I think judging effort-to-reward ratio might be worse than auditing.

Join me today for a unique office hours! Today we're sharing our first attempt at "Ecosystem Fuzzing", we spent a lot of time scaffolding an invariant testing setup that will: - Reach High Coverage - Is easy to fork - Is easy to get started with This one is for Eigenlayer

[High] Conditional contest pots are bad and stupid. Problem is that skilled participation is low because of low EV. ## POC - Euler at Cantina 🪐 1. A lot of prior audits, with few findings. Even 50% of no new high means the contest EV is now 670K instead of 1.15M. But wait..

We're bringing the receipts🧾 Get ready for an epic dive into formal verification vs fuzzing EthCC - Ethereum Community Conference!

1/ I am excited to talk this Monday at EthCC - Ethereum Community Conference security about how lending protocols, including Aave Labs, Morpho Labs 🦋, Silo Labs, and Euler Labs🛢️🇬🇧 are securing their code via formal verification. Do you know what is the most critical security property of a lending protocol?

LLMs have already passed the Turing test, there's no way QA issues will still exist in audit competitions by the end of the year I think moving that pot to judging may be more sensible than to H/M, though

Hot fuzz tip inpired by Antonio Viggiano. Wen you fuzz a fork with all fresh USER1, USER2, USER3 setup you may not get as good results as you use some real user addresses. No real users = no coverage of potentially bughy states.

Reproducing the $41M Curve reentrancy hacks with Echidna demonstrates the simplicity and effectiveness of external on-chain fuzzing. It highlights how even basic reentrancy checks in fuzzing suites can uncover complex vulnerabilities and illustrates the critical role of

I used to love this bridge 😢

Found myself one click away from falling to a spear phishing attack today! If you're giving services in the web3 space, be VERY careful with who you interact and how the initial exchanges of information are done. 2 weeks ago, 超级图狗王.eth approached for security services for

get ready for a bug bounty soon anon after Code4rena Spearbit Solidified

In this written article nican0r talks about the Eigenlayer Fuzzing starter kit we just released! You can use it to run invariant tests when building on top of Eigenlayer Let me know what you think! -Alex

Knowing that a bug exists means top whitehats joining this contest TODAY have a huge EV vs other conditional pots. Nice move by Immunefi

Reuters says Trump loses with 42%, while Polymarket says he wins with 63% What's the conclusion here?

🐳 The results of the Size competitive audit are in! Big congrats to everyone who submitted valid findings, especially to MT for an impressive $36k+ win in their 4th competition! Respect to Size Credit for their unwavering commitment to the highest security outcomes Full

People think this is about Brazil but it's actually about the US

As an auditor, which do you prefer?