Certora

Aave built one of the strongest security frameworks in web3 for @aave V4, and @tomer_ganor will present the core architectural choices, their threat models, and how formal verification delivers robust, scalable guarantees. 13:30, Kelly stage ethcc.io/live/kelly-sta…

Many Solidity contracts are written in ways that make them hard to reason about, but @vollmond_sterne will show how small architectural changes make contracts simpler, safer, and easier to prove correct. 13:25, Taylor stage ethcc.io/live/taylor-st…

Certora is taking the ETHCC stages on April 2nd with key talks for developers. We'll cover: ✔️ Assumptions as the root of all bugs ✔️ Real risks introduced by account abstraction ✔️ Designing Solidity contracts that are fv-friendly ✔️ Aave v4 Security Blueprint Details ⬇️

Rounding bugs are one of the most common and costly vulnerabilities in smart contracts. Today at @EthCC, @SagivMooly introduced RoundAbout, a tool designed to prevent rounding errors in Solidity. Full talk ⬇️

New plan: My @EthCC talk was supposed to be about the AI Composer. But here we are, working at 00:30 on a new presentation about a tool designed to prevent rounding bugs 😅 Join me tomorrow at @EthCC (14:55 in Redford Stage).

@CanonicalJP @tomer_ganor @aave @miguelmtzinf @imderl @_aniculae @_yan_ny_ 🫡🫡

Certora is the team you rely on if you’re really compromissed with security and want it done the right way. A great mix of tools and different researcher strategies, combined with full commitment to hardening Aave V4 to the extreme. @tomer_ganor and the whole team are the real security 🐐

I can't be more excited that Aave V4 is finally live!!! Since March last year, starting from the @aave onsite, I have been working closely with the team @miguelmtzinf @imderl @_aniculae @_yan_ny_ @ cheyenne @CanonicalJP I can't begin to explain the process behind it to make it as secure as it can be. Late night conversations, weekend discussions, going over the same flows again and again, pushing every edge case and even the edge cases of the edge cases, all to get this right and make it as secure as possible for users. This level of care cannot be taken for granted. It comes from a team that truly cares about security and is not willing to compromise. There is real innovation here, and a real commitment to doing things the right way. I am proud to have been part of this. AAVE WILL WIN👻

Tokenizing an asset is easy. Building the infrastructure so institutions actually trust it? That's the real work. Our founder @nomos_paradox joined a great panel at @rwasummit today, "Critical Infrastructure to Enable Tokenization", alongside Seth Hallem (@Certora), @flipdazed (@KeyringNetwork), moderated by @AlimKhamisa (@Optimism). Oracle verification, formal verification, compliance. The stack that makes tokenization work.

@Jokee_web3 @suilendprotocol @SuiNetwork 🫡

@Certora @suilendprotocol @SuiNetwork That's impressive! Solid foundation for future growth.

We just completed the most comprehensive formal verification on Sui! @suilendprotocol on @SuiNetwork. 18 properties proved across solvency, account health, liquidation, obligation consistency, and staking 🧵👇

@Montyly @EthCC @AptosLabs @babylonlabs_io 🫡 always hiring top SRs for top protocols

If you are at @EthCC and looking for a job, these are some of the companies hiring for their internal security you could try connecting with: - Information Security Engineer, Product - @AptosLabs : job-boards.greenhouse.io/aptoslabs/jobs… - Lead Security Engineer - @babylonlabs_io : babylonlabs.io/job-listings/l… - Blockchain Security Engineer - @coinbase : coinbase.com/en-fr/careers/… - Protocol Security Engineer - @Morpho : jobs.morpho.org/o/protocol-sec… - Security Engineer - @Offchain : jobs.lever.co/offchainlabs/5… - Head of Security - @opensea : jobs.ashbyhq.com/OpenSea/3b4058… - Lead Security Engineer - @solana : jobs.ashbyhq.com/Solana%20Found… - Security Engineer - @tempo : jobs.ashbyhq.com/tempo-xyz/361e… - Senior Security Engineer, Application Security - @turnkeyhq : job-boards.greenhouse.io/turnkeycareers… - Backend Security Engineer - @Wonderland : apply.wonderland.xyz/o/backend-secu… - Onchain Security Engineer - @Wonderland : apply.wonderland.xyz/o/onchain-secu… - Staff Product Security Engineer - @worldcoin : jobs.ashbyhq.com/Tools%20for%20… Bonus, traditional firms also hiring: - Security Engineer - @asymmetric_re : asymmetric.re/careers?ashby_… - Web3 Security Researcher - @Certora : careers.certora.com/jobs/7247521-w… - Blockchain Security Engineer - @chain_security : chainsecurity.com/jobs/blockchai… - Cryptographer - Security Engineer - @sigp_io : jobs.ashbyhq.com/sigp/7c52ea98-… - Security Engineer, Blockchain - @trailofbits : apply.workable.com/trailofbits/j/…

@0x10Shabsh @arbitrum thanks for joining 🫡

Best moment to meet fresh minds in crypto is the morning run! Thanks to @arbitrum team and @Certora team for hosting such an amazing events!!!

best way to start the morning thank you all for coming thanks @arbitrum & @Certora 🙏

Suilend and SpringSui have been formally verified by @Certora! 18 properties proved. 0 critical vulnerabilities. One more reason to trust your funds with Sui's largest DeFi protocol. Learn more 🧵

Learn more: certora.com/blog/fv-suilend

Proving system-level properties on production code requires tradeoffs: you simplify parts of the system to make verification tractable while keeping the properties intact. Choosing what to prove is most of the work, and the properties that require reasoning across the whole system are where bugs tend to hide.