Slavcheww

891 posts

Slavcheww banner
Slavcheww

Slavcheww

@Slavcheww

helping protocols with security audits @SBSecurity_

📅 👉 Katılım Mart 2018
423 Takip Edilen2.1K Takipçiler
cholakov
cholakov@cholakovvv·
Another bug bounty win at @xyz_remedy , this one was a medium🔥
cholakov tweet media
English
4
2
60
2.3K
Slavcheww retweetledi
Plamen Tsanev
Plamen Tsanev@p_tsanev·
🚀Dear builders and auditors, your Claude Code sub just became a 100x audit team. Up to 95 specialized AI security agents running in one orchestrated autonomous pipeline. Fully open-source. "Plamen" is live 🔥🐉
Plamen Tsanev tweet media
English
43
32
330
64.3K
Slavcheww retweetledi
Blckhv
Blckhv@blckhv·
3 months ago, I joked that in 2026, auditors would earn $$$ from bugs AI agents miss. The joke became the market. Junior-level mistakes get exploited every day. AI is worthless without the human behind it. There is a lot of $$$ to be made as a whitehat + AI. Go grab them.🫡
English
11
3
99
3.7K
Slavcheww
Slavcheww@Slavcheww·
x.com/gondixyz/statu… x.com/gondixyz/statu…
GONDI@gondixyz

✅ UPDATE: Exploit Contained We can now confirm the situation is fully contained and no further NFTs are at risk. What our investigation found: • A limited number of NFTs were affected • The exploit was isolated to the Sell & Repay contract deployed on February 20 • All users who interacted with this contract and were impacted have been contacted directly by our team What was never at risk: • NFTs in active loans — not affected, at any point • Buying, selling, listing, accepting bids, and trades — not affected, at any point All platform activity is safe to resume, including: → Repaying, renegotiating, and refinancing loans → Starting new loans → Listing for sale, buying, accepting bids, and trades The Sell & Repay feature remains disabled while we deploy a fix. All other functionality is fully operational. Thank you for your patience and for acting quickly on our earlier guidance.

ZXX
0
0
0
76
Slavcheww
Slavcheww@Slavcheww·
🚨 @gondixyz was just exploited for $230k and the attacker immediately started selling the stolen NFTs. Around 40 NFTs were affected. Root cause is still under investigation, but no further NFTs are at risk. If you've ever used Gondi, revoke your approvals now.
Slavcheww tweet media
English
1
0
3
278
Slavcheww retweetledi
Blckhv
Blckhv@blckhv·
🚨 SolvProtocol just lost $2.7M Double-mint bug via ERC721's callback. Solidity 101 stuff. With the increasing frequency of simple exploits draining 7-8 figures, one thing is clear - we're in the era of AI-assisted hacks.
Blckhv tweet media
English
23
17
113
8.9K
Slavcheww retweetledi
SBSecurity
SBSecurity@SBSecurity_·
SBSecurity 🤝 @CabalFDN We're proud to have audited both Cabal's iUSD and Delta Neutral INIT vaults, part of @initia's native stablecoin launch. These audits mark the beginning of our long-term security partnership - helping keep Cabal's users and their funds secure.
English
0
4
10
1.2K
Slavcheww
Slavcheww@Slavcheww·
The right moment to take Web3 security seriously - before AI agents fully take over? Today. We’re already seeing how tools like Claude and trained AI agents outperform junior researchers in contests, catching most of the basic issues automatically - while many newcomers still struggle with focus and speed. Take this seriously. Work smart with AI, not against it. The AI-powered auditor is already here. You already know the best space - what’s left is to commit, adapt, and execute.
English
5
2
30
1.7K
Slavcheww retweetledi
SBSecurity
SBSecurity@SBSecurity_·
SBSecurity 🤝 @Starknet We are proud to be a @Starknet official audit provider. What does this mean for builders? If you're launching on Starknet & building with Cairo can benefit from discounted and ecosystem-funded audits - making top-tier security accessible from day one.
SBSecurity tweet media
English
1
5
8
420
Slavcheww retweetledi
Hyacinth 🪻
Hyacinth 🪻@HyacinthAudits·
Auditor Spotlight🔒 Meet @Slavcheww, an experienced Solidity & Rust auditor with a proven track record at Hyacinth. Looking to secure your protocol? Get matched with industry leading auditors today 👇 Hyacinthaudits.xyz
Hyacinth 🪻 tweet media
English
1
5
24
1.5K
BNBshare
BNBshare@bnbsharefun·
Thanks to @__Raiders for performing another strong security audit! 🤝
English
4
1
13
918
Slavcheww
Slavcheww@Slavcheww·
after quoting a 100 nSLOC project for $50k 💀
Slavcheww tweet media
English
2
2
35
1.4K
Slavcheww retweetledi
Slavcheww
Slavcheww@Slavcheww·
My thoughts on Move codebases after auditing a few last month with my team at @SBSecurity_. - It’s surprisingly hard to find truly professional Move auditors who understand the language and the specifics of each Move chain, along with the main integrated protocols/libraries. - The ecosystem is still young, but many products aren’t copy-paste from other chains. A lot of genuinely new ideas (at least from what I’ve seen). - Documentation, APIs, and reference material around MoveVM are often incomplete. You end up relying on threads and discussions across different communities to validate behavior and assumptions. - The language itself is relatively easy to learn. Really grateful to have found one of the best auditors in this space - someone with deep experience across multiple topics who can cover everything end to end. Huge thanks to @ret2basic @p4y4b13 @radev_eth 🙏
English
3
5
33
5.4K
Slavcheww retweetledi
p4y4b13
p4y4b13@p4y4b13·
Had a great time auditing with fellow auditors @ret2basic and @radev_eth. We uncovered some cool bugs. Thank you @Slavcheww!
Slavcheww@Slavcheww

My thoughts on Move codebases after auditing a few last month with my team at @SBSecurity_. - It’s surprisingly hard to find truly professional Move auditors who understand the language and the specifics of each Move chain, along with the main integrated protocols/libraries. - The ecosystem is still young, but many products aren’t copy-paste from other chains. A lot of genuinely new ideas (at least from what I’ve seen). - Documentation, APIs, and reference material around MoveVM are often incomplete. You end up relying on threads and discussions across different communities to validate behavior and assumptions. - The language itself is relatively easy to learn. Really grateful to have found one of the best auditors in this space - someone with deep experience across multiple topics who can cover everything end to end. Huge thanks to @ret2basic @p4y4b13 @radev_eth 🙏

English
2
3
15
1.6K

Keşfet

@cholakovvv @xyz_remedy @gondixyz @CabalFDN @initia @Starknet @TamayoNft @HyacinthAudits