Offside Labs

79 posts

Offside Labs banner
Offside Labs

Offside Labs

@Offside_Labs

🚀 Web3 Security pioneers | Expert security auditors & consultants | Guarded $300M+ in digital assets | @Paradigm_CTF 2023 Champion 🥇

Katılım Ağustos 2023
46 Takip Edilen1.9K Takipçiler
Sabitlenmiş Tweet
Offside Labs
Offside Labs@Offside_Labs·
We've landed the first place at Paradigm CTF 🥇 Major props to our rockstar team at Offside Labs and big thanks to the @paradigm_ctf organizers for a fantastic event🔥 Let's continue to make the Web3 universe a safer place, together! 🚀🏆
Paradigm CTF@paradigm_ctf

Official results are out! Congratulations to @Offside_Labs, @kalos_security, and @ChainLight_io for securing their position in the Top 3, as well as everyone else who participated! Additionally, special thanks (in alphabetical order) to @ChainLight_io, @cmichelio, @osec_io, @SupremacyHQ, and @zellic_io for guest authoring challenges this year. If you're interested in guest authoring a challenge for next year, please reach out.

English
5
9
102
49.6K
Offside Labs
Offside Labs@Offside_Labs·
4️⃣ Every withdrawal requires a signature from an authorized off-chain service. The on-chain contract verifies this signature before releasing any assets. If the signature doesn't match or is invalid, the transaction is rejected – no exceptions.
English
1
0
1
241
Offside Labs
Offside Labs@Offside_Labs·
We’ve officially completed a security review for @SolvProtocol. Proud to support their work building Bitcoin liquidity infrastructure on Solana.🤝
Offside Labs tweet media
English
1
1
11
3.3K
Offside Labs retweetledi
Jupiter Lend
Jupiter Lend@jup_lend·
Jupiter Lend has undergone rigorous, independent security audits from top-tier firms to ensure the protocol’s safety, correctness, and resilience. Audits Completed: • @zenith256@Offside_Labs@MixBytes@osec_io In progress: • @CertoraInc We've also open-sourced the entire codebase and will soon launch a @code4rena open audit contest.
English
8
10
62
3K
Offside Labs retweetledi
btcSOL (Moved to Zeus App)
btcSOL (Moved to Zeus App)@btcsol_co·
Laced Up and One Step Closer to Game Time btcSOL has been fully audited by @Offside_Labs, one of the leading Web3 security firms providing audits for many top protocols in Solana ecosystem, e.g., Jupiter, Meteora, etc. This process ensures the staking infrastructure and user experience of btcSOL is secure, robust, smooth, and ready for every user. Stake with confidence. Together, we’re unlocking the next level of staking on Solana. Shoot $SOL / $mSOL Score $BTC in less than 1 day 🏀
English
22
29
130
11.9K
Offside Labs
Offside Labs@Offside_Labs·
🚨GMX V1🚨 Yet another Ethereum reentrancy exploit! Keeper decreases long → sends ETH → triggers re-entry to evil contract. During re-entry: • Vault's `isLeverageEnabled=true` • Evil contract bypasses PositionManager • Opens short WITHOUT updating global price Attack: 1. Flash loan → mint GLP (6M USDC) 2. Open huge short (1.5M USDC, 100x) 3. Global size ↗️ / short price ✗ → PNL jump → AUM ↗️ 4. Burn GLP → massive profit Reentrancy strikes again!
GMX 🫐@GMX_IO

The GLP pool of GMX V1 on Arbitrum has experienced an exploit. Approximately $40M in tokens has been transferred from the GLP pool to an unknown wallet. Security has always been a core priority for GMX, with the GMX smart contracts undergoing numerous audits from top security specialists. So, in this hands-on-deck moment, all core contributors are investigating how the manipulation occurred, and what vulnerability may have enabled it. Our security partners are also deeply involved, to ensure we gain a thorough understanding of the events that occurred and minimise any associated risks as quickly as possible. Our primary focus is on recovery and pinpointing the root cause of the issue. Actions taken: Trading on GMX V1, and the minting and redeeming of GLP, have been disabled on both Arbitrum and Avalanche to prevent any further attack vectors and protect users from additional negative impacts. Scope of the vulnerability: Please note that the exploit does not affect GMX V2, its markets, or liquidity pools, nor the GMX token itself. Based on the available information, the vulnerability is limited to GMX V1 and its GLP pool. As soon as we have more complete and validated information, a detailed incident report will follow.

English
1
0
9
2.1K
Offside Labs retweetledi
r3kapig
r3kapig@r3kapig·
We would like to once again thank our gold sponsors @Offside_Labs && @osec_io for their tremendous support, as well as Google Cloud for their infrastructure sponsorship. Their assistance made our event possible
English
1
2
6
1.4K
Offside Labs
Offside Labs@Offside_Labs·
We are thrilled to be the gold sponsor of R3CTF! The game is just 10 hours away! Show off your hacking skills and compete with the world’s best hackers!👇 ctf2025.r3kapig.com
r3kapig@r3kapig

Offside Labs (offside.io) is a top-tier security team founded by legendary CTF players who have won Pwn2Own, DEFCON CTF, and other major competitions. They now leverage their expertise in Web3, securing billions in digital assets through professional auditing service

English
0
3
13
4.1K
Offside Labs retweetledi
Flash.Trade | Perps on Solana
We have successfully completed our third audit with @Offside_Labs Flash Trade is not just the fastest and cheapest but also the safest exchange on Solana ⚡️ Audit report in the link below⬇️
Flash.Trade | Perps on Solana tweet media
English
3
6
51
2.4K
Offside Labs
Offside Labs@Offside_Labs·
We're thrilled to see the relentless hard work and improvement from @JupiterExchange 🔥Keep rocking it for everyone!
⚔️ SIONG@sssionggg

The day after Christmas, we shipped one of our biggest upgrades on the Jupiter aggregator program. The project started around March with steady improvements and ended with a final rewrite on our Jupiter aggregator program. To developers and integrators on top of the program, they probably won’t notice anything, everything is backward compatible (other than the logging change, error codes remain the same). With these improvements and the rewrite, you can see the improvements yourself here: *Dune only could return the last 240 days* The graph shows the amount of CUs a Jupiter swap takes (most of it is being used by the underlying swap of any AMM, Meteora/Raydium/etc) over the course of the last year. We started steadily at around 180k CUs per swap and now we are around 100k CUs per swap. Do note that this is just an approximation since there can be many factors that are affecting the CUs being consumed per swap (single-hop vs dual hop, light CU AMM vs heavy CU AMM, etc). Any on-chain “find_program_address” is bad for CU consumption, that was the first thing we tried to remove. Around late April, we stopped using the ATA program to create the temporary wSOL account. That removed one on-chain “find_program address” call. So, any swap that is with SOL as input or output, it uses less CUs. Then, instead of using the nice macros conveniently provided by Anchor for event logging, we wrote our custom method that is backward compatible with the Anchor event logging but without the on-chain “find_program_address” call. This helped quite a lot since there could be multiple event calls per swap. This improvement was shipped around early August. In late August, we went on to improve our Solana version from 1.16 to 1.18 and our Anchor version from the very old 0.27.0 to the latest 0.30.1. Version upgrade was always painful especially when it came to Solana and how our program could be tightly coupled with other programs. We had to upgrade other programs to be on the latest version and went on to upgrade ours. There were some major changes from Anchor 0.27.0 to the latest 0.30.1 but eventually it was worth while for the effort after looking at the CU usage improvement that came with it. The final improvement was the one that took the longest time since it involved replacing Anchor from the main program with “solana-nostd-entrypoint” (github.com/cavemanloverbo…). This was an entire new rewrite with close to 100% backward compatibility (we dropped a few inactive integrations, no more on-chain transactions). We first had to have the “no-std-entry-point” framework audited (thanks to @cavemanloverboy and @Offside_Labs). Then after the rewrite of the program, we had the aggregator program audited as well. With this upgrade, CPI is a lot cheaper with a lot less CUs. This is important because our aggregator program is basically just a program that CPIs into different programs by our AMM partners. This was shipped the day after Christmas. Along the way, there were some minor improvements here and there. With the new “solana-nostd-entrypoint” upgrade, it also sets us up for more improvements down the road as well. All in all, CU improvement is important to help our users to land transactions faster and cheaper. Since the Jupiter aggregator program is also used by other products in the Jupiverse (LO/DCA/VA/Perps/Ape.Pro/etc), all these products are also benefited by these improvements as well. Obviously, this is a team effort. Thanks @PierreArowana and @beeceeman!

English
0
0
11
1.6K
Offside Labs
Offside Labs@Offside_Labs·
🎄✨ It’s Finally Here! ✨🎄 After a (very) long year, we’re excited to share… our website is live! 🎉 Take a look—it’s a little piece of us, made with love. 👉 offside.io Merry Christmas & Happy Holidays!🎅🎁
Offside Labs tweet media
English
0
1
7
1.1K
Offside Labs retweetledi
wavey cavey ∿
wavey cavey ∿@cavemanloverboy·
ecstatic to announce that solana-nostd-entrypoint has been audited by @Offside_Labs, generously funded by @JupiterExchange hyperefficient DeFi is coming to Solana...
English
16
14
124
21.3K
Offside Labs retweetledi
GooseFX
GooseFX@GooseFX1·
Your security is our priority, and that's why our GAMMA pools are now fully audited by @Offside_Labs 🔥 We have been able to protect our smart contract thanks to their insights into our GAMMA pools. A short 🧵
GooseFX tweet media
English
4
4
24
2.3K