StevenJ

@ACai_sec 大佬也在Sherlock的Metric🫡

🤨 WTF, $7.25 bounty for a contest?! 😁 Sorry sir, it is 7.25 ETH!

Our website has officially changed to apsislab.xyz instead !

Vibe Audit Engine is live. 🔗 vibe-audit-engine.xyz The UI is just the surface. We are currently wiring a pure LLM API brain directly into our Rust revm execution muscle. The engine is compiling. ⏳ #Web3 #Security

@ACai_sec 太真实了，经常被拒，所以转去尝试开发engine，让llm配合revem，分工模拟真实 EVM 环境和链上分叉状态。感觉只有把强行燃烧出来的物理 PoC 砸在他们脸上，让他们无法否认，拿赏金的胜率才会大一点

有没有大佬可以教教我怎么挖链上合约的漏洞啊，挖到一个确定的肯定的无容置疑的不可否认的会被接受的漏洞真的太难了…

分享一个实验性的 DAG 流程审计 Skill 起因是抱着“能不能做一个调理清晰的执行流程”这个想法，尝试性地用 DAG （有向无环图）的形式构造了一个简单的审计 Skill。 介绍文章👉：mp.weixin.qq.com/s/D-OPTJxd4DJV…

@ACai_sec 感谢开源分享！最近我正好在重构自己的自动化审计引擎（偏向底层状态机和 Fuzzing 动态执行），正头疼怎么把复杂的分析步骤优雅地解耦。看到你这个基于 DAG 和数据流驱动的调度设计，让我豁然开朗！特别是把宏观业务流提取出来作为上下文的思路非常棒。同在自动化审计方向探索，希望以后有机会多交流！

Errors detected by 'Semantic Shield': • Type Conv. violations (9640) • Op. mismatches (4907/2271) In a lossless AST, these aren't just "warnings"—they're high-value entry points for auditing. Stop fighting imports; audit the math. ☢️

We didn't just fix the paths; we pierced the noise to find the debt. ☢️

Everyone thinks @Uniswap V3 math is bulletproof. But most researchers never see the underlying logic debt because they are too busy fighting environment noise. I forced Uniswap V3 core through the Vibe Audit Engine. The results were... revealing. 🧵👇

Vibe is NOT a static scanner. It’s an automated sandbox construction & $O(k)$ self-healing matrix. I just threw 100 of the top DeFi protocols at it (Uniswap, Aave, MakerDAO—including complex EIP-1967/Diamond proxies). The result? 100% successful macro-path connection. 0 failures.