SC Audit Studio

Expert cybersecurity consultation for decentralized finance.
Over $100,000 in public bug bounty earnings.

[SC Audit Studio @SCAuditStudio]

We decided to test @xyz_remedy glider tool and found a critical vulnerability in a privacy protocol.

Tldr: Broken Groth16 deployment leads to proof forgery, allowing to withdraw full TVL.

Read more below 👇

[SC Audit Studio @SCAuditStudio]

@akyra_0 (if you are interested feel free to check out some of our more technical publications: https://t.co/Muj0bchYWI)

[SC Audit Studio @SCAuditStudio]

@akyra_0 I agree in that case (and assuming there is real activity) its not impossible. Visa is currently valued at 600B, so half of that is realistic.

This is the reason we have also been focusing on securing canton apps lately 🫡

[SC Audit Studio @SCAuditStudio]

Must Read for anyone in web3

[oot2k @oot2k1]

We just published the most dense article on:

☣️Radiant Capital hack (Lazarus: malicious PDF)
☣️Bybit Hack (Lazarus: npm compromise)
☣️KelpDAO Hack (Lazarus: compromise + DOS)

Every developer or Auditor should read it.
Read the full article 👇

[SC Audit Studio @SCAuditStudio]

@bondoncredit @AIBC_World Congrats!

[chrisdior @chrisdior777]

DAML bugs ≠ Solidity bugs.

Found a strong resource covering 8 Daml-specific vulns, how the threat model differs from Solidity and what builders/auditors should watch for.

Must read for anyone interested in Canton’s smart contract language.👇

https://t.co/0ELu1Mu6yS

[SC Audit Studio @SCAuditStudio]

@chrisdior777 Thank you for sharing 🫡

[SC Audit Studio @SCAuditStudio]

@ZenithFdn We love zenith! But keep security in mind, to not lose the rewards :)

[SC Audit Studio @SCAuditStudio]

you can literally have a look at here to check the protocol stats about security.

https://t.co/1OddG9lfZV

[stormblessed🌩️ 💡 🗃️ @storming0x]

Don’t use or put money in platforms that don’t have a clear way for white hats to report bugs

Simple as that

There should be a defillama to easily check this

[SC Audit Studio @SCAuditStudio]

@0xmishoko @CantonNetwork True, also setting up the infra is not easy!

[SC Audit Studio @SCAuditStudio]

Apps on @CantonNetwork are currently making around 2M a day from app rewards.

I dont know any other chain that pays this much to builders

[SC Audit Studio @SCAuditStudio]

@SuontamaJulia We have been predicting trillions since 2017 😭

[SC Audit Studio @SCAuditStudio]

@hexens Same should work for MICA compliance as well!

[SC Audit Studio @SCAuditStudio]

Roughly 1/3 of exploited funds in web3 between 2021–2026 were caused by private key compromises.

And in recent months, this trend has only accelerated.

Here’s how to prevent it 👇

[SC Audit Studio @SCAuditStudio]

Report for Plether Pre-Audit just published.

Kudos to the @plether_fi team for their strong focus on upholding the highest levels of security.

[SC Audit Studio @SCAuditStudio]

Everyone still actively developing web3 applications is a goat 🐐.

Its such a huge responsibility.

[SC Audit Studio @SCAuditStudio]

What would you like to know about canton?

[SC Audit Studio @SCAuditStudio]

@katexbt @OpenZeppelin he is wrong

[SC Audit Studio @SCAuditStudio]

@amw7 Makes a lot of sense, estimates are that even a 5 USD fee prevents most AI spam without being to restrictive to real researchers.