Web3 MADE

Solidity Dev & Auditor
Invariants are everything.

[Web3 MADE @KryptoKeemo]

@AmanahChain Having worked in UAE, I can attest to Sharia Compliant Finance - sounds awesome. Godspeed to Amanah Chain.

[Web3 MADE @KryptoKeemo]

@CNPYNetwork Template-based L1 deployments get interesting fast once users start tweaking tokenomics.

Are core security invariants enforced at the factory layer, or left to individual deployments?

[Web3 MADE @KryptoKeemo]

@AmanahChain Awesome - I've always thought a charity would've been one of the first things on the Blockchain but no.

What's the tech stack for Amanah Chain (EVM, Rust, etc)?

[Web3 MADE @KryptoKeemo]

@Benzempire2021 @PerceptronNTWK Interesting model.

How is actual bandwidth contribution measured and validated?

[Web3 MADE @KryptoKeemo]

@DrPanteo Liquidity lock is good - mint authority is what usually matters.

Any privileged functions left in the contract?

[Web3 MADE @KryptoKeemo]

@ReWAT_CHER @Hypercroc_xyz Vault + leverage stacks are where accounting invariants really matter.

Curious how Hypercroc is modeling share value vs underlying position exposure during partial liquidations?

[Web3 MADE @KryptoKeemo]

@waleswoosh If we end up with endless USD stablecoins, the real differentiator won’t be branding, it’ll be how tightly mint/burn logic is coupled to verifiable reserves.

Peg mechanics fail quietly before they fail publicly.

[Web3 MADE @KryptoKeemo]

@Quiet_Finance Agree.

APY just reflects stacked trust assumptions across integrations.

Fragile withdrawal paths and surface area expansion are where most yield products break.

[Web3 MADE @KryptoKeemo]

@502Protocol Modeling gas, bridge fees & slippage is great but cross-chain gets tricky fast.

The real edge cases show up when settlement timing drifts and your routing assumptions don’t match final state.

[Web3 MADE @KryptoKeemo]

@0xMiden Privacy isn’t just a binary property — it’s a gradient.

The larger the transfer, the more incentive there is to correlate flows, exploit liquidity asymmetries, or game sequencing.

Threshold-blind privacy models ignore adversarial incentive scaling.

[Web3 MADE @KryptoKeemo]

@StabilizerFi @VitalikButerin Intent → simulation → confirmation is strong.

The key question is whether simulation state and final state are guaranteed to be invariant-aligned under volatile liquidity or oracle behavior.

[Web3 MADE @KryptoKeemo]

@Oxcheatcode @code4rena Access control still the number 1 vulnerability according to OWASP - curious to why you think it is so common?

https://t.co/aj62RKU6Ro

[Web3 MADE @KryptoKeemo]

@0xgo4ko Based af.

[Web3 MADE @KryptoKeemo]

@trailofbits new Claude plugin for smart contracts is a big value-add for devs and auditors. I got it today, the spec-to-code compliance seems legit, comparing whitepaper specs against code.
https://t.co/38frAE7HcJ

[Web3 MADE @KryptoKeemo]

Short audit for @OpenCover - no highs/mediums found, seems airtight, but we'll see what others found tomorrow 👀

[Web3 MADE @KryptoKeemo]

I get more scammers on LinkedIn dming me than on X. What's up with that?

[Web3 MADE @KryptoKeemo]

You win or you learn.
All of my findings got completely rejected for the @flyingtulip_ contest...
And so did everybody else's!
The FlyingTulip Protocol is safer than before.
Everybody became more experienced auditing such a secure and well-designed protocol. #web3 #security

[Web3 MADE @KryptoKeemo]

In Web2 fintech, a bug is a problem.
In Web3, a bug is a bank robbery.
Web2 has humans + institutions to catch failures.
Web3 has smart contracts — and smart contracts are the bank.
One bad line of code can instantly vaporize assets. #web3

[Web3 MADE @KryptoKeemo]

Last day of FlyingTulip Audit of $100,000, 5 Medium findings submitted.
Onto the next audit @vii_finance 😎

[Web3 MADE @KryptoKeemo]

This helps you think like a professional auditor and transfers directly to competitive auditing. hashtag#web3 hashtag#security

[Web3 MADE @KryptoKeemo]

The best way to learn any new skill requires fast feedback loops... Smart Contract Auditing is no different!

[Web3 MADE @KryptoKeemo]

Set yourself a timer, and once your audit is finished, compare your results to that of the professional firm.