Security researcher / bug hunter. Founder @scauditstudio Senior Security Researcher @sherlockdefi Reach out for audits
ETH
Joined October 2022
- Tweets2.2K
- Following791
- Followers1.2K
- Likes4.7K
Pinned Tweet
We have been working on this for a while: run Astra and Daybreak against your codebase today.
Vulnerability research is a search space problem. Which means the more runs you do, the better the result.
So why not just run everything at once?
We built Havu because using AI for smart contract security has a new problem:
There are too many good tools.
Which model do you use?
Which security skill?
Do how many scans are enough?
And then who goes through all the duplicate findings?
So we built an aggregator.
17
20,224
I am so overexposed to tech in my life that this is either a generational play, or I will end up in the permanent underclass.
There is really no in-between.
2
42
oot2k retweeted
RWA & Tokenisation Roundtable on 17.11. Helsinki.
We're bringing together a select group of founders, asset managers, banks, CASPs and legal advisors for a closed-door roundtable focused on:
- RWA & tokenisation: institutional adoption and emerging opportunities.
- Regulation in practice: MiCA, DLT Pilot Regime and tokenised securities.
- Nordic onchain finance: licensing, custody, distribution and banking partnerships.
An exclusive gathering for those shaping the future of European finance.
RWA & Tokenisation Roundtable
The future of regulated onchain finance in Europe is being built today.
As tokenised funds, credit and other RWAs move into production, the conversation is shifting from potential to practical implementation.
We're bringing together a select group of founders, asset managers, banks, CASPs and legal advisors for a closed-door roundtable focused on:
• RWA & tokenisation: institutional adoption and emerging opportunities.
• Regulation in practice: MiCA, DLT Pilot Regime and tokenised securities.
• Nordic onchain finance: licensing, custody, distribution and banking partnerships.
An exclusive gathering for those shaping the future of European finance.
Limited seats. Moderated discussion.
Chatham House Rule.
oot2k retweeted
On the 18th, @SlushHQ hosts the largest venture capital gathering in the world.
with 0 names from web3...
Meanwhile..
Schroders, $1.1T AUM, just tokenized its emerging markets bond fund on Solana via Centrifuge.
The biggest asset managers in the world are moving on-chain. RWA's, tokenisation, institutions going where the rails already work.
EU is falling behind, so we're doing something about it.
Arcturus, @KonsensusR & @equilibrium_co are hosting an Exclusive Web3 Get-Together during wednesday 18th in Helsinki, with three topics:
- Regulation
- Tokenisation
- How we support innovators in this field
If you think Europe's seat at this table shouldn't be empty, tag the people who should be in that room and we'll see you in Helsinki.
Arcturus , @KonsensusR & @equilibrium_co are hosting a Web3 Get-Together on Wednesday the 18th in Helsinki.
Whether you're building, investing or just crypto-curious, this event is for you.
We're gathering industry leaders, founders, investors, operators and newcomers in one room.
No stage, no pitches. Just drinks, good people and interesting conversations.
Register here: luma.com/kz1noem1
(limited capacity, so hurry up)
oot2k retweeted
Together with some amazing sponsors and hosts, we are sponsoring an exclusive get-together during @SlushHQ :
luma.com/kz1noem1
Join us!
If you find critical vulnerabilities in live code:
Do not share the title.
AI will find it in minutes. Even if its already fixed.
I repeat: DO NOT SHARE INFO ABOUT IT.
2
24
965
oot2k retweeted
Crypto projects have massively laying off cryptographers in the last weeks right when cryptography becomes the strategic technology next to AI.
oot2k retweeted
If you want to get paid hacking AI applications, this is a MUST watch
44 minutes on how attackers trick AI coding agents into running unintended code and how to find those flaws
Hosted by Gray Swan during its $300,000 AI security competition
share.descript.com/view/6j2M…
oot2k retweeted
The @plether_fi audit competition is live, with $80,000 USDC for bugs in a perpetual market on a US dollar index.
It’s the first competition since Immunefi Credits launched today, and more than 700 researchers already have credits to spend.
No credits yet? You receive credits equal to the fee on any valid report you pay to submit, duplicates included.
Start hunting: immunefi.com/audit-competiti…
I am sorry that last month I only shitposted, was too busy with security work. Here is a summary:
- met some of defis largest players
- met some of the best hackers in the world (top CTF team)
- first audit with @cyfrin
- several audits with @sherlockdefi @SCAuditStudio
- LLM hacking
- together with my gf we build some armor to fight real life vulnerabilities (Halloween party)
3
27
988
Buy high sell low.
🚨 JUST IN: Nasdaq-listed Next Technology Holding says its board just greenlit selling or pledging all 5,833 $BTC it holds, citing the Binance hack and quantum computing risk.
7
235
oot2k retweeted
Excited to announce our partnership with @MeiLabs_ !
Together, we're making smart contract audits, penetration testing, and AI-powered security solutions more accessible to Meilabs clients.
Stronger security, better opportunities.
While auditing you see so many arb opportunities that I think a "hacker" market maker would not be that far off.
(eg a market maker run by ex whitehats)
making money through onchain security or onchain finance is the same thing - you define a property, and feed it to a fuzzer/solver and ask it to break the property. applies to hacking, arbitrages, and more.
in 2022 i asked for GPU-accelerated symbolic solvers, anywhere from literally running z3 on GPUs, or approximating z3's heuristics with neural networks. that would let you accelerate the solving process, and potentially explore states that the hand-written heuristics/solvers would never be able to get to and/or prove.
in 2026, this seems more possible than ever before. my talk from 2022 in the replies
7
422
At @SCAuditStudio we had the pleasure to conduct a pre audit with plether back in may. I suggest everyone to take a look at the contest.
Very innovative perpetual protocol.
