ChainSecurity

Join us and our friends from @frankencoinzchf 🧀🍷 luma.com/maf3arn9

@StaniKulechov 🙏🙏🫡🫡

Nice assessment on Aave V4.

🚨URGENT: Blockaid's system has identified a front-end attack on compound[.]finance, and is redirecting to a malicious website. If you’re connected, please refrain from signing transactions and avoid interactions with the dApp until the issue is resolved.

@StaniKulechov @Certora @blackthornxyz @sherlockdefi @Montyly @trailofbits 🫡🫡

We would like to thank all participants across the process from audits and reviews, formal verifications, security contests, invariant testing and other tooling provided to the Aave Labs team. Special thanks to @Certora @blackthornxyz @sherlockdefi @Montyly @trailofbits @chain_security @StErMi @deadrosesxyz @enigmalabs @Kurt_M_Barry @EnigmadarkLabs for all the valuable contributions.

As part of building in public, Aave Labs is sharing our approach to smart contract security for Aave V4 with the broader DeFi community.

11/11 @aave V4 achieves a very high level of security. For the full technical system overview, trust model mappings, and our specific findings, read the complete audit report: chainsecurity.com/security-audit…

10/11 Our audits end with the "Warden Session." A fresh ChainSecurity engineer, blind to the initial review, stress-tests our findings and challenges our assumptions. This "audit of the audit" is our final layer of defense.

1/11 🧵 We just published our security assessment of @aave V4, a redesign of DeFi’s largest lending protocol. Here’s a breakdown of the new architecture, standout features, and exactly how we approached the audit.

After months of development, Mento V3 begins rolling out today. The FX layer of the internet is entering its next phase. See what's live and the full rollout plan↓

Securing keys is useless if your off-chain components can be tricked. Attackers exploit the Confused Deputy problem by spoofing EVM events or manipulating ERC-20 balances to force unintended state transitions. Here's advice from our auditors on how to secure your off-chain infra: chainsecurity.com/blog/dont-let-…