Alexey Posikera

web2 and web3 security, reverse engineering

[Alexey Posikera @PassKeyRa]

Seems that someone is creating a huge number of deposit wallets via the @Polymarket relayer, pumping up the gas price on Polygon many times over from usual 100-200 gwei to 6k. >70k$ paid in the last 3 hours for fees on wallets creation via the wallet factory

[Decurity @DecurityHQ]

Decurity team was cooking for the last few weeks. We were able to discover 0days that could've devastated the whole web3 industry if used by malicious actors.
We're working hard to prevent it from happening.

[Decurity @DecurityHQ]

Most audits miss Web2.5

Smart contract auditors focus onchain. Backend devs trust the blockchain. But the real attack surface is the interaction between them.

Case study from our recent audit: double-spend via reverted tx secret leak + ECDSA mismatches.
https://t.co/WxJejfxqx7

[Decurity @DecurityHQ]

🧐 Your protocol was audited in 2022? That's exactly why it got hacked in 2025.

2025 was the year hackers went hunting through old, audited code — and rounding errors became million-dollar exploits.

Our breakdown of top 10 DeFi incidents of this year: https://t.co/sYi6YRm2IB

[Decurity @DecurityHQ]

Ever audited Solana Anchor constraints with 20+ accounts and cross-checks everywhere?

Our own @passkeyra built a tool that turns them into visual graphs - red flags for missing checks pop out immediately.

https://t.co/xr5EZDTy05

[Alexey Posikera @PassKeyRa]

For Sui packages decompilation the Revela decompiler is used - https://t.co/e6XxDOC8aK. The same decompiler produces the source code when you check it in the https://t.co/mZGHWFsxk2 explorer

[Alexey Posikera @PassKeyRa]

Hi all, I published my new SuiSource MCP - https://t.co/7glI7Gez7F

Now it has two tools that are useful for researchers - getting the local decompiled version of a package bytecode and collecting extended info about all packages of a project just by a single found package ID

[Alexey Posikera @PassKeyRa]

@publicqi @DecurityHQ Yes, should work! I will check it out later also

[Decurity @DecurityHQ]

Releasing our new IDA Pro plugin for analyzing Solana's eBPF programs developed by @dewardgnome. Check out the blog post: https://t.co/95fMBiwd83

[Fabio @degrigis]

Have you ever dreamed about a CLI debugger and pwntools but for smart contracts hacking? @dreselli and I thought about you and we are planning to release some cool stuff for this community. Stay tuned!

[YQ @yq_acc]

1/n Introducing https://t.co/AJoWcsM8Le - a GPT-based chatbot trained on @solidity_lang codebase and several Ethereum associated projects like @EthereumNetw , @optimismFND @arbitrum @0xPolygon @zksync, which helps devs to query technical questions around Solidity, Eth etc.

[Decurity @DecurityHQ]

We're glad to announce that our grant proposal for enhancing our @semgrep solidity rulepack has been approved by @compoundgrants.
The purpose is to develop new static analysis rules and adapt them for the Github pipelines of @compoundfinance.
We'll tweet soon about our progress!