Blackscale @blackscale_

⚓ solidity super c̶o̶d̶e̶r̶ auditor Joined March 2018

Tweets

439
Followers

83
Following

832
Likes

841

Jeff Security @jeffsecurity

a year ago

Reproduce ZKP vulnerabilities. This repo includes 89 vulnerabilities in the following DSLs: I’d appreciate a retweet, spread the knowledge 🫡 github.com/zksecurity/zkb…

1 29 113 5K 118

View Details

Klaas @forgebitz

a year ago

lots of vibe coders are going to learn the difference between authentication and authorization it's not a fun thing to learn the hard way

176 221 6K 621K 1K

View Details

PSA: Please don't fork Aave's codebase and launch it on a new chain. You are very likely to get hacked if you do. It can look very tempting: there's a new chain, and you see that no lending market is available. Fork Aave, onboard all the top assets, set whatever risk parameters you want, launch a governance token, profit $$$. However, building a lending market is hard. Forking and working with Aave's codebase is even harder if you don't have the right experience. Teams vastly underestimate the complexity of maintaining and securing a lending protocol. I'm pretty confident there are blackhats specifically targeting Aave forks. Don't get rekt 🫡

16 18 263 34K 46

View Details

0xSmartContractSamurai ⚔️ @0xSCSamurai

a year ago

Web3Sec is tough as FCUK. Most beginners quit. 90%-99% joining every year, QUIT. Remind yourself of this fact whenever necessary. And then, double down and grind on. Bugs dont find themselves... This is *not* an April Fool's joke. 👊

8 12 130 5K 24

View Details

0xbow.io @0xbowio

a year ago

gm Ethereum ☀️ It is our great honor to announce the mainnet launch of Privacy Pools! ETH users can now achieve on-chain privacy, while still dissociating from illicit funds It is now up to all of us to Make Privacy Normal Again 🫡 More info in this thread 👇

115 391 2K 415K 572

View Details

Luca Beurer-Kellner @lbeurerkellner

a year ago

👿 MCP is all fun, until you add this one malicious MCP server and forget about it. We have discovered a critical flaw in the widely-used Model Context Protocol (MCP) that enables a new form of LLM attack we term 'Tool Poisoning'. Leaks SSH key, API keys, etc. Details below 👇

72 390 2K 380K 2K

View Details

Hardhat @HardhatHQ

a year ago

Hardhat 3 adds stack traces to your Solidity tests experience, and the paths are clickable! ✌️👷 Check out the alpha release hardhat.org/hardhat3-alpha

4 12 76 6K 11

View Details

Bloqarl | Zealynx @TheBlockChainer

a year ago

You don’t need to be a genius to be a great security researcher. You need a sharp eye, relentless curiosity, and the patience to dig deeper than others.

3 11 128 5K 13

View Details

Martin Marchev @MartinMarchev

a year ago

Lots of bugs in smart contracts don’t come from complex math. They come from confusion. Confusion starts with poor naming. Clear naming = easier audits, fewer bugs and faster dev speed. ‘Meaningful names’ is the first chapter in Uncle Bob’s classic Clean Code for a reason.

4 7 111 4K 7

View Details

Georgios Konstantopoulos @gakonst

a year ago

I'm looking for an API that I can call `/onramp?address=0x1234&chain=1&applePayPaymentInfo=...`. User Pays Apple Pay, gets paid stablecoin. Headless, no KYC for <$500 lifetime value of the user. Acceptance rate >60-70% (hard with crypto :/). Who's building this?

83 12 329 213K 190

View Details

Tay 💖 @tayvano_

a year ago

🚨 There are some crazy threat actors lurking among us This guy “Nick” has a year+ persona, is hanging out in the infamous ethsec tg, and has multiple long-running dms open with multiple (legit) security researchers. If you opened his “PDF” pls turn off your computer NOW.

Anton Bukov (e/acc)🦇🔊 @k06a

a year ago

0 3 54 182K 5

33 107 672 198K 162

View Details

tanuki42 @tanuki42_

a year ago

Meet Nick Franklin @0xNickLFranklin - Blockchain Security Engineer…. or RGB operative hacking for DPRK? Seemingly this guy has had the entire industry fooled for years.

27 64 329 118K 126

View Details

0xFrankCastle🦀 @0xcastle_chain

a year ago

For those asking which protocol to shadow audit or if they can practice on a previous codebase I’ve audited, you should focus on the highest-quality codebases to understand what secure code looks like. 🫡 Native Rust 🦀: github.com/raydium-io/ray… Anchor⚓️: github.com/raydium-io/ray…

0 16 137 5K 129

View Details

ₕₐₘₚₜₒₙ @hamptonism

a year ago

I’m addicted to learning because the right information can change your life.

39 628 6K 144K 2K

View Details

0xaudron @0xaudron

a year ago

Auditing Perpetuals ? Checkout this reports - codehawks.cyfrin.io/c/2024-07-zaros - codehawks.cyfrin.io/c/2025-01-zaro… - code4rena.com/reports/2024-0… - code4rena.com/reports/2024-1… - audits.sherlock.xyz/contests/219/r…

3 15 111 6K 149

View Details

Jyte_web3 (❖,❖) @JyteTechNft

a year ago

If you're a Solidity dev looking to level up (and not get roasted in audit reports 😅), take 10 minutes to read through this. You will be glad you did! 🤝 -- rareskills.io/post/solidity-… --@RareSkills_io

1 8 61 2K 53

View Details

Hardhat @HardhatHQ

a year ago

Tests written in Solidity alongside good ol’ Solidity stack traces 👷‍♂️ Check out the Hardhat 3 alpha hardhat.org/hardhat3-alpha

4 15 105 10K 16

View Details

zack @zack_overflow

a year ago

I made a regex visualizer/debugger which lets you visually understand the finite state machine representation of a regular expression And added gratuitous explosions and particle effects of course Made with Zig + sokol

102 314 4K 243K 2K

View Details

Jeff Security @jeffsecurity

a year ago

Cross-chain reentrancy with example: ackee.xyz/blog/cross-cha…

6 12 70 4K 58

View Details

FFmpeg @FFmpeg

a year ago

FFmpeg makes extensive use of hand-written assembly code for huge (10-50x) speed increases and so we are providing assembly lessons to teach a new generation of assembly language programmers. Learn more here: github.com/FFmpeg/asm-les…