An interesting question for all auditors to consider: what should be ultimate epistemological standard of truth when auditing? I argue it should be the absolute objective truth of the code submitted for audit. Food for thought; see comments @ github.com/sherlock-audit…

Hilarious - still makes me laugh! Equally good, his (Dacian) escalation comment ... I think it points out the need for anonymous submissions to reduce bias: github.com/sherlock-audit…

Do NOT miss this Critical mapping bug in your next audit. 👀 Can you see it? Here's what it is and exactly how you can spot it immediately. 🧵

Time for the main event! #dss2023

Totally agree! This was my first DSS and won't be my last.

So glad I went to Defi Security Summit in Paris and I loved meeting so many heavy hitters in person ... plamen, @trust_90, @OxOwenThurm, @Oxleastwood, juneteenth deliriusz ... You guys are inspiring. 🙏

I’m a big fan of brock’s FREI-PI pattern. When I see that a protocol enforces global invariants after each state changing function, I assume it'll be 10x harder to find a critical bug. But what if there were a way to simply skip those invariant checks?

Wish that I could make it to TrustX in November ... but no. 😞 Next time!

Very nice visualizations, jordanmmck ! 👏

This is a good move: "Whitehats will prioritize ... thanks to Sherlock’s fully on-chain, neutral adjudication process that whitehats can trust for a fair payout."

Long wait for results of my first formal verification contest. 5th place - nice motivator to keep going! I really enjoyed the challenge and hands-on work.

Ion Protocol Certora Ravi Kiran Betha rokinot 0xRizwan FV winners: 🎖️0x00ffDa 🎖️alexzoid 🎖️rokinot 🎖️@0xKER2 🎖️0x55…E7e5 🎖️0x2a…bADa 🎖️dirtymic 🎖️ghost (Hats Handle) 🎖️albertwhite 7/11

Formal Verification winners👨‍🔬 ☑️ 0x00ffDa ☑️ alexzoid ☑️ rokinot ☑️ @0xKER2 ☑️ 0x55…E7e5 ☑️ 0x2a…bADa ☑️ dirtymic ☑️ ghost (Hats Handle) ☑️ albertwhite

Very cool announcement today in hexens #ETHDenver presentation by Ruben Muradyan: Remedy (r.xyz) no-fee bug bounty platform, AND free access to Glider - interesting new tool to code query patterns in all deployed & verified contracts (on test net so far).

Love some of the creative marketing at #ETHDenver2024

100 Cantina 🪐 invite codes?! 🤯 Yes, it's real. First 100 to register for the $100k formal verification part of the $1.25M Euler Labs contest get a code. ✨ Retweet this tweet for bonus points. It's that simple. certora.com/contests/euler

0x00ffDa proved a critical slippage control property which mathematically guarantees that users can never profit from position minting or exceed specified slippage bounds - key safety measures for Uniswap 🛡️

Interesting news for formal verification 😮

The @Aqua_Token competition is live 🪐 Aquarius brings AMM functionality and liquidity management to @Stellarorg, powering the next wave of DeFi on the network. A dual-layer security approach: formal verification by Certora, paired with a high-signal Cantina competition.