Cyfrin Audits (@cyfrin) / X

Giriş yap Kaydol

Cyfrin Audits

2,423 posts

Cyfrin Audits

@cyfrin

Securing the blockchain and its users. Powering @cyfrinupdraft | @soloditofficial | @codehawks | @battlechain

Request an audit

cyfrin.io

January 2023 tarihinde katıldı

Takip ediliyor

16.2K

Takipçiler

İlişkili hesaplar Yanıtlar Medya

Sabitlendi
Cyfrin Audits
@cyfrin
15 Nis
Your newest AI security engineer has just arrived. Cygent isn't just an AI bug scanner; it learns your codebase, works alongside your team, and writes the PRs to fix them. - Finds bugs - Gets on calls - Schedules tasks - Proactive security advice All in your chat interface 🧵
00:00
Cyfrin Audits
@cyfrin
3 Tem
Congratulations to @Securitize on going public, now listed on the @NYSE as SECZ. 🎉 It's been a privilege to work alongside their team across our private audits, and it's great to see them reach this milestone. Bringing capital markets onchain only works when the infrastructure
Cyfrin Audits yeniden gönderdi
Securitize
@Securitize
2 Tem
Securitize is now officially a public company, listed on the @NYSE under the ticker SECZ. Our focus is unchanged: building the regulated infrastructure for the next generation of capital markets. To everyone who helped us get here, thank you. Tokenize the World.
00:00
Cyfrin Audits yeniden gönderdi
Cyfrin CodeHawks
@CodeHawks
2 Tem
Gm, Web3. Did you miss us? To mark the launch of BattleChain Mainnet, CodeHawks is hosting its first audit in over a year! New competition announced: BattleChain Confidence Pools nSLOC: 589 Start date: July 9th, 2026 Noon UTC Duration: 1 Week Total rewards: 7.25 ETH 💰 Check
Cyfrin Audits
@cyfrin
2 Tem
@cyfrin adlı kullanıcıya yanıt olarak
BattleChain Mainnet (chain ID 626) and Testnet (chain ID 627) are both live now. ZKSync-based L2, purpose-built for this workflow. AI-native tooling from day one. We've spent years seeing what happens after audits. This is the missing stage.
Cyfrin Audits
@cyfrin
2 Tem
Docs:
BattleChain Docs
Kaynak: docs.battlechain.com
Cyfrin Audits
@cyfrin
2 Tem
We practice what we preach. Confidence Pools — where stakers put up real capital to signal belief that contracts survive their Safe Harbor period — is being audited on @CodeHawks. July 9-16, 7.25 ETH prize pool. Check it out:
Cyfrin CodeHawks | BattleChain Confidence Pools
Kaynak: codehawks.cyfrin.io
Cyfrin Audits
@cyfrin
2 Tem
@cyfrin adlı kullanıcıya yanıt olarak
Safe Harbor is the legal innovation that makes this work. Protocols commit to not pursuing legal action against whitehats who attack in-scope contracts in Attack Mode. Find the bug. Prove it. Keep your bounty. Stay anonymous if the agreement allows. All explicitly protected.
Cyfrin Audits
@cyfrin
2 Tem
The flow is simple: → Audit your contracts → Deploy to BattleChain with real liquidity → Create a Safe Harbor agreement and request Attack Mode → Whitehats go to work → DAO promotes battle-tested contracts to Production → Ship to mainnet with confidence
Cyfrin Audits
@cyfrin
2 Tem
@cyfrin adlı kullanıcıya yanıt olarak
BattleChain is a pre-mainnet, post-testnet L2 with real funds. Deploy your audited contracts. Whitehats legally attack them for bounties. Only battle-tested contracts get promoted to mainnet. It's staging for smart contracts, except the testers are trying to drain you.
Cyfrin Audits
@cyfrin
2 Tem
The core problem: bug bounties ask whitehats to report vulnerabilities, not exploit them. That kills the incentive to dig deep. And testnets use fake money, so nobody behaves like an attacker with real skin in the game. BattleChain fixes both. Real funds. Real exploits. Legal
Cyfrin Audits
@cyfrin
2 Tem
Every protocol we've audited faces the same gap. Code goes from audit to mainnet with real money and nothing in between. No staging. No adversarial testing. Just hope. We built something to fix that. Introducing BattleChain. Trial by Fire. 🧵
Cyfrin Audits yeniden gönderdi
Findlay
@0xboo
1 Tem
1/ The Aptos Security Marketplace from Areta Market is now live on @Aptos! Proven across 10 ecosystems, 2k+ quotes submitted, and up to 30% average cost savings per audit. Alongside the Aptos Foundation, we’re excited to make top-tier security accessible to Aptos builders. →
Cyfrin Audits
@cyfrin
1 Tem
Thrilled to be part of this!
Findlay
@0xboo
1 Tem
1/ The Aptos Security Marketplace from Areta Market is now live on @Aptos! Proven across 10 ecosystems, 2k+ quotes submitted, and up to 30% average cost savings per audit. Alongside the Aptos Foundation, we’re excited to make top-tier security accessible to Aptos builders. →
Cyfrin Audits
@cyfrin
22 Haz
Most ZKVM explainers are either too high-level to be useful or too academic to be practical. The middle ground, where you actually understand why the pipeline works and can see it in code, barely exists. Our team wrote the resource we wished we had. 🧵
Cyfrin Audits
@cyfrin
22 Haz
@cyfrin adlı kullanıcıya yanıt olarak
If you're building on or around ZK infrastructure, understanding what's actually happening under the hood changes how you reason about tradeoffs, security assumptions, and where things can break.
Cyfrin Audits
@cyfrin
22 Haz
We put this together because the gap between "I get the concept" and "I understand the system" is exactly where costly mistakes live. Hope it's useful. Big shout out to @Ubermensh3dot0 for the article!
Making Sense of ZK Virtual Machines
Kaynak: cyfrin.io
Cyfrin Audits
@cyfrin
14 Haz
The Calldata Digest from ERC-8213 is two lines of code. Here's exactly how it works, with a concrete test vector you can run right now. 🧵
Cyfrin Audits
@cyfrin
14 Haz
@cyfrin adlı kullanıcıya yanıt olarak
This is chain-agnostic by design. The same transfer calldata produces the same digest on Ethereum, Arbitrum, Base, or any EVM chain. A protocol can publish expected digests alongside upgrade transactions the way Linux distros publish SHA-256 hashes alongside ISOs. Signers compute
Cyfrin Audits
@cyfrin
14 Haz
This is the primitive behind every "read the calldata" recommendation we've given teams for two years. ERC-8213 makes it executable. Reference implementation and the full spec:
GitHub - PatrickAlphaC/erc8213: A static site for teaching about ERC-8213
Kaynak: github.com