builder @soliditylab
SF - Building on the EVM
Joined September 2018
- Tweets2.4K
- Following917
- Followers1.8K
- Likes35.7K
Pinned Tweet
Either you write your invariants, or the blackhats write them for you medium.com/@elliotfriedman3/…
I'm incredibly honored to be moderating a panel on wallet security at DSS this year.
Excited to support @EFDevcon with DSS101, our Community-led Session (CLS) at Devcon in Mumbai on 3 November!
Explore wallet security, AI, incident response and Web3 security.
Devcon admission required. Details:
xitter.cf/EFDevcon/status/211208…
ALT DSS at Devcon. Community-led Session, 3 November 2026, Mumbai. Four panels from 13:15 to 17:00 IST: AI, the state of Web3 security, wallet security and incident response. Devcon admission required, separate from DSS on 1–2 November.
Ξlliot retweeted
Founder @pablosabbatella will be leading the OpSec & Physical Security roundtable at the @ethereumfndn Forward Defence Summit!
On Nov 4th, come join the conversation as AI brings new challenges and attack surfaces: what will they look like, and what should we be preparing for now?
Limited seats, approval-only: luma.com/vwmfpmaz.
Hosted by @safe and @lidofinance.
Supported by @ethereumfndn.
there will be a difference in the future between products where engineers used AI vs didn't.
it's the difference between Facebook messenger and Signal.
The Safe UI shows you the owners it can index and stays silent on ones it can't. This talk shares learnings from scanning 2M+ Safes hunting for shadow owners and modules.
Elliot Friedman · DSS 2026
“Every Safe Is Blind to Its Own Backdoor: Scanning 2M+ Multisigs for Shadows”
Explore the talk and add it to your agenda:
defisecuritysummit.org/2026/…
Tickets: luma.com/9qtxqqxx
ALT DSS 2026 speaker announcement card for Elliot Friedman: Every Safe Is Blind to Its Own Backdoor: Scanning 2M+ Multisigs for Shadows.
if you're sitting on an asset that's marked up 1,000,000x in 5 years, take some chips off the table. let someone else figure out the DCF
Stay safe out there frens
My spy-implanted ledger came from Malaysia, and had flawless shrink wrap. Even opening it, at first you don't see the implant which is cleverly hidden where the screen's padding is supposed to be.
Follow Ledger's guidance to check yours: support.ledger.com/article/4…
Ξlliot retweeted
Security Update: We are responding to a security incident affecting part of our infrastructure.
At this time, we have identified no immediate threat to MetaMask wallets.
As a precaution, we are proactively exiting affected validators within our non-custodial staking operations, in coordination with clients, partners and security advisors.
We’ll share further updates as appropriate. metamask.io/news/user-update…
Huge win for crypto! Congrats to the OZ team!
Today we are announcing that S&P Global has entered an agreement to acquire OpenZeppelin.
Onchain finance is growing from an emerging market into core financial infrastructure, and the standards and rails our team and community built are becoming the rails of global finance. OpenZeppelin smart contracts facilitated over $37 trillion in value transferred, with the vast majority of the largest DeFi protocols, blockchain networks, stablecoins and tokenized funds relying on them.
With S&P Global, we expect to accelerate the impact of onchain finance, backed by more than a century of trust in global markets, benchmarks, and risk frameworks.
To our clients and to all the users of OpenZeppelin open source tools:
• OpenZeppelin Contracts and all our open source applications and tools remain open source, free, and publicly maintained on GitHub. Building open source standards stays a core priority.
• Audits, engineering work, and ecosystem programs continue with the same team, brand, quality, and customer experience, with what will be the added benefit of S&P Global's research capacity, market data, and institutional reach.
For the last decade, OpenZeppelin has set the security standard for onchain finance. Today begins a new chapter for that mission, together with one of the most trusted names in global markets.
Read the full announcement: openzeppelin.com/news/spglob…
Ξlliot retweeted
Onchain security is everyone’s problem and nobody’s job.
ETHSecurity Initiatives is how we are changing that.
Propose the work. Fund the work. Build the work.
initiatives.thedao.fund/
Ξlliot retweeted
I'm tracking 23 hacks this week. There are definitely more that no OSINT monitoring platform caught.
SEAL (god bless them) could handle just 3(!) protocol compromises along with 58 other private key, DPRK, social engineering, and other incidents.
The rest were left to fend for themselves, probably with no security team, no prior IR experience.
The DeFi security industry needs to at least 10x for us to have a chance. Until then we are getting slaughtered.
The documentation has been completely rewritten around the real workflow, from installation and proposal authoring to fork simulation, validation, calldata review, and onchain submission.
Docs: docs.forgeproposalsimulator.…
If you build, audit, or sign governance proposals, I’d love for you to try @forgepropsim v1.0.0 and share your feedback.
GitHub: github.com/solidity-labs-io/…
