Jeff Security

Independent Smart Contract Researcher & Researcher at @ShieldifySec

My mission is to find vulnerabilities in smart contracts for a safer Web3 Space!

[Jeff Security @jeffsecurity]

Made $60k last month from audit 😎

What about you?

[rini @rini_xyz]

rini is live in beta.

First vault managers can now deploy modular vaults on HyperEVM, with access to Hyperliquid perps, spot, HIP-3 and HIP-4.

It's a beta, open to whitelisted managers only.

[Jeff Security @jeffsecurity]

@ShieldifySec @Rabtools @avax 🫡🫡

[Shieldify Security @ShieldifySec]

Solid resource 😱 This is one of the most structured open-source prompt packs I’ve seen for bug bounty hunting!

@mdp_sec broke down their entire workflow into 10+ reusable phases:

→ Recon & surface mapping
→ Authenticated access setup
→ Endpoint & vuln-class sweeping
→ Browser-based walkthrough
→ Critical-impact hunting
→ Triage, dedup & validation
→ Independent verification gates

It’s Web2 focused, but the methodology is gold for anyone building AI-assisted security workflows. The evidence-first, phase-by-phase structure is exactly how you avoid hallucinated findings and actually produce reliable results: https://t.co/0sVAvb94wd

[Jeff Security @jeffsecurity]

This deep dive on multi-agent software engineering pipelines shows how to partner with AI to build production-grade, highly tested Web3 systems.

Watch the full talk: https://t.co/04pOlrq2Ld

[Jeff Security @jeffsecurity]

This deep dive on multi-agent software engineering pipelines shows how to partner with AI to build production-grade, highly tested Web3 systems.

Watch the full talk: https://t.co/04pOlrq2Ld

[DarkWallet @DarkWalletRH]

Updated $DRKW on DexScreener and CA added to website.

We're also audited by Shieldify (@ShieldifySec).

Audit 👇
https://t.co/nDU391gyQw

[C-l 🏰🍐 @ClBlockchain]

Another audit report for

@pear_protocol

is live ❇️

[Shieldify Security @ShieldifySec]

Another audit report for @pear_protocol is live ❇️

We reviewed their PEAR → PEAR migration to HyperEVM: a one-way LayerZero bridge, rate-limited minting, staking migration with preserved timestamps, and the HyperCore spot listing.

Read the full report 👇
https://t.co/22uP5sQwuX

[Shieldify Security @ShieldifySec]

Hash-perfect decompilation of a Solana program is now a thing.

@osec_io went from a 220KB .so blob to byte-identical Rust source for GoonFi V2, using agents scored on how closely each function matched the original bytecode.

The bug they found once the code was readable? The AMM priced assets off its own vault balance. Donate tokens, skew the price, drain the other side. $6.1M at risk.

If your program is live, assume your source is public.
https://t.co/H4BCKWDO9l

[Jeff Security @jeffsecurity]

TryHackMe’s AI Security path: 25 hands-on labs on prompt injection, jailbreaks, AI supply chain attacks and RAG data poisoning. ~19h, intermediate. Worth it if you audit anything with an LLM in the loop.

https://t.co/lRx8OMgDpC

[Jeff Security @jeffsecurity]

@chrisdior777

[Jeff Security @jeffsecurity]

https://t.co/TnHvZStsMK curates 446 builder tools. Security & testing alone has 56: Slither, Aderyn, Echidna, Medusa, hevm, Certora, Kontrol, heimdall-rs. A solid map for building your audit toolchain.
https://t.co/lmuY6u5KkM

[Jeff Security @jeffsecurity]

@ShieldifyMartin @ShieldifySec 🫡

[Shieldify Security @ShieldifySec]

Whitehats defend every line. Blackhats only need one missed invariant. That gap is the difference between a clean launch and a 3am rekt thread

Double down on security 🫡

[Martin @ShieldifyMartin]

If you have:

- A strong team that never stops shipping
- Full commitment
- A reliable security partner

Product-market fit becomes a matter of persistence and success a matter of time. 🫡

[Jeff Security @jeffsecurity]

Sing, O Muse, of the vault that trusted its oracle. Of TVL unbounded, of a price fed by one thin pool, and of the flash loan that arrived at dawn like a god in disguise. ⚔️

Audit your feeds, anon.

[Jeff Security @jeffsecurity]

@ShieldifySec 😂

[Shieldify Security @ShieldifySec]

True?