Solidified

Solidified is one of the oldest smart contract auditing firms in the world, operating since 2017.
Part of the @SecurityOak company.

[Oak Security @SecurityOak]

New CypherTalk podcast episode is live!

Matilda Backendal joins us to break down:

🔐 Password manager security flaws
🔐 End-to-end encryption vulnerabilities
🔐 Why user-chosen passwords are still a major risk

“Crypto is all around us in daily life.”

[Oak Security @SecurityOak]

@griffgreen of @Giveth joins CypherTalk podcast:

The DAO hack might be the strangest event in crypto history.

• Funds were recovered
• ETH holders got ETC airdrops
• The Ethereum Foundation sustained itself
• Even the attacker profited

Almost everyone won.

[Oak Security @SecurityOak]

@griffgreen of @Giveth joins CypherTalk to discuss why security is a public goodand one of the hardest problems to fund in crypto.

From lessons of the DAO hack to new models like quadratic funding and @thedaofund, this conversation explores how Ethereum can better coordinate and sustainably fund security.

[Oak Security @SecurityOak]

@griffgreen of @giveth joins CypherTalk podcast to discuss why security is a public good, and one of the hardest problems to fund in crypto.

From DAO hack lessons to new models like TheDAO Security Fund, here’s how Ethereum can coordinate to stay secure.

[Oak Security @SecurityOak]

Episode 5 of CypherTalk podcast is live🎙️

On CypherTalk podcast (Ep. 5: TheDAO Security Fund with Griff Green), @griffgreen joins @beyer_st and @pumpkinGMI to reflect on the DAO hack, the evolution of Ethereum security, and why funding security is still a systemic challenge.

This ties directly to @thedaofund’s first Security Fund round, a major step toward community-driven security funding.

[Oak Security @SecurityOak]

AI doesn’t just find vulnerabilities, it exploits them.

On CypherTalk podcast (Ep. 4), @iphelix from @blockthreat joins @beyer_st and @pumpkinGMI to discuss how AI can detect bugs, decompile code, and even build exploits with surprisingly high success rates.

[Oak Security @SecurityOak]

Zero knowledge in one line: prove, don’t compute.

On CypherTalk podcast (Ep. 3), @jbaylina, founder of @ziskvm joins @beyer_st and @pumpkinGMI to explain why this mindset matters and why studying audits and known bugs is key to understanding what can go wrong.

[Oak Security @SecurityOak]

Bear markets don’t just hit prices, they hit security.

On CypherTalk podcast (Ep. 4), @iphelix, founder of @blockthreat joins @beyer_st and @pumpkinGMI to explain why economic stress leads to more hacks and how incidents like Terra & FTX show security can trigger market downturns.

[Oak Security @SecurityOak]

Old code isn’t safe just because it’s old.

On CypherTalk podcast (Ep. 4), @iphelix, founder of @blockthreat joins @beyer_st and @pumpkinGMI to explain why relying on legacy infrastructure and the “Lindy effect” is dangerous and why learning from past exploits is critical.

[Oak Security @SecurityOak]

The trade-off between privacy and security is changing.

On CypherTalk podcast (Ep. 3), @jbaylina, founder of @ziskvm joins @beyer_st and @pumpkinGMI to explain how Zero-Knowledge enables both.

With selective disclosure, you can prove correctness without revealing data.

[Oak Security @SecurityOak]

Most projects focus on preventing hacks, not responding to them.

On CypherTalk podcast (Ep. 4), @iphelix, founder of @blockthreat joins @beyer_st and @pumpkinGMI Doherty:

Have an incident plan.
Define comms.
Set up a war room.

Preparation matters as much as prevention.

[Oak Security @SecurityOak]

Security insights fade quickly if they’re not applied.

On CypherTalk podcast (Ep. 4), @iphelix from @blockthreat joins @beyer_st and @pumpkinGMI to discuss how threat intelligence can help teams stay aware and improve security practices.

[Oak Security @SecurityOak]

Old approvals can become future exploits.

“Watering hole contracts” target users, not protocols.

If you approved a contract years ago, even when your wallet held no funds, that permission may still exist today. If the contract is compromised, attackers can exploit those long-standing approvals.

On CypherTalk podcast (Ep. 4), @iphelix, founder of @blockthreat joins @beyer_st and @pumpkinGMI to explain why reviewing contract approvals is critical for Web3 security.

[Oak Security @SecurityOak]

You can’t defend against every possible attack.

On CypherTalk podcast (Ep. 4: Threat Intelligence with Peter Kacherginsky), @iphelix, founder of @blockthreat joins @beyer_st and @pumpkinGMI to explain a simple habit security teams should adopt:

Have short weekly discussions about real-world hacks.

[Oak Security @SecurityOak]

Episode 4 of CypherTalk podcast is live 🎙️

Ep. 4: Threat Intelligence with Peter Kacherginsky

@iphelix, founder of @blockthreat joins @beyer_st and @pumpkinGMI to discuss Web3 threat intelligence, evolving attack patterns, and why security teams need to think like attackers.

From operational security to AI-driven threats, the episode explores how teams can better prepare for the next wave of exploits.

[Oak Security @SecurityOak]

“There’s always this balance between privacy and security.”

But what if that trade-off is outdated?

On Episode 3 of CypherTalk podcast, @jbaylina explains why zero knowledge changes the paradigm.

[Oak Security @SecurityOak]

Privacy on blockchain is hard.

On CypherTalk (Ep. 3: Zero-Knowledge Technology with Jordi Baylina), @pumpkinGMI, @beyer_st and @jbaylina discuss a core tension:

The easiest path to privacy? Centralization.
The right path? Cryptography.
Decentralized privacy isn’t simple, but it’s necessary.

[Oak Security @SecurityOak]

People don’t value privacy… until they need it. And by then, it’s too late.

On CypherTalk (Ep. 3: Zero-Knowledge Technology with Jordi Baylina), @pumpkinGMI, @beyer_st and @jbaylina discuss why privacy should be default, not suspicious.

If everything is public, going private raises questions.

Privacy by design > privacy as an exception.

[Oak Security @SecurityOak]

When it comes to zero knowledge: “prove, don’t compute.”

On CypherTalk (Ep. 3: Zero-Knowledge Technology with Jordi Baylina), @pumpkinGMI, @beyer_st and @jbaylina explain why understanding this principle solves 90% of the work and why studying audits and known bugs is critical to understanding what can go wrong.

[Oak Security @SecurityOak]

On CypherTalk podcast (Ep. 3: Zero-Knowledge Technology with Jordi Baylina),@pumpkinGMI, @beyer_st and @jbaylina explain selective disclosure, proving eligibility to vote without revealing your identity, or interacting with Tornado Cash without exposing the original deposit address.