SolidProof.io Official

It’s no secret that I have a lot of friends in the Web3 space. So, of course, I might be biased in some areas or tend to be less impartial, but the fact is that I’ve even called out projects and criticized them, even though they were “friends.”

𝕏

If you haven't patched today, now would be a good time. "Pack2TheRoot" in PackageKit lets any local user install system packages without a password - and become root. Affects Debian, Fedora, Ubuntu, Rocky in default config. CVSS 8.8. Updates have been out since April 22.

Never in a million years would I have imagined this 🤯

Most projects do smart contract audits simply because the code controls real money and once it’s deployed, you can’t just fix things easily. One small bug can get exploited and drain everything, and we’ve seen that happen way too many times. An audit helps catch those issues early, but it’s not just about security. The point you want to discuss is about trust I guess, we see more and more often that projects use it as a fig leaf to shift responsibility . Users, investors, exchanges everyone feels more comfortable when a project has been properly reviewed. It shows the team actually cares about what they’re building and the people using it (For a good reason). At the end of the day, skipping an audit is basically taking a huge risk, both financially and reputation-wise. One exploit can kill a project overnight. But to answer your question properly, simply reading the report and comparing the data and facts would have solved the problem from the start, which is why I don’t understand the backlash against the auditors.