Peter Kacherginsky

@blockthreat Editor and vCISO. ex @Coinbase Unit 0x / BlockSec @mandiant FLARE, @federalreserve NIRT

[Peter Kacherginsky @iphelix]

https://t.co/CC6IQA39l7

[Peter Kacherginsky @iphelix]

@joranhonig For anything out of scope, you can just “negotiate” a bounty later 😅

[Peter Kacherginsky @iphelix]

@joranhonig Full disclosure is how TradSec got to mature bug bounty programs

[Peter Kacherginsky @iphelix]

@JohnZettler @krakenfx Can you talk more about how the risk is managed?

[Joran Honig @joranhonig]

I think something dangerous is happening to audits.

It seems like there are fewer audits and audit prices have gone down.

Cheaper audits should be good right?

Not necessarily

🧵👇

[Peter Kacherginsky @iphelix]

Subscribers of @blockthreat know the answer to this and similar questions backed by hard numbers, exact incidents and attack vectors. 😉

[Lefteris Karapetsas @LefterisJP]

We definitely have had an uptick in DeFi exploits lately with a new exploit almost daily. But is it just me or the vast majority of them are compromised key or other issues stemming from failed opsec rather than smart contract code exploits? (which also points to the centralization of "DeFi").

[Blockchain Threat Intelligence @blockthreat]

BlockThreat - Week 21, 2026

$7.7M was stolen across 11 incidents this week.

10+ hacks a week is the new baseline.

This week’s BlockThreat focuses on three attack vectors DeFi projects and security auditors should prioritize immediately.

[Giveth @Giveth]

🛡️ The results for the @thedaofund’s Ethereum Security QF Round are LIVE!

This historic round is closing with a HUGE last minute contribution:

@wintermute_t has added $200K to the matching pool 🔥

Wintermute is a well known liquidity provider, and one of the leading supporters of Ethereum security, in fact exactly a year ago today they donated $1M to @_SEAL_Org.

This year they teamed up with TheDAO, @Quantstamp & several other community partners to allocate over $1.6M worth of funding to Ethereum Security Public Goods 👇

[OpenZeppelin @OpenZeppelin]

Recent posts by Manuel Aráoz on AI and DeFi security have been widely circulated, and customers have asked whether they reflect OpenZeppelin's position. They do not.

Manuel co-founded OpenZeppelin and served as the company’s CTO until 2019 when he left the company.

[Adrian ⛩️ Hetman 🐺 | 📓+🖋️+☕️ @adrianhetman]

I wish more people understood this.

Screenshot from @blockthreat article
https://t.co/L6SYM7tseM

[Peter Kacherginsky @iphelix]

@__Raiders @blockthreat Oh nice!

[Peter Kacherginsky @iphelix]

@__Raiders Np, @blockthreat is not currently on the list of Web3 Security Resources 😉

[Antonio Viggiano @aviggiano]

My first blog post for @monad's security team is out.

We spent a month building an AI system to hunt vulnerabilities in the Monad blockchain

here's what we learned

[Peter Kacherginsky @iphelix]

@__Raiders Thanks, i will share it with my readers

[Peter Kacherginsky @iphelix]

@mattaereal It’s not too far from real negotiations so 😉

[Peter Kacherginsky @iphelix]

@1_00_proof Finally stopped calling exploiter a “whitehat”. Still waiting negotiations to drop the word “bounty” and use a more appropriate “ransom” instead.

[Peter Kacherginsky @iphelix]

If you want to tell people the truth, make them laugh, otherwise they'll kill you.

- George Bernard Shaw

[Peter Kacherginsky @iphelix]

https://t.co/ZoUP7EcyD6

[100proof.org @1_00_proof]

A two-part story (in images).

[Peter Kacherginsky @iphelix]

Staying current in DeFi security means tracking:

294 Feeds
48 Chatrooms
1124 X accounts
13 Newsletters
8 Incident Repos
100+ News Stories
500+ Posts, Research Articles and Whitepapers
50+ Incident Alerts and Post-mortems

Every week.

You could hire a full-time analyst to read it all, filter the noise, connect the dots, and tell your team what actually matters for DeFi security.

... or you could subscribe to @blockthreat

[Mitchell Amador @MitchellAmador]

If you haven't read this research, I strongly encourage you to. It's proof that the whitehat community has been the single biggest factor in keeping crypto safe at scale.

Crowdsourced security works really, really well.

https://t.co/C3fvgmhYyx