Tweet épinglé
Shebin John
747 posts
Shebin John
@Shebitweet
Solidity Enginner @safe | Smart Contract Dev & Auditor | Ex @nethermindeth, @dynartstudio, @OriginsXYZ , @SovrynBTC & @Kleros_io
Blockchain Inscrit le Şubat 2016
1.2K Abonnements2K Abonnés
Self custody at scale by @safe 💪🏾
Safe.eth@safe
Safe's quarterly report is live. TLDR; Safe put up a record quarter in a market most people called bearish. → $6.8B in stablecoins secured in Safe, roughly 2% of global stablecoin supply. → 61.1M smart accounts now deployed, with 2.21M net new in Q1 alone. → 50.9M transactions in March, our biggest month yet. Read all about it ↓ safefoundation.org/reports/q1-2026
English
Great conversation on @accountantquits about how on-chain finance teams can stay secure.
Honoured to be part of the 100th episode, congrats to @umar25mh 🚀
Onchain Finance Institute (OCF)@accountantquits
How do Web3 finance teams protect on-chain treasuries without slowing down operations? @Shebitweet from @safe shows how to protect on-chain treasuries using multisig wallets, Guards, Guardrails, Fiducia, and Policy Engine, plus actionable tips web3 finance teams can implement today. Chapters (0:00) Coming Up (2:42) Thank you for Episode 100 (3:41) Onchain treasury security challenges (5:50) Safe Modules and Guards (9:32) How Guards Work (10:59) New feature with Spaces (13:43) Delegate call overview (16:11) Guardrail protection explained (18:28) Get 2 months for free with @RequestFinance (20:08) Fiducia & co-signers (24:58) Policy Engines (30:55) Implementing Policy Engine (32:51) Zodiac’s Role Modifier (34:52) Safe Research’s vision (38:01) Other Safe projects (39:42) Adoption hurdles (41:25) Implementation barriers for finance teams (42:59) Concluding thoughts (45:35) Reach out to Shebin
English
@Particle_CS @adamshurwitz @NotebookLM @safe Though I did like the idea of Global Policies, which could always be run.
We have a built-in fallback mechanism for transactions without a specific policy, kind of like a catch-all.
English
@Particle_CS @adamshurwitz @NotebookLM @safe Right now, chaining policies is not possible, as each policy applies only to a specific tuple (a combination of address, selector, and operation type).
We intentionally avoided it for a single transaction check to improve readability and retain the code's auditable nature.
English
🚀 Introducing the new Policy Engine from @Safe Research Team - the next evolution of guard frameworks for smart-contract wallets.
🔍 Check it out here 👉 safefoundation.org/blog/safe-rese…
English
@yodl_meister @safe Hope this helps you in that: github.com/safe-research/…
Special thanks to @NLordello for the quick development!
English
@Shebitweet @safe Does that support "message signatures"? Can I restrict a safe to only sign messages of a given format?
E.g. monerium EURe redemptions: monerium requires a signature to make a EURe/SEPA redemption. This way I could restrict a Safe to only be able to offramp to my IBAN.
English
🔐 Modular policy contracts, deny-by-default model, fine-grained control.
Want to restrict token transfers OR require cosigner on unknown calls? Done ✅
🧰 Built for power-users & DAOs – think of it as programmable guardrails for your wallet.
Safe App: safe.dev/policy-engine
English
Can’t wait to hit the stage at #DefiSecuritySummit! 🚀
See you in Argentina! 🇦🇷
Defi Security Summit@summit_defi
Multisig alone cannot stop every attack. @Shebitweet, Senior Research Engineer at @safe, will speak at DSS about Safe’s evolving guard system, and show how layered on-chain defenses enhance wallet security without hurting usability.
English
If you want a walkthrough of the Fiducia, please watch this video: youtube.com/watch?v=79X4yD…
YouTube
English
Just dropped Part 2 of our @safe Guard series, & it’s all about Fiducia - a powerful guard that gives you precise control over who your Safe interacts with & how.
If you want to take your Safe’s security to the next level, this is a must-read: safe.global/blog/safe-rese…
English
Shebin John retweeté
What’s important for collecting @safe signatures? It needs to be decentralized; It needs to be permissionless.
AND it needs to be accessible!
We used @erc4337 and @Waku_org to reduce friction when interacting with our decentralized queue.
Checkout the details:
safe.global/blog/safe-rese…
English
If you want a walkthrough of the Guardrail, please watch this video: youtu.be/occ-MP98oK0
YouTube
English
No need to fear DELEGATECALLs anymore in #safe! Guardrail is here for the rescue!
Safe.eth@safe
Are you using or building on Safe and worried about malicious DELEGATECALLS? Meet Guardrail - our new project at Safe Research which introduces a simple, composable Guard that blocks unauthorized DELEGATECALLS in your smart wallet flow Think of it this way 🔐Multisig = multiple keys to your vault 🛡️Guardrail = a security officer at the door, double-checking every transaction even after it's signed Guardrail focuses on one high-risk area: DELEGATECALL This opcode lets your Safe run external code as if it were its own. Super flexible, but also dangerous if misused Guardrail only lets your Safe DELEGATECALL into contracts on a specific allowlist. 🔐 You control the list. ⌛ New additions are time-delayed 🚨 Removals are instant This gives you time to catch any malicious/dangerous transaction attempts
English
Shebin John retweeté
Privacy is still massively undervalued in Web3.
While others chase trends, a few are building the foundations.
Our latest Safe Research post breaks down the state of end-to-end encryption (E2EE) - a core primitive for privacy and data sovereignty that remains underdeveloped in our Web3 apps and infrastructure.
Read the article in the next tweet
English
Shebin John retweeté
Shebin John retweeté
@safe guards with cosigners make web3 more accessible and secure for users and are used by @HypernativeLabs, @getfailsafe or @blockaid_.
Varangian is a simple cosigner that you can host yourself on GitHub.
Read more about it on our blog: safe.global/blog/safe-rese…
English