Smart Contract Security and Development
EVM
Joined November 2023
- Tweets110
- Following42
- Followers414
- Likes466
Solidity Labs retweeted
The Safe UI shows you the owners it can index and stays silent on ones it can't. This talk shares learnings from scanning 2M+ Safes hunting for shadow owners and modules.
Elliot Friedman · DSS 2026
“Every Safe Is Blind to Its Own Backdoor: Scanning 2M+ Multisigs for Shadows”
Explore the talk and add it to your agenda:
defisecuritysummit.org/2026/…
Tickets: luma.com/9qtxqqxx
ALT DSS 2026 speaker announcement card for Elliot Friedman: Every Safe Is Blind to Its Own Backdoor: Scanning 2M+ Multisigs for Shadows.
Solidity Labs retweeted
Update: by the time of the talk, we will have indexed over 12,000,000!! Safes across multiple ecosystems and versions!
Solidity Labs retweeted
Announcing Forge Proposal Simulator v1.0.0 🎉
FPS is a Foundry framework for building, simulating, validating, and reviewing governance proposals before they go onchain. Governance transactions are high-stakes and often difficult to test end to end.
Next up: we're going to see what the AI auditor can find in the @forgepropsim codebase!
We also benchmarked the @zellic_io AI auditor, compared it to Certora, as well as open source models, claude, and codex.
Full results and benchmarks are available github.com/solidity-labs-io/…
The AI auditor ended up flagging a medium that two audits missed. A malicious proposal can permanently brick the timelock by setting the expiration period to uint256 max, which stops all future and current proposals from being executed.
We ran the auditor mode against the @KleidiWallet codebase benchmarked at the commit before our @code4rena audit.
@Certora recently launched their newest AI Auditor, and we wanted to try it out.
When tested against a codebase our engineers developed, it surfaced a unique vulnerability two rounds of audits missed!! Let's dive in.
Solidity Labs retweeted
@forgepropsim (FPS) was part of @TheDAOfund's Ethereum Security QF round on @Giveth, the largest QF matching pool ever.
This year FPS has been used to simulate 57 governance proposals across 4 protocols, protecting $191M in TVL. Every one reached the chain only after passing offchain testing, onchain simulation, and calldata verification.
Solidity Labs retweeted
FPS was part of @TheDAOfund's Ethereum Security QF round on @Giveth, the largest QF matching pool ever.
This year FPS has been used to simulate 57 governance proposals across 4 protocols, protecting $191M in TVL.
MIT license.
No token.
No revenue model.
Fully OSS since 2023.
Funding goes to maintenance, docs, hiring and marketing.
FPS exists because governance proposals are an often overlooked attack surface neglected by existing tooling. Incorrectly configured deployment scripts, Supply chain attacks, compromised developer machines...
These bugs don't show up until the proposal lands onchain.
@OlympusDAO made FPS mandatory for all governance proposals. Collectively, protocols using FPS govern over a billion dollars in TVL.
github.com/OlympusDAO/forge-…
Forge Proposal Simulator (FPS) is live on @giveth for @thedaofund Ethereum Security QF Round. In quadratic funding, small donations have disproportionate weight on matching.
giveth.io/project/forge-prop…
Forge Proposal Simulator is now on @Giveth for the Ethereum Security QF Round. Support open-source governance security tooling: giveth.io/project/forge-prop…
