Mark retweeted
Pashov Audit Group 🤝 @k3_capital
Our teams are now busy securing the code of K3 Capital, the Institutional DeFi asset and risk management layer. Looking forward to collaborating with their strong technical team🫡
Mark retweeted
Top 3 researchers this week:
🥇 Otter11
🥈 @keterka
🥉 xaleraf4ra
On a roll! 🔥
Want your handle here? Join active programs: hackenproof.com/programs
My first Bug Bounty write up is out!
nitter.gq/0x3b33/status/20671826…
Another audit done for @robinmarketsxyz!
Sharp team, fast to ship fixes, and they take security seriously.
Mark retweeted
I built an extension for smart contract audits to visualize function call flows.
open-vsx.org/extension/ancha…
I encourage you to check it out because I believe this extension can significantly help with smart contract auditing and save a huge amount of time.
If you have any comments, find any errors, or have ideas for improvements, feel free to reach out to me.
Check the video below to understand what this extension does.
I hope it helps you find vulnerabilities in smart contracts and makes DeFi and Web3 more secure.
I’d really appreciate your feedback and a retweet!
Mark retweeted
Valves 🤝 EZManager (@EZManagerCL )
EZManager tracks every position lifecycle. From opening and rebalancing to capital changes, compounding, and collections.
We are going to ensure their contracts meet the highest security standards 🫡
Mark retweeted
Very sad news.
The closure of @code4rena reflects the current state of the Web3 security industry: almost no public contests, an ongoing crisis, a bear market, widespread use of LLMs by blackhats and daily hacks.
Any industry needs new talent in order to grow and expand. Without public contests, it will become nearly impossible for newcomers to grow professionally and participate in protecting DeFi. This would lead to the degradation of the entire Web3 security industry - and DeFi as a whole - ultimately affecting the speed of adoption and trust in blockchain technology.
Everyone knows how much C4 meant to Web3 security and how many professional auditors grew through public contests. It’s hard to overestimate C4’s contribution to Web3 security.
Thank you for everything, @code4rena
Mark retweeted
The Valves Security Training Hub is now listed on @Giveth
A free pattern recognition platform for smart contract auditors.
380+ challenges. 19 bug categories. 50K+ real audit findings.
Train pattern recognition on real exploits, not textbook examples.
Free forever. 100% goes to the project.
giveth.io/project/valves-sec…
Another 🏆 - Top 10 out of 1009 auditors.
There were days I didn’t feel like doing this at all.
Still showed up.
That’s the difference.
Go get your W.
Thanks @sherlockdefi 🫡
Mark retweeted
🚨Free for anyone who wants to get better at Web3 security!!!
Most researchers struggle with:
• Too much passive reading
• Not enough real-world attacker pattern recognition
That’s exactly what we’re fixing with the Valves Security Training Hub. 📚
Instead of just theory, you will train on how attackers actually think, so you can spot vulnerabilities faster and with confidence.
If you’re serious about improving, this is for you.
Start training 👇
training.valvessecurity.com
What a week of private audit actually looks like:
Day 1: read every line, understand nothing
Day 2: re-read docs, draw the architecture on paper
Day 3: find the first H, feel like a genius
Day 4: realize it's a dupe of a known issue, feel stupid Day 5-7: find the real ones
Day 8: write the reports
Worth it.















