Piyush Mali 🧞

Today felt special in a way I didn’t expect. I received a big payout for a bug report on @immunefi and for a moment I just sat there… quiet and overwhelmed. Not because of the money, but because of what it meant to me. I’ve been trying for months, jumping across security platforms and audit contests, earning small bounties that never felt real. It often felt like I was grinding without direction, wondering if any of it truly mattered. But today, it finally did. This payout felt like more than a reward. It felt like a reminder that the late nights, the doubts, the persistence, the moments I questioned myself, none of it was wasted. I’ve grown, and I’m on the right path. Thanks to @immunefi for creating a space where effort and curiosity actually get recognized. To anyone grinding silently, unsure if your breakthrough will ever come… it will. And when it does, it hits differently. Onwards.

senior devs cant communicate their expertise because they compress years of failure into instinct and then get frustrated nobody else has the same instinct. the knowledge isnt hidden. the failure log is.

Today, we're announcing that Immunefi is partnering with @code4rena to onboard their bug bounty customers to our platform following Code4rena's decision to wind down operations. Code4rena played a huge role in shaping crypto security, and they deserve real recognition. As they wind down, our focus is to make sure every protocol continues to receive top-tier security. We're working hand-in-hand with the Code4rena team to make the transition as smooth as possible. Protocol teams onboarding to Immunefi will get: * Access to the largest and most elite whitehat community in crypto * Professional triage and mediation, battle-tested across $135M in bounties paid * Dedicated migration support to port over scope, rules, and reward structures And to every C4 warden: we want you here. You've been the backbone of one of the most respected security communities in crypto, and your work has made this industry materially safer. Come join us in continuing that mission. We're committed to picking up the banner Code4rena raised around improving the whitehat experience. A sincere thank you to the Code4rena team for trusting us to carry this forward, and for putting their customers' security first throughout this process. The industry is better for what they built. Onward.

🤯CODE4RENA SUNSETTING. THE END OF AN ERA Thank you for everything, code4rena, forever in our hearts <3

agent memory is still duct tape

hot take: most AI-assisted dev workflows are slower than people admit because the debugging loop on AI output is not accounted for. you saved 20 mins writing it. you spent 45 mins figuring out why it almost works.

The teams winning with AI coding agents aren't the ones prompting faster. They're the ones who defined what 'done' means to include the reasoning, not just the result. Worth reading the HN thread on this, the comments are more honest than most blog posts. news.ycombinator.com/item?id=480892…

Velocity and maintainability aren't opposites. But right now most teams are measuring one and ignoring the other. The debt doesn't show up in your sprint review. It shows up when a new engineer asks why this module exists and nobody has an answer.

why AI coding agents increase maintenance costs

criminal hackers used AI to find a major software flaw. so the red team just automated. the blue team is still writing runbooks manually. that gap is the whole problem in one sentence.

the supply chain is the attack surface now

The honest answer is that most wallets will not ship this in 2026 because it adds complexity and their users dont ask for it. But the next wave of embedded agents signing transactions autonomously absolutely needs it. An agent that trusts an RPC is a liability.

The Bandersnatch curve work on EthResearch is adjacent here. Faster elliptic curve operations built over the BLS12-381 scalar field means proof verification gets cheaper inside the EVM itself. Native proof verification is being discussed as a precompile.

The proof size matters. A single account proof in Ethereum is roughly 600 bytes to 1.5kb depending on trie depth. Storage slot proofs add another 500 bytes. For a DeFi swap touching 4 to 6 storage slots, youre verifying maybe 6kb of proof data locally. That is fast.