📕Bookmark this if you’re serious about smart contract security. HackViz lets you learn from real-world exploits through interactive attack flows, timelines, token flows, mitigations, and quizzes. Study how protocols got exploited. Understand why it happened. Learn how to break things better. hackviz.shredsecurity.io

We’ve completely redesigned our audit report template. Cleaner structure. Better readability. More polished presentation. Our latest RateHopper audit is the first report using the new format, built to make security findings easier to understand and navigate. It also includes: • Deployment parameter verification against our checklist • AI-assisted, human-verified fuzzing suite report Both are included at no additional cost with every DeFi audit. We’ll be using this redesigned template across all our upcoming audits. Read the new report ↓ github.com/Shred-Security/au…

5 incredible researchers joined our Researchers Network last month. All of them are senior security researchers with proven track records and deep experience across different areas of Web3 security. Our goal is to match the right researcher to each codebase based on its requirements, architecture, tech stack, and complexity, bringing specialized expertise to every audit we perform. Meet the team: shredsecurity.io/team Tell us about yourself here: shredsecurity.io/careers

We’re really grateful to @thedaofund and @griffgreen for this incredible opportunity for HackViz. We’re excited to keep building and make real-world exploit learning more accessible to the Ethereum security community. Thank you for supporting what we’re building.

Shred Security's HackViz × @thedaofund HackViz is now listed as an initiative on The DAO Fund, supporting Ethereum security through interactive, real-world exploit learning. We’re building more than an exploit database — we’re working toward a deeper security learning & research platform for researchers, builders, and the wider Ethereum ecosystem. With the funding, our focus is to: • Expand the real-world exploit library • Build interactive learning modules and challenges • Develop security research & analysis tooling • Improve the platform and developer experience • Expand coverage across protocols, chains, and vulnerability classes • Keep the core learning experience open and accessible to the ecosystem Read the full initiative and our plans: initiatives.thedao.fund/init… Explore HackViz: hackviz.shredsecurity.io/ GitHub: github.com/Shred-Security/ha… If you believe practical exploit education can help make Ethereum more secure, consider supporting HackViz through The DAO Fund. 🫡

How a shred audit runs: shredsecurity.io/audit-proce…

Together with @kvazar_ai, we analysed the root cause and just updated the full technical breakdown of @COLDCARDwallet incident on HackViz: hackviz.shredsecurity.io/hac… If you are using COLDCARD wallet, Prioritize these steps: • Don’t send funds to another address derived from the same seed → The seed is the problem, not the hardware wallet • Update to the fixed firmware first → Do not generate a new wallet until you’re on the patched firmware • Generate a brand-new seed → A firmware update does not repair an existing vulnerable seed • Transfer your BTC to addresses derived from the new seed → Importing the old seed into another wallet doesn’t help, the weakness follows the seed. • If you originally created your seed with sufficient physical dice entropy (50+ private rolls), you’re not affected by this specific RNG flaw. If you’re unsure, migrate anyway. Move your funds before spending time investigating whether you’re affected. If someone in your family or friend group uses a COLDCARD wallet, tag them or send them this post.

Link of the report: github.com/Shred-Security/au… Learn more at: shredsecurity.io