Drastic Watermelon (@DrasticWM) header
Drastic Watermelon (@DrasticWM) profile picture

core @yauditdao | SR @spearbit | cyborg @ZeroCool_AI | eth security badge @thedaofund

Joined April 2024
Photo by Drastic Watermelon (@DrasticWM)Photo by Drastic Watermelon (@DrasticWM)Photo by Drastic Watermelon (@DrasticWM)Photo by Drastic Watermelon (@DrasticWM)Photo by Drastic Watermelon (@DrasticWM)Photo by Drastic Watermelon (@DrasticWM)Photo by Drastic Watermelon (@DrasticWM)Photo by Drastic Watermelon (@DrasticWM)Photo by Drastic Watermelon (@DrasticWM)Photo by Drastic Watermelon (@DrasticWM)
Drastic Watermelon retweeted
A new security audit report for @vfat_io is now available! This review focused on Sickle Automation, their keeper layer for Sickle positions: automator permissions with per-position owner opt-ins, NFT position rebalancing, multi-position compounding, and gas reimbursement.
1
2
12
834
Drastic Watermelon retweeted
A new security audit report for @paxoslabs is now available! This review focused on Transit Station, their 1:1 same-asset order flow: backend-signed quotes, local collection, LayerZero cross-chain order routing, and privileged fulfillment from a configured want-asset source.
3
2
7
803
Drastic Watermelon retweeted
yBorg has officially kicked off! :🚀 Slides from this morning: docs.google.com/presentation… (@devtooligan) docs.google.com/presentation… (engn33r @bl4ckb1rd71) We’ll be sharing recorded presentations, course materials, and more throughout the block. Stay tuned!
3
7
2
53
2,794
Drastic Watermelon retweeted
yBorg kicks off on Monday! 🎉 While we can't accept every applicant, we're committing to sharing publicly every speaker session and all the course materials here on X as we release them, so that anyone can follow along. Notifications on! 🔔 For starters, here's the prep reading list we're sending to the incoming cohort 👇
3
4
48
1,837
Drastic Watermelon retweeted
🎉 yBorg acceptances go out today. Check your email! 📬 Huge applicant pool, so we had to make some tough calls. Didn't get in or want to follow along from home? We'll post all speaker sessions and course materials here on X as we go. 🧠 Follow + turn on notifications 🔔
1
6
9
53
12,382
Drastic Watermelon retweeted
👉️ Applications close tomorrow for yBorg - the upcoming yAudit fellowship focused on AI + blockchain security. This round we are accepting both smart contract security researchers and developers with experience building agentic systems!
5
5
21
2,198
Drastic Watermelon retweeted
If you’re a dev with experience building AI tooling, or a security researcher with interest in using AI. This may be for you. Apply now.
3
24
2,103
Drastic Watermelon retweeted
Uniswap Labs is adding a new layer to its security stack: Zero Cool Going forward, Uniswap Labs will run Zero Cool Continuous Coverage across all active smart contract repos. It’s been amazing working with this forward-thinking team throughout the rigorous evaluation process. We’ll be sharing more details in an upcoming blog post. For now, we’re excited to welcome Uniswap Labs as the newest Zero Cool enterprise customer!
24
8
4
100
11,865
Drastic Watermelon retweeted
We have three new security reports for @vfat_io 🏆 These engagements targeted Sickle's new Bridge Strategies: cross-chain flows that let users withdraw, bridge, and redeposit their farming positions through Across, deBridge, Stargate, Wormhole, and Chainlink CCIP.
4
2
14
896
Drastic Watermelon retweeted
A new security audit report for @ConvexFinance is now available! This review focused on their new voting system, allowing users to vote for DAO proposals and gauges onchain!
1
7
1
27
2,188
Drastic Watermelon retweeted
We've been running this for about 5 months now. It has truly accelerated the momentum of yAudit. Very happy with this partnership and glad we jumped in asap
1
4
18
1,169
Drastic Watermelon retweeted
We are proud to partner with yAudit. We’ll be sharing more about our collaboration in the coming days, including case studies and lessons learned.
yAudit has a secret weapon. 🤫 Earlier this year, we developed yAgent, our in-house AI auditor. We've run it on every review since March, and it's really changed the way we work and raised the bar on our security reviews. Our researchers can go deeper on the code, move faster, and explore more ideas as they go. yAgent handles the groundwork so the team can spend its time on the hard problems. The tool was built on top of the award winning vulnerabilitiy detection engine developed by @zerocool_ai. We added our own workflows, knowledge bases, and custom skills to replicate the expertise and approaches we've developed over the years through auditing DeFi's biggest protocols like Yearn, Euler, and many more. We'll be sharing more details soon, including case studies, experiences, and tips for those trying to implement AI into their security process.
1
2
19
1,152
Drastic Watermelon retweeted
yAudit has a secret weapon. 🤫 Earlier this year, we developed yAgent, our in-house AI auditor. We've run it on every review since March, and it's really changed the way we work and raised the bar on our security reviews. Our researchers can go deeper on the code, move faster, and explore more ideas as they go. yAgent handles the groundwork so the team can spend its time on the hard problems. The tool was built on top of the award winning vulnerabilitiy detection engine developed by @zerocool_ai. We added our own workflows, knowledge bases, and custom skills to replicate the expertise and approaches we've developed over the years through auditing DeFi's biggest protocols like Yearn, Euler, and many more. We'll be sharing more details soon, including case studies, experiences, and tips for those trying to implement AI into their security process.
4
12
1
55
6,481
WHERE HAVE YOU BEEN ALL THIS TIME
can we spread the fact that, in solidity, you can put a `_` wherever you want inside a constant literal so if you're doing basis points stuff, instead of having `uint MAX_BPS = 10000` or `10_000` , you can do `uint MAX_BPS = 100_00` and you'll save us from squinting so much 🙏🙏
4
258
Drastic Watermelon retweeted
New security audit report available for @CoWSwap 🔒 This audit covers their new CoW-Euler Integration, enabling atomic leveraged position management on Euler through the CoW swap protocol.
2
3
2
25
2,952
Seeing @code4rena shut down hit me like a bus. It's where I joined my first ever audit competition and studied their reports daily for years, same as many of today's security giants. I'm very grateful for all of your hard work over the years, we'll miss you dearly.
21
638