Shebin John

Solidity Enginner @safe | Smart Contract Dev & Auditor | Ex @nethermindeth, @dynartstudio, @OriginsXYZ , @SovrynBTC & @Kleros_io

[Shebin John @Shebitweet]

A project just around 13 years old with an anonymous team becomes the official #currency of a Country.

#Bitcoin : Play it cool guys!

Just the starting point, long way to go!

[Shebin John @Shebitweet]

Self custody at scale by @safe 💪🏾

[Safe.eth @safe]

Safe's quarterly report is live.

TLDR;
Safe put up a record quarter in a market most people called bearish.
→ $6.8B in stablecoins secured in Safe, roughly 2% of global stablecoin supply.

→ 61.1M smart accounts now deployed, with 2.21M net new in Q1 alone.

→ 50.9M transactions in March, our biggest month yet.

Read all about it ↓
https://t.co/Wa58QCm22V

[Shebin John @Shebitweet]

Safenet 🔒😎

[Richard Meissner @rimeissner]

Today, we announced Safenet Beta.
Wallets today can’t stop sophisticated phishing, address poisoning or drainer scripts. And users are always one signature away from losing everything.

Self-custody is under attack and Safenet is built to defend it.

🧵Here is what we are committing to build in the coming months.

[Shebin John @Shebitweet]

Great conversation on @accountantquits about how on-chain finance teams can stay secure.

Honoured to be part of the 100th episode, congrats to @umar25mh 🚀

[Onchain Finance Institute (OCF) @accountantquits]

How do Web3 finance teams protect on-chain treasuries without slowing down operations?

@Shebitweet from @safe shows how to protect on-chain treasuries using multisig wallets, Guards, Guardrails, Fiducia, and Policy Engine, plus actionable tips web3 finance teams can implement today.

Chapters
(0:00) Coming Up
(2:42) Thank you for Episode 100
(3:41) Onchain treasury security challenges
(5:50) Safe Modules and Guards
(9:32) How Guards Work
(10:59) New feature with Spaces
(13:43)  Delegate call overview
(16:11) Guardrail protection explained
(18:28) Get 2 months for free with @RequestFinance
(20:08)  Fiducia & co-signers
(24:58) Policy Engines
(30:55) Implementing Policy Engine
(32:51) Zodiac’s Role Modifier
(34:52) Safe Research’s vision
(38:01) Other Safe projects
(39:42) Adoption hurdles
(41:25) Implementation barriers for finance teams
(42:59) Concluding thoughts
(45:35) Reach out to Shebin

[Shebin John @Shebitweet]

When @safe grows, @ethereum scales. - @rsquare

[Shebin John @Shebitweet]

@Particle_CS @adamshurwitz @NotebookLM @safe Though I did like the idea of Global Policies, which could always be run.

We have a built-in fallback mechanism for transactions without a specific policy, kind of like a catch-all.

[Shebin John @Shebitweet]

🚀 Introducing the new Policy Engine from @Safe Research Team - the next evolution of guard frameworks for smart-contract wallets.

🔍 Check it out here 👉 https://t.co/YQnZeBX8J8

[Shebin John @Shebitweet]

@Particle_CS @adamshurwitz @NotebookLM @safe Right now, chaining policies is not possible, as each policy applies only to a specific tuple (a combination of address, selector, and operation type).

We intentionally avoided it for a single transaction check to improve readability and retain the code's auditable nature.

[Shebin John @Shebitweet]

@yodl_meister @safe Hope this helps you in that: https://t.co/Kj1UOUPDHG

Special thanks to @NLordello for the quick development!

[Shebin John @Shebitweet]

Those who like video format, @adamshurwitz has created an awesome one with @NotebookLM

https://t.co/Vh0sAF8dNX

[AdamHurwitz.eth @adamshurwitz]

@safe @NotebookLM @fileverse The 16 min podcast @NotebookLM made was good. Need to watch this video to compare it too.

[Shebin John @Shebitweet]

🔐 Modular policy contracts, deny-by-default model, fine-grained control.

Want to restrict token transfers OR require cosigner on unknown calls? Done ✅

🧰 Built for power-users & DAOs – think of it as programmable guardrails for your wallet.

Safe App: https://t.co/hH3eK73qRI

[Shebin John @Shebitweet]

Can’t wait to hit the stage at #DefiSecuritySummit! 🚀

See you in Argentina! 🇦🇷

[Defi Security Summit @summit_defi]

Multisig alone cannot stop every attack.

@Shebitweet, Senior Research Engineer at @safe, will speak at DSS about Safe’s evolving guard system, and show how layered on-chain defenses enhance wallet security without hurting usability.

[Shebin John @Shebitweet]

Permissionless is the key! 🗝️

[Safe.eth @safe]

IT IS TIME TO KILL THE PRIVATE KEY

Safe Research just dropped ERC-7955: a permissionless CREATE2 factory that lets anyone deploy deterministic contracts across chains, no special keys, no GitHub issues, no waiting for team approvals.
👇👇

[Shebin John @Shebitweet]

If you want a walkthrough of the Fiducia, please watch this video: https://t.co/j8wMMJFzRD

[Shebin John @Shebitweet]

Just dropped Part 2 of our @safe Guard series, & it’s all about Fiducia - a powerful guard that gives you precise control over who your Safe interacts with & how.

If you want to take your Safe’s security to the next level, this is a must-read: https://t.co/4edggRwsl4

[Richard Meissner @rimeissner]

What’s important for collecting @safe signatures? It needs to be decentralized; It needs to be permissionless.

AND it needs to be accessible!

We used @erc4337 and @Waku_org to reduce friction when interacting with our decentralized queue.

Checkout the details:
https://t.co/CSJW47YQL0

[Shebin John @Shebitweet]

If you want a walkthrough of the Guardrail, please watch this video: https://t.co/eDjgv7ZpIM

[Shebin John @Shebitweet]

No need to fear DELEGATECALLs anymore in #safe! Guardrail is here for the rescue!

[Safe.eth @safe]

Are you using or building on Safe and worried about malicious DELEGATECALLS?

Meet Guardrail - our new project at Safe Research which introduces a simple, composable Guard that blocks unauthorized DELEGATECALLS in your smart wallet flow

Think of it this way
🔐Multisig = multiple keys to your vault
🛡️Guardrail = a security officer at the door, double-checking every transaction even after it's signed

Guardrail focuses on one high-risk area: DELEGATECALL
This opcode lets your Safe run external code as if it were its own.
Super flexible, but also dangerous if misused

Guardrail only lets your Safe DELEGATECALL into contracts on a specific allowlist.
🔐 You control the list.
⌛ New additions are time-delayed
🚨 Removals are instant
This gives you time to catch any malicious/dangerous transaction attempts

[Safe.eth @safe]

Privacy is still massively undervalued in Web3.

While others chase trends, a few are building the foundations.
Our latest Safe Research post breaks down the state of end-to-end encryption (E2EE) - a core primitive for privacy and data sovereignty that remains underdeveloped in our Web3 apps and infrastructure.

Read the article in the next tweet

[Safe.eth @safe]

Believe in somETHing
Happy 10th Birthday @ethereum!

[Richard Meissner @rimeissner]

@safe guards with cosigners make web3 more accessible and secure for users and are used by @HypernativeLabs, @getfailsafe or @blockaid_.

Varangian is a simple cosigner that you can host yourself on GitHub.

Read more about it on our blog: https://t.co/79QRs6TRiX