Paulius

@evmchronicle_io make it better than Codeslaw

EVM Chronicle now lets you search contracts or code by pattern. Not just by keyword. It can do pattern search too. Paste lines of Solidity, and Chronicle can search for similar patterns across contracts in its database.

@moo9000 @pashov @trailofbits @cyfrin @0xKaden @QuillAudits_AI @archethect x.com/forefy/status/…

Claude Code skill files for smart contract auditing @pashov: github.com/pashov/skills @trailofbits: github.com/trailofbits/sk… @cyfrin: github.com/Cyfrin/solskill @0xkaden: github.com/kadenzipfel/sc… @QuillAudits_AI: github.com/quillai-networ… @archethect: github.com/Archethect/sc-… Did I miss any? 🧐

Keeping up with Web3 hacks is chaotic You need to monitor: - @CertiKAlert - @SlowMist_Team - @realScamSniffer - @CyversAlerts - @Phalcon_xyz - @HypernativeLabs - @guardrailai - @blockthreat - @RektHQ - dozens of security researchers on X Everything is scattered. So we built QuillMonitor. An AI agent that tracks security alerts across the ecosystem and pushes real-time hack alerts into one feed. Each alert includes: • exploit summary • impacted contracts • mitigation notes • links to the original researchers / alert sources All discoveries are credited to the original researchers. QuillMonitor simply aggregates signals into one place. 🚨 t.me/QuillMonitor / @ QuillMonitor

A few words about my condition, my health, and how my treatment is going. The initial diagnosis of a brain tumor was not confirmed (although benign cysts were found), but I am continuing treatment for POTS, asthma, lymphadenitis, tachycardia attacks, and hypertension. I have already spent almost $50,000 on treatment, which is almost all of my savings. I am also waiting for another MRI to double-check my brains. I would like to share my story, hoping to find people with similar symptoms and learn a little more about treatment so I can ask my doctor about it. I'll start with the fact that on June 24, 2024, I suddenly started to suffocate (air hunger) and feel oxygen deprivation. It was terrible. I thought I was going to die. My palms were cold, my heart was racing (up to 160 bpm), and my stomach hurt. I managed to call an ambulance, and when they arrived, they did an ECG and measured my oxygen saturation. They said that I apparently had vegetative-vascular dystonia and a panic attack. They recommended that I take glycine. They also took me to the hospital, where I had a CT scan of my lungs, and then they sent me home. After that, I went to see a neurologist, who diagnosed me with somatoform disorder. Then I developed a terrible feeling of anxiety that still haunts me to this day. I developed restless legs syndrome, I am very afraid for the future, and I am very afraid that I will suffocate again. Anyway... I went to other private doctors, a cardiologist, a pulmonologist, an endocrinologist... They found asthma, gastritis, and some other problems that, in theory, couldn't cause such symptoms. I spent a huge amount of money on all the doctors and had a CT scan of my lungs, an ultrasound of my heart and neck vessels, and a huge number of tests... It's just awful... I should mention that I'm only 27 years old and was 26 when these symptoms started. Since I had recently had COVID-19, I thought I might have a blood clot or POTS... So I had an X-ray and other tests done. Cardiologist tested me and determined that my resting heart rate was 65-70, but when I stand up, it reaches 110-120. So, I was diagnosed with POTS. However, as treatment, they prescribed cytoflavin and meldonium which has no scientific evidence of its effectiveness. I think my doctor doesn't really believe in this diagnosis, so he sent me to a psychiatrist when he heard from me that I was afraid of forgetting how to breathe and similar things. I went to the psychiatrist and he prescribed me escitalopram and diagnosed me with depression and CPTSD. He also advised me to do EMDR, which I have just started. On June 23, 2024, I was a perfectly healthy 26-year-old guy, but by June 25, I felt like I had lost almost all of my health. It was just awful. I want to do a few more tests to find out for sure whether there are any blood clots in my lungs (although the CT scan showed that there aren't any) using rarer diagnostic methods such as lung scintigraphy through inhalation of radioactive gas. But anyway, time is passing... And the anxiety remains. If you have acquaintances who have experienced similar symptoms, or if you yourself have encountered them, please DM me... perhaps I am overlooking something. Also, if you would like to help me with a donation, I would be very grateful and will return all the money once I finally overcome my illness, whatever it may be. I hope to return to my work schedule, write articles, and do more scientific work.

We are seeing a new BIG wave of Telegram accounts takeovers (thousands hacked daily). We are highly suspicious but can not prove it yet, that this is happening because SMS with auth codes sent by Twilio are being intercepted by multiple threat actors at the Tiers level (as we discovered in march 2025). - In the meanwhile, the way to protect from this is very simple: Settings > Privacy and Security > Two-Step verification: turn it on, write it down and configure a secure email. - If your Telegram account is hacked, you are NOT gonna get it back and also all your contacts and conversations are gone forever (unless you are a high-profile). Stay safe

@pashov @developerjordy

🚨Ethereum Developers: you can now install your first AI Auditor in 1 minute - fully autonomous, available 24/7, with multiple sub-agent helpers. Open Source. FREE to use (with your AI model) and already finding vulnerabilities in smart contracts. Link below🫡

🚨FREE AUDIT + GIVEAWAY🚨 If you're building a Solidity protocol and want to protect your protocol and the users that trust you, you're in the right place. We're exclusively opening 1 slot for a FREE audit. • Your protocol should be solidity-based • The codebase contains fewer than 1,000 nSLOC. ✉️ How to apply Like this post, DM us on X, or reach out via Telegram. 🎁 We're also running a giveaway 100 USDC is going to 2 winners who follow us, repost and like this post. This initiative ends in 72 hours, after which we'll pick all the winners at random. Good luck everyone! 🍀

‼️ Foom team published a public bounty challenge on Bitcointalk (~500k in $FOOM on Base network, with the only rule being "THE ONLY RULE IS CODE." If you drain contract, the funds are yours. @duha_real successfully exploited it. Legitimately. In scope. On the Base network as stated. And now ? Foom team is asking for a 90% restitution. Nothing in the challenge terms mentions any restitution. No deadline. No partial return clause. They wrote "if your code can take the funds, YOU’VE WON." 👈 In short, Foom team is not respecting their own contract. @duha_real is legally within his rights to keep all of the Base network funds. This is a public unilateral commitment. Terms are clear and verifiable on-chain. When you launch a bounty challenge with no restitution conditions, you accept consequences. #new" target="_blank" rel="nofollow noopener">bitcointalk.org/index.php?topi…

The infrastructure is live. FHE is in production. Now we build. The Zama Developer Program is back with 3 tracks: - Builder Track: build dApp demos on the Zama Protocol - Bounty Track: create templates, tooling, and ecosystem resources - Startup Track: support for early-stage teams building on Zama zama.org/post/zama-deve…

Introducing the Arbitrum Mentorship Program. An eight-week program starting April 13th, where 15 early-stage teams get access to: - A clear path from idea to launch on the Arbitrum platform with infra guidance, ecosystem support, and distribution channels - Hands-on mentorship from leading Arbitrum ecosystem teams and builders like @RobinhoodApp Chain - Curated investor access with sessions and warm intros to top venture firms Plus, a chance to win a share of $100K in awards at Demo Day. If you're an early-stage team at MVP, pre-seed, or seed, apply today: tally.so/r/aQdj2W

Introducing SolidityGuard.org — an advanced @ethereum @solidity_lang /EVM security auditor open sourced and for free. 104 vulnerability patterns. 8 tool integrations. 100% detection on DeFiVulnLabs + @paradigm CTF benchmarks. Try it free: solidityguard.org

One thing I’ve realized recently is that for a Web3 security researcher, focus is real leverage. Right now there’s FOMO everywhere — Ethereum, Move, Solana, formal verification, AI, infrastructure, cross-chain, ZK. The same applies to formats: contests, private audits, bug bounties. Trying to keep up with all of it doesn’t make you stronger, it just fragments your attention. I’ve been there myself. At one point, I tried to improve my lending protocol audits, learn Sui Move, and keep grinding contests at the same time. None of it compounded. It just burned. Even small overloads tend to add more irritation than real value. Choosing a direction has to be intentional. Your background matters more than trends. My math background, for example, helps me reason faster about deterministic state transitions and protocol mechanics. Someone coming from Web2 security will likely be much stronger in infrastructure or cross-chain audits — and that’s perfectly fine. Don’t chase what’s “hot”. Pick what actually fits you, and go deep enough to become hard to replace. For me, that means focusing on Ethereum / EVM smart contract and infrastructure security, and only later expanding toward ZK. It’s not an exotic choice, but it’s a space where I see real depth, long-term relevance, and enough room to become genuinely good. Once you clearly understand your real area of focus, the next step is simple: you just start working relentlessly in that direction. I made a final decision about my path as a Web3 security researcher around November, and since then I’ve been consistently auditing Solidity codebases — both privately and publicly — across a wide range of Ethereum DeFi protocols. That density of exposure changed everything. A year ago, it took me around two full days to understand and start auditing ~1000 SLOC. Today, I can usually do that in a day or less, depending on complexity. The same applies to how quickly I identify vulnerable areas in the code. That’s what actually makes you a professional in a niche. You don’t get there by just learning theory — you get there by committing time, building intuition, and consciously giving up other directions.

@PatrickAlphaC @Agent4rena_NM

Start building AI bots to attack smart contracts. We got something coming for you.

🚨 Our annual Solidity Developer Survey is live and we want your input. Take 5 minutes, shape the roadmap, and help us prioritize language design, performance, and developer experience improvements. Fill it out here → solidity.survey-research.net/solidity-survey ✨ Bonus: participants can opt in to win a DevCon 2026 ticket.

We’re hiring Security Researcher Interns for Kann Audits! Interns will be paid weekly and should know at least one of Solidity, Rust, or Move. We’re looking for highly motivated hustlers eager to grow. Given how hard it is for new talent to get recognized, we’re launching our first official internship program to help interns build real portfolios, collaborate with others, and level up their skills. Apply here:docs.google.com/forms/d/e/1FAI… After applying, comment ‘Applied!’ below 👇

🚨HOW CRYPTO LAUNDERING ACTUALLY WORKS IN 2026. 🚨 There’s a lazy myth that mixers make funds untraceable. At scale, that’s false. For groups like Lazarus Group, mixers are a liability. The real game is chain hopping. 1. Don’t hold censorable assets ETH and stablecoins are bad long-term storage. USDT and USDC can be frozen by issuers. Ethereum can be censored at the validator level. Bitcoin remains the only true bearer asset. 2. Bridges are the danger zone Moving size from EVM chains to BTC is risky. Most “decentralized” bridges are just multisigs. Push $10M through one and the team has time and incentive to freeze it. 3. Use protocols, not operators That’s why advanced actors migrated to THORChain. No custody. No approvals. The bridge itself becomes a permissionless conversion layer into native BTC. 4. Exit off-chain, at a cost Once in Bitcoin, the on-chain trail fades. Dirty BTC gets sold via opaque OTC desks, often in China or SE Asia. Inventory clears at a 15–20% discount. That spread is the price of risk.

We finally have an EVM storage tool that is easy to use and reads storage slots from on-chain contracts. Very useful for auditing and debugging, and eliminates all the manual work required (after evm.storage was taken down). Check it out evmchronicle.io

@PashovAuditGrp lfg

🚨JUST IN: Pashov Audit Group🤝Discord Welcome to our new community with technical topics around security, AI and dev. We live and breathe web3 technologies🫡 Join, RT and comment below for a chance to win 3x full-year Claude/GPT subscriptions👇 discord.gg/pashovauditgro…