Kalogerone

Auditor at CODESPECT (

[Kalogerone @kalogerone]

Finally secured a 1st place in a contest! It's a long-awaited achievement and I couldn’t be happier. Never stop believing everyone!!

[Cyfrin CodeHawks @CodeHawks]

Awards have been announced for the Benqi: Ignite contest🤝

Top 5:
🥇 kalogerone - $15,659.36
🥈 sovaslava - $1,449.18
🥉 dan__vinci - $1,211.11
🏅 0xtimefliez - $1,188.86
🏅 aestheticbhai - $1,092.19

Learn more 👇

(1/2)

[CODESPECT @CODESPECT]

As promised. Today, we have a big announcement

We're launching registration for SpecSiege.

It's our double-check format for audits. First, an internal private audit went through the code with a full manual review. Then the community review follows. 10 days of open review on a fairly large codebase, we know, but the chance to work on an ERC-6909 European bond platform, an institutional project, doesn't come around every day.
- €15K total pot (€13K community pool, €2K fixed for the lead researcher).
- If only Lows are discovered, €5K is distributed instead.

Simply find bugs after us and get rewarded. We value your participation. We're not here just to squeeze you.

Link below ⬇️

[CODESPECT @CODESPECT]

CODESPECT is proud to support @Solbuildersclub.

We've agreed to provide special perks for community members. If you're part of SBC, you can reach out to us for discounted security services, security guidance, and a free initial consultation on the security behind your project.

Supporting builder communities is core to what we do. @solana is a great example of how strong communities ship great products.

Members can DM us or reach out through the club to get started.

[CODESPECT @CODESPECT]

Audit completed ✅

CODESPECT has finalised a security review for @realmsdaos.

The assessed plugin extends SPL Governance, enabling DAO members interactions based on NFT ownership, including weighted voting.

The NFT plug-in codebase was strong, with only low-severity findings identified during this engagement.

We wish Realms a smooth and successful launch.

Full report below 👇

[Kalogerone @kalogerone]

Such a fun audit! @talfao1 is sharing some insight how a simple bug went unnoticed by many top auditors that participated.

[CODESPECT @CODESPECT]

Lesson from the @yieldbasis @sherlockdefi contest.

A stale balance accounting bug slipped through multiple audits due to scope isolation.

The issue ultimately secured 4th place for @talfao1 and @kalogerone.

Full breakdown:
https://t.co/urYr6ZgABK

[CODESPECT @CODESPECT]

🚨 CODESPECT is launching AI Red Teaming

AI agents manage funds, execute transactions and store sensitive data.

But is your agent actually secure? 🤔

We test for
• Prompt injection
• Tool abuse
• Data exfiltration
• Privilege escalation
• Agent manipulation

Using frameworks from OWASP, MITRE and Google SAIF.
🎯Whoever reaches out for this service within the next two months receives a discounted rate.

Learn more https://t.co/uTCxExTRJO
Or reach our founder directly https://t.co/GkIBMCgpZz 🔒

[Talfao @talfao1]

Back in early September, we dived deep with @kalogerone into the @yieldbasis contest on @sherlockdefi and placed 4th under the talfao account.

I love Python, so the Vyper code was easy for me to read. Huge thanks, @kalogerone, for the amazing team contest experience! 🚀

[Talfao @talfao1]

It was a pleasure to collaborate with @sherlockdefi on this.

It was a great codebase to review, where we could show our Cairo auditing skills with my colleagues: @kalogerone, @shaflow01

[Kalogerone @kalogerone]

An incredible article! So much free alpha for developers and auditors! Great job @talfao1

[Talfao @talfao1]

After months of deep diving into HyperLiquid and several audits, my team at @CODESPECT put together a blog post explaining HyperEVM <> HyperCore interactions and key security pitfalls when building LST protocols on @HyperliquidX.

https://t.co/bbBELwYE1a

[Kalogerone @kalogerone]

@carlos__alegre I'm a BBQ master! Hope this will happen and I'll be there to cook for you

[Kalogerone @kalogerone]

@carlos__alegre Contests are not dying, they are getting killed

[CODESPECT @CODESPECT]

✅ 2 Audits Completed for @TokenTable ✅

CODESPECT has successfully completed two in-depth security reviews:
🔹 Solana Merkle Token Distributor
🔹 SellNow – a new Escrow Contract for trading token allocations

🧐We found 16 issues in total, including 1 critical in SellNow. All were thoroughly addressed by the TokenTable team.✅

Excellent collaboration between our teams led to stronger security and a more robust protocol. 💪

You can check the full reports below:
https://t.co/891Agesaps
https://t.co/tQszpVNzW2

[Kalogerone @kalogerone]

Such a privilege to audit such a widely used and known protocol like @tokentable. Hope everyone in the space took security as seriously as them 👏👏

[CODESPECT @CODESPECT]

We’re wrapping up another round of audits for @tokentable.🫡💪

Here’s what @headcpx from @ethsign had to say about working with us:🙌
"Working with CODESPECT was an outstanding experience from start to finish. Their TokenTable audit was timely, comprehensive, and incredibly well-structured. What stood out most was the clear communication, prompt support, and insistence on having a complete understanding of the codebase. We now feel confident in the security and reliability of our contracts. We highly recommend CODESPECT to any project seeking a top-tier audit partner."

Want to improve the security of your contracts and protocol infrastructure?🧐

Reach out via DMs or ping @talfao1 on Telegram.🤝

[Kalogerone @kalogerone]

@0xaudron This is the way to go man, so many great issues that are public and get ideas, keep it up! 🔥

[Kalogerone @kalogerone]

@carlos__alegre Damn you doing interviews now, that means I should too 😂👏👏

[Kalogerone @kalogerone]

@tpiliposian @cantardixyz @cantinaxyz Now make them add a "change email" setting. Challenge impossible

[Kalogerone @kalogerone]

4️⃣ Collaboration overload - in a good way! All the calls with the audit team create this constant flow of ideas that often lead to new findings. It's basically a brainstorming party where everyone's insights build on each other. And I love it.

[Kalogerone @kalogerone]

Just finished my 3rd audit with @CODESPECT . After doing contests for almost a year, here are the main differences (a thread):

[Kalogerone @kalogerone]

3️⃣ Predictable pay is refreshing. No more auditing code for weeks with uncertain rewards. This clarity helps me focus better on the actual work. Thankfully I'm not exclusive to @CODESPECT which means I can still do contests when I want to satisfy my gambling itch!