Catowice

Full-time cat.

Audit contests:🥇x 7,🥈x 4,🥉x 2, Judge x 10.

[CrypticDefense @crypticdefense]

@WhiteHatMage “In this top tier codebase, a top tier finding was missed by top auditors at top security firms”

[oot2k @oot2k1]

We just published a new article about an edge case that allowed to drain 100k+ from different morpho vaults as a result of the resolve hack.

There are still countless morpho vaults vulnerable to the same exploit/architectural weakness.

https://t.co/ynZfOlcZes

As soon as the next "stablecoin" goes bust, the same thing will happen all over again

[Haxatron @Haxatron1]

Hot take: the main reason why contests are dead is because they became free.

- There is less incentive to convince a customer to host a contest when you are not going to make money out of it, especially when there are more lucrative alternatives you can sell.

- There is less incentive to allocate resources to improve a product you don't earn money from.

- In addition to contests becoming free, the % going to judges has been decreasing over time, and meanwhile LLM spam has only gone up which only increases judging cost: this contest only had a disproportionate 4K judging pot, while the contest pot was 500K - and this is a complex codebase with 164K lines of code;

If perhaps 30K was allocated to 2 or 3 senior judges + a cheaper presorter (remember C4 lookouts?) which could spend more time on judging maybe the story would be different.

[Catowice @thekmj_]

@cvetanovv0 Hi mom I'm on TV🥲

[Catowice @thekmj_]

@krikoeth Smh not even 25 hours

[Catowice @thekmj_]

@pkqs90 What were you doing when I was carrying Peapods and doing Eigenlayer at the same time sir

[Catowice @thekmj_]

@0xCharlesWang Depends on whether the "state transition in between" uses (directly/indirectly read/writes)/depends on the "global state value". This is the heuristic for thinking about re-entrancy.

Fun question, where is this from?

[thisvishalsingh 🪐 Security Researcher @thisvishalsingh]

We're excited to initiate @Zippel_Labs audits, a cryptography security led by I.

ZKP's security is extremely important to build secure pillars of Privacy.

*Currently most zkVMs are not fully audited, & for them offering subsidized audits.

[Catowice @thekmj_]

@sherlockdefi @summit_defi Why wasn't it there last year I want one of these🥲

[Catowice @thekmj_]

@chrisdior777 There are duplicate valid (found by multiple people). 84 submissions are valid and rewarded, but there are 4 distinct issues in total.

The 735 is the number of non-reward submissions. 90% is still pretty high though.

[Catowice @thekmj_]

@oot2k1 Let's open a polymarket market on how many more prediction markets you're getting this year

[Catowice @thekmj_]

@philbugcatcher Why are you training an AI for free

[Catowice @thekmj_]

@banditx0x Honestly just qualifying for the IMO from a half-decent country means you're likely good enough to do a PhD in the future

[Catowice @thekmj_]

@philbugcatcher Joke's on you for using metamask

[Catowice @thekmj_]

@ihtishamSudo @immunefi :catthink:

[Catowice @thekmj_]

@crypticdefense @cantinaxyz Well done fren!

[Catowice @thekmj_]

@KhanAbbas201 @ethereum This is huge. Congratulations!

[Catowice @thekmj_]

@thepantherplus @lmanualm Cat city cat city cat city

[Catowice @thekmj_]

@0xnevi I run a community, does that mean I'm your least favorite SR