Security Strategist @PashovAuditGrp
Portfolio →
Joined November 2022
- Tweets1.1K
- Following1K
- Followers2K
- Likes31.6K
Pinned Tweet
🚀 This month I got 3 bug bounties paid out and built an open-source Claude Code skill along the way.
Finding the bug is the hard part, but what really determines the outcome is how well you demonstrate its impact.
That's where the PoC matters most: if it's not a mainnet-fork end-to-end test on real deployed contracts at the current mainnet state, it doesn't really prove impact.
I iterated a lot before figuring out what actually works. Now it's a skill anyone can install.
Free & fully open source 👇
github.com/cholakovvv/foundr…
cholakov retweeted
Pashov Audit Group 🤝 @spectra_finance
Spectra lets users launch yield markets and we are now bringing our security expertise to their new order book functionality on EVM networks. Looking forward to a great partnership together🫡
someone left $2k in BTC on a server vulnerable to PHP2Shell for anyone to steal 💀
somehow lasted almost 20 hours hahaha, thought it'd be gone in the first hour
stealmybitcoin.com/
cholakov retweeted
Pashov Audit Group 🤝 @sparkfinance
Our security expertise now serves Spark - with ~$9.5B in TVL, they allocate institutional capital on-chain for max efficiency. Looking forward to protect this mission-critical code with our best efforts🫡
The real measure of success for a security firm? Building trust with great teams who keep coming back.
And speaking of that, we're now on our 4th audit with the legends at @PareStocks 🤝
That's the kind of relationship we're building at @PashovAuditGrp
sUSDx is now live on PARE 😎
Lock in a fixed 18.92% a year, until 31 March 2027.
No more watching the rate move every day.
Audited by @PashovAuditGrp
parestocks.com
it's always great to see @ethereumfndn recognizing the work we do for the community at PAG! 🙏
some more cool things coming soon...👀
We've been listed on ethereum.org for our contributions to the Ethereum ecosystem with our AI agent Skills repository
This is just the beginning of our contributing, planning so much more, looking to grow the pie for everyone around🫡
cholakov retweeted
The security audit report for our third audit with @PareStocks was just published on our Github - 5 days, 4 strong Medium severity vulnerability findings, all fixed🤝
Read the report below👇
github.com/pashov/audits/blo…
cholakov retweeted
Audit three is live on the site.
@PashovAuditGrp went through the contracts behind our dollar markets, 1 to 4 October. Eight researchers. 35 findings.
0 critical. 0 high.
4 medium, all fixed.
7 low, 6 fixed, 1 acknowledged with the reasoning in the report.
24 informational, all fixed.
Pashov’s team checked every fix again, and the dollar markets running today were deployed from that fixed build.
That makes three Pashov reviews. 84 findings between them. Not one critical. Not one high.
Every finding is on the page: parestocks.com/audit
cholakov retweeted
Pashov Audit Group 🤝 Polymarket V2
Team has a true security mindset, was a pleasure🫡
cholakov retweeted
Audit 3. Paid. Starts tomorrow!
@PashovAuditGrp are back for a third pass, this time on the contracts behind Chapter 2. Same crew that went through every line of what's live today.
When they're done, the doors open. Same engine that splits a stock into the share and the dividends, pointed at things that pay a lot more than a stock. 😎
Not naming names yet. You know the drill!
Let's be honest...
If you're a dev building in Solidity and haven't used PAG's open-source skills yet, you're really behind 😅
Even devs from a serious company in the space told us they've adapted them to Rust and Go and are already using them in their pre-audit process to find some pretty cool bugs
cholakov retweeted
Our security researchers are not just publicly proven and highly experienced but also vetted - they pass multiple checks with us as an extra safety step.
We build long-term relationships, not one-offs with auditors. Read about our vetting process👇
pashov.com/blog/no-dprk-allo…
cholakov retweeted
Pashov Audit Group 🤝 @saturn_credit
We have partnered with the strong team of Saturn Labs to provide them with our highest level of security expertise. Looking forward towards a long and fruitful work together🫡
Been looking into Arc a bit more and there are a few things I wouldn’t want to assume are “the same as Ethereum” just because it’s EVM compatible.
On Arc:
• USDC pays for gas
• Tokens can use 18 or 6 decimals
• CallFrom preserves the original msg.sender
• Zero-address and blocklisted transfers revert
• SELFDESTRUCT can move USDC
Standard Anvil won’t reproduce these behaviors either.
So if you’re porting contracts to Arc, I’d definitely treat it as more than just another EVM deployment.
cholakov retweeted
Pashov Audit Group 🤝 @ensembleio
We've spent 3 weeks of reviewing the codebase of Ensemble - the platform packaging Hyperliquid-powered strategies into accessible products for everyone🙏
Report is below👇
github.com/pashov/audits/blo…
