📝 Smart Contract Auditor & Security Researcher 🔍 Breaking down exploits, vulns & audit skills 📈 Growth Lead @ZealynxSecurity ⬇️ Free audit checklist (DM me)
0x000
Joined October 2024
- Tweets2.3K
- Following144
- Followers231
- Likes442
Pinned Tweet
🚀 Thrilled to share my results from the @sherlockxyz Burve audit contest! Secured a Top 10 finish (#8 out of 703 participants) and a 2,509.74 USDC reward. 🛡️
Proud to have uncovered 3 High-Severity findings, contributing to a more secure Web3. Congrats to all fellow auditors!
#SmartContracts #SecurityAudit #Web3 #Sherlock #BlockchainSecurity #BugBounty #m3dython
You can view my Sherlock profile here: sherlock.xyz/u/m3dython
M3dython | Zealynx.io retweeted
Best inbox surprise of the day: PoCo has been accepted at ACM TOSEM 🎉
PoCo: Agentic Proof-of-Concept Exploit Generation for Smart Contracts
Preprint: arxiv.org/abs/2511.02780
Results: github.com/ASSERT-KTH/PoCo-p…
Equal contribution with @vivi365_
M3dython | Zealynx.io retweeted
We just opened Season 1 of @ZealynxSecurity's Audit Grants program.
Built for pre-mainnet DeFi protocols where the math is broken: senior audits cost $30k+, and that money doesn't exist at seed stage.
3 tiers:
→ Full Grant: 100% covered
→ Partial: 50% covered
→ Promising: 25% covered
No equity. No tokens. No follow-on.
Applications open June 15 → link below 👇
M3dython | Zealynx.io retweeted
Recent posts by Manuel Aráoz on AI and DeFi security have been widely circulated, and customers have asked whether they reflect OpenZeppelin's position. They do not.
Manuel co-founded OpenZeppelin and served as the company’s CTO until 2019 when he left the company.
$2.3B lost in 2025 from audited protocols. The 2026 failure mode isn't under-coverage. It's silent over-trust of AI pattern matches. The finding 'the agent already saw' is the one humans stop re-reading. zealynx.io/blogs/Audit-proce…
Every LLM scanner I point at a codebase finds reentrancy and integer overflows. None of them find the way *intended* logic gets weaponized against TVL. The $100k pays for that second class. zealynx.io/blogs/audit-prici…
M3dython | Zealynx.io retweeted
The $20k audit and the $100k audit have the same name on the invoice and almost nothing else in common. Different auditor counts. Different week budgets. Different methodologies. Comparing them by dollars is comparing two products with one label. zealynx.io/blogs/audit-prici…
M3dython | Zealynx.io retweeted
Glad that @grok understands the value of Zealynx Academy
qf.giveth.io/project/zealynx…
Yes, small donations to Zealynx Academy make sense if you value free, high-quality smart contract security education for Web3 builders.
Quadratic Funding rewards donor numbers over size, so even $5 helps more than you'd expect by unlocking extra matching from thedaofund on Giveth.
Do your own due diligence on the project first—it's being built in public by someone with real audit experience.
The 2023 Curve exploit lived below the contract code. Vyper 0.2.15 to 0.3.0 generated re-entrancy guards that didn't lock. If your audit methodology stops at the source, this is the bug class you ship. zealynx.io/blogs/curve-finan…
M3dython | Zealynx.io retweeted
$60M lost in July 2023 because of a Vyper compiler bug invisible to the application code. $100M put at risk in April 2022 because get_virtual_price() returned an inflated number mid-transaction. The pattern: Curve's exploits live at the seams, not in the math. 1/12
1. When I read a Curve audit report, I look for whether the auditor checked the compiler. Curve's biggest exploit was below the contract, Vyper 0.2.15 to 0.3.0. Audits that stop at Solidity-equivalent review miss the toolchain layer. 1/12
11. Curve's exploit pattern is a teaching case for the rest of DeFi: the math is rarely the attack surface. The attack surface is wherever the audit stops looking, toolchain, mid-state composability, dynamic accumulators. 11/12
12. Writeup: zealynx.io/blogs/curve-finan…, the long version, with the StableSwap/CryptoSwap/LLAMMA breakdown and the integrator checklist if you're auditing Curve-touching code. 12/12