Automated smart-contract auditing platform by @credshields
Joined June 2022
- Tweets3.7K
- Following56
- Followers5.2K
- Likes2.7K
SolidityScan retweeted
Our security audits are in. 🔎
Surge got a full-stack review, not a single-contract audit:
@reardencode: Bitcoin, the DCN and the relayers
@CredShields: the EVM smart contracts on Base
Both reports published in full. Every finding, every severity, every status. 👇
SolidityScan retweeted
On April 1, 2026, $285 million left Drift Protocol in 12 minutes.
The attack didn't start on April 1. It started in Fall 2025.
Here's what actually happened 🧵
SolidityScan retweeted
Smart contracts don’t fail randomly. They fail in patterns. The OWASP Smart Contract Top 10 defines those patterns.
Use the Top 10 to
> Threat-model before you ship
> Lock down privilege and upgrade paths
> Encode invariants as tests
> Secure every external boundary
SolidityScan retweeted
Day 4 – Calling all bug hunters
The #FindTheBug challenge continues.This one might trick you.
Find the bug and share the correct answer below
Win $500 worth of free access to SolidityScan
SolidityScan retweeted
Day 3: Calling all bug hunters
The #FindTheBug challenge continues. We’ve made this one a bit harder let’s see who gets it right.
Find the bug and share the correct answer below
Win $500 worth of free access to SolidityScan
SolidityScan retweeted
The @owasp Smart Contract Top 10 2026 is here.
If you build, audit, or operate smart contracts, this should be part of your security baseline.
This update reflects how risk is actually materializing across live blockchain systems. Categories have been refined, priorities adjusted, and upgradeability and arithmetic risks formally recognized.
Use it to:
• Guide secure architecture decisions
• Structure internal reviews and audits
• Align engineering and security teams on risk prioritization
• Map controls across your SDLC
scs.owasp.org/sctop10
SolidityScan retweeted
Calling all hunters
The #FindTheBug challenge is here. Find the bug and share the correct answer below
Win $500 worth of free access to SolidityScan
SolidityScan retweeted
CredShields and @SolidityScan are proud to contribute to the release of the @owasp Smart Contract Top 10 2026.
OWASP Smart Contract Top 10 defines the primary contract-level failure patterns that repeatedly lead to loss in blockchain systems.
Sincere gratitude to @ethereumfndn Ecosystem Support Program for supporting the OWASP Smart Contract Security initiative.
owasp.org/www-project-smart-…
SolidityScan retweeted
Starting tomorrow: Find the Bug Challenge
Every day, we’ll post a smart contract snippet with a hidden vulnerability.
Your task? Just find the bug.
At the end of the week, we’ll announce the winners. Winners receive 1 month of free access to SolidityScan.
SolidityScan retweeted
134 incidents. $3.6B lost. And 83% of it came from just two things.
We tracked every major Web3 hack in 2025. The patterns will change how you think about security.
Read the full report: credshields.com/resources#st…
SolidityScan retweeted
Join CredShields and @blok_cap for Episode 3 of Shielded Spaces.
Topic: Designing DeFi Systems Institutions Can Trust
Catch the discussion on Thursday, February 5, at 2:00 PM UTC.
🎙️ Speaker:
@0xSheetal
SolidityScan retweeted
“2025 will be remembered as the year Web3 security stopped being a smart contract problem and became an organizational one,” said @cyberboyIndia, co-founder of CredShields.
“The Bybit breach alone $1.45 billion lost due to compromised infrastructure demonstrated that our industry’s fixation on code audits has left critical operational vulnerabilities completely exposed.”
token247.xyz/2026/01/credshi…
SolidityScan retweeted
“Hacks” have become a word we see almost every day in Web3.
What’s harder to accept is that even well-audited contracts still get exploited. Not because audits failed but because real systems change, integrate, and break in ways no single review can fully predict.
Security isn’t a one-time checkpoint.
It’s an ongoing process.
That’s why protection needs to be continuous and automated, catching issues as code evolves and new risks emerge.
This is where SolidityScan helps by automatically scanning smart contracts and surfacing risks early, before they turn into incidents.
Audits create trust.
Automation creates consistency.
Together, they make Web3 safer.
SolidityScan retweeted
Most Web3 losses don’t start with a smart contract bug.
They start with systemic weaknesses:
> Key mismanagement
> Weak or over-privileged access controls
> Centralised infrastructure dependencies
> Unsafe upgrade and admin paths
While code vulnerabilities get the spotlight, real-world incidents show a different pattern.
Smart contract security isn’t just about what’s written in Solidity.
It’s about how systems are operated, upgraded, and controlled in production.
Audits matter, but security only works when the entire system is designed with failure in mind
SolidityScan retweeted
⏳ We’re going LIVE in 1 hour!
As enterprises move into Web3, AppSec must evolve for a hybrid Web2–Web3 future.
Join us with @Checkmarx at 2:00 PM UTC, streaming on YouTube, X, and LinkedIn.
Don’t miss the live discussion.
SolidityScan retweeted
If security strategy still ends at “audit complete,” then the most consequential risks in your system are likely unmonitored.
Read → credshields.com/resources#st…
SolidityScan retweeted
In 2025, Web3 security failures were not limited to isolated smart contract bugs.
Many of the most severe incidents stemmed from systemic control-plane, infrastructure, and operational failures.
Key findings from our 2025 analysis include:
> Over $3.6B in reported losses across the ecosystem.
> 83% of losses stemmed from control-plane and infrastructure failures.
> Clear, evidence-backed security priorities teams should address moving into 2026.
Understanding these patterns is critical.
Preventing future exploits requires looking beyond individual vulnerabilities and addressing the underlying systems that enable them.
The full analysis is shared in the comments.
SolidityScan retweeted
$3.6B in losses, 134+ incidents that shook 2025.
From mega breaches to systemic control failures, 83% was driven by access control and infrastructure failures, not smart contract bugs.
CredShields has worked on a State of Web3 Security Report for 2025. This report documents the end of the audit-only era, what must change next and what's needed in 2026.
Download the full report →
credshields.com/resources#st…
