Head of Security Research & LSR @Spearbit @Cantinasecurity | Prev @OpenZeppelin
Canada
Joined September 2021
- Tweets170
- Following214
- Followers1.3K
- Likes337
So proud of this team 🔥
We spent years finding vulnerabilities before attackers did. That was the easy part.
Teams already know what's broken. Nobody has the bandwidth to close it.
Today we raised $16.5M to make Cantina the security workforce for your security workforce. cantina.review/next-chapter-…
Always a pleasure working with the @arkisxyz team. Excited to see where this goes.
Arkis has partnered with @spearbit, the security research firm behind reviews for @Morpho, @coinbase and @liquid_col to create the first fully verifiable, tamper-proof digital provenance for institutional smart contracts.
@spearbit's sign-off is required before any release reaches production, and anyone can verify it independently. arkis.xyz/blog/arkis-x-spear…
We're hiring for Lead web3 security researchers at Cantina, if you've done audits before send us your application and let's chat! 🙂
pod5.app.loxo.co/job/NDQ1MDI…
We’re putting real engineering time into getting this right. If you want to follow progress or get early access, the waitlist is in the original post.
Alireza Arjmand retweeted
Ultimate Security Games - Season 1 gallery is out!
Congrats again to team Europe @Zigtur @Montyly @GalloDaSballo and @AliceAndB0b!
Shoutout to the legends who brought the heat:
Team Americas — @0xleastwood @_Allarious @0xriptide @jonataspvt
Team Asia — @HickupH @banditx0x @0xt1moh @kamensec
Big thanks to the sponsors who made it possible:
@monad
@coinbase
@immunefi
@sigp_io
@PashovAuditGrp
Had an amazing chat with @lista_dao and @HashDit 🚀
Building Securely on BNB: Practical Lessons from Hashdit, Lista and Cantina xitter.cf/i/broadcasts/1MYxNlyWM…
I'll be competing in this 👀🔥 live from Argentina 🇦🇷
Mark your calendars, November 20th is Season 1 of Ultimate Security Games, live in Argentina.
Watch smart contracts get hacked in real time as three teams race to be first to steal the funds.
We're grateful to the sponsors who made this happen:
@monad
@coinbase
@immunefi
@sigp_io
@PashovAuditGrp
Get your tickets for the in-person event -- link in the reply.
Down for the challenge? Let's work together, anon 😎👀
Looks like one of the npm package maintainers got compromised, check your projects and stay safe out there!
Npm package maintainer got pwned and now a bunch of packages he maintains (including debug-js) have malware in them. Check your deps immediately:
github.com/debug-js/debug/is…
Full report isn't out yet, but it seems like the attacker can replace target address with its own. So check that your computer isn't affected. jdstaerk.substack.com/p/we-j…
After 2.5 years of auditing at @OpenZeppelin I'll be joining @spearbit starting next week! Really appreciate all the opportunities I got at OZ and looking forward to the future 👀
Check this one out!! Alex drops amazing content again!
Recording of the Workshop on Security Research Tools
- Check the chain
- Decompile Contracts
- Build a Critical POC (Live)
Video:
youtube.com/live/tDFA8cnHoCY…
Slides:
docs.google.com/presentation…
Great write-ups by @patrickd_de! Highly recommended for anyone looking to enhance their knowledge in the field!
I normally find retweeting my own stuff pretty cringe, but it seems like lot's of you haven't seen these yet and I honestly think they're severely underrated :P
ventral.digital/posts/2023/3…
There are many tutorials on how to become an auditor, but not as many about auditor's mindset. I personally believe a common mistake many new auditors make is 'Starting Small'. 🧵👇
While some people might want to rush into audits, and win small prizes by finding minor bugs, focusing on learning and growing as an auditor has much more return on time investment in the long run.