The most expensive bugs aren't always the clever ones.
It's often the obvious ones everyone assumed someone else had already checked.
Reentrancy didn't die. It just learned to hide behind "we use OZ."
The most expensive bugs aren't always the clever ones.
It's often the obvious ones everyone assumed someone else had already checked.
Reentrancy didn't die. It just learned to hide behind "we use OZ."
New audit report, this time for @Bankroll_Status 🤝
Quick audit, solid team, clean code! 🫡
For more details, check out the report at 👇
https://t.co/6T1Qndj73R
Sadly "self-custody" is only as strong as the modules bolted onto your Safe. Gnosis just got hit through the Zodiac delay module 😢
https://t.co/ssc9MoWc5m
No foolproof fix for prompt injection yet - but you can shrink the blast radius.
Good rundown on delimiting untrusted input, scoping permissions & monitoring LLM activity. Relevant if you're securing AI agents 🤖
https://t.co/gLP4Ty6Vzb
Your audit is a snapshot. The codebase is a movie.
The diff between them is where the funds go. Re-audit every upgrade like your reputation depends on it. Because it does.
If you're crossing from web2 sec into web3 (or vice versa), this repo is gold. Hundreds of bug bounty writeups grouped by class - IDOR, race conditions, RCE, SSRF, auth bypass.
https://t.co/zJBjAfEpbW
Neat find: recursive calldata decoder for EVM txs. handles multicalls, batched txs, and nested ABI-encoded calls that most generic decoders choke on. fully client-side, served via ENS.
https://t.co/knO5QijOp9
🚨PSA for anyone considering working with these guys, they don't pay for their audits. We've been chasing the invoice for months!
Repost, so no one else wastes their time.
@MuratLite@Fast_Protocol@primev_xyz
🚨PSA for anyone considering working with these guys, they don't pay for their audits. We've been chasing the invoice for months!
Repost, so no one else wastes their time.
@MuratLite@Fast_Protocol@primev_xyz