virtual machine level 😂😂😂😂😂.Good entertainment before bedtime, grab a pickaxe and head into an uncharted mine in search of gold.

[Ilya Druzhinin @ilyadruzh]

#ZKP audit checklist: https://t.co/3HaS6OyluC
Web3 security audit by @PositiveWeb3

[Ilya Druzhinin @ilyadruzh]

Вы помните, когда зарегистрировались в X? Я — да. #МояГодовщинаВX

[Positive Web3 @PositiveWeb3]

#Tron projects #security #audit checklist

https://t.co/fvBujwmsZq

[Ilya Druzhinin @ilyadruzh]

#hack #fest #cfp https://t.co/yAL14w11yI

[Ilya Druzhinin @ilyadruzh]

- Admission tickets for the speaker, two students and three family members: an adult and two children
- Hotel room for three nights for the speaker

Also a set of useful handouts as a gift.

Link to accept the presentation: https://t.co/yAL14w11yI

[Ilya Druzhinin @ilyadruzh]

Positive Hack Days will be held in Moscow in May, where there will be a part dedicated to #blockchain and #web3, as well as an open call for papers.

Bonuses for speakers:
- Round-trip airfare
- Admission tickets for the speaker, two students and ...