Today’s log: Shipped new docs for DXDLabs Audit Kit → professional audit services page, security scorecard template, and a weekly Move/Sui security tips series Tightened DXDLabs infra with SonarQube + better CI for our projects In parallel, interviewing for a Technical Lead

Building two kinds of leverage this week: Technical: DXDLabs Audit Kit (professional services page, security scorecard, weekly Move/Sui tips) + dverse UX + CI/SonarQube Mental: Commercial Law I notes (6‑lecture structure) + 2,000–2,500 word Capstone essay in progress Q1 =

Q1 motto has been “less, but deeper.” This week that meant: Saying no to new shiny things and finishing the Technical Lead loop with an RPG client Going deeper on AxisRWA + DXDLabs audit infra instead of starting yet another side project Closing my Capstone essay + Commercial

# Weekly Security Tip Series (Move/Sui) – DxDLabs Audit Kit Mỗi tuần mình sẽ post 1 tip ngắn về an toàn smart contract Move/Sui trên X (Louis @ DxDLabs (Web3)) và repo này. Tip được thiết kế ngắn gọn, dễ áp dụng ngay cho dev/auditor. Tip #1: Capability – Không public

This week I wrapped a Technical Lead loop with an EU client, submitted my BBA capstone, and kept Q1 consulting cashflow on track. Not glamorous, but it’s the first time in a while I feel I’m taking back control instead of being dragged by debt and deadlines. One small, boring,

Q1 survival log: Consulting pipeline: SMART PUNNET WEIGHING + a new brief from Cursic Exchange. Infra stack: dsign + dxd‑audit‑kit + SonarQube/CI so conversations with clients are driven by logs & scorecards, not pretty slides. Every new deal is another reason to kill fancy

🚀 Big update to DxDLabs Audit Kit – Move/Sui security toolkit! New features: - Best Practices Summary for Move/Sui contracts - Example audit report template for MiniLend protocol - Python script to auto-generate reports from findings - BTCfi edge cases checklist + new

feat(vuln-db): Ship Sui/Move vulnerability database + PoC test harness trong DxDLabs Audit Kit! - YAML db với real exploits: Cetus integer overflow ($223M drained 2025), HamsterWheel DoS (network halt), oracle manipulation lending, upgrade abort, seal/decrypt misuse - Move PoC

A client signed. Payment is still pending. Reminder: signature is a milestone, not cashflow. My default now: confirm payment date in writing, set the next meeting immediately, and add a clear late-fee clause. #consulting #freelance #cashflow #sales #contracts #founder

feat(scorecard): Interactive Security Scorecard live trong DxDLabs Audit Kit! - BVSS-based calculator (Halborn-inspired) cho Move/Sui vuln: impact x likelihood + immutability adjust → score 0-10 + severity (Low-High-Critical) - Auto-parse vuln-db YAML để pre-fill findings -

feat(prover-examples): Ship Move Prover examples + CI checks trong DxDLabs Audit Kit! - Thêm folder prover-examples/ với formal verification cho DeFi modules: safe_transfer, no_double_spend, flash_loan_safe, lending_collateral, oracle_safe, liquidation_safe,

Founder log: keeping the pace over the weekend. Fixed a bunch of bugs in Astrix Wallet (renamed from IFC Wallet) + built Astrix Chain & Scan. One thing that will make next week lighter: plan in Notion and don’t break the habit of taking notes. #FounderLog #BuildInPublic

feat(vuln-db): Update Sui vuln database với cross-chain exploits, race conditions & spoofing attacks! Thêm mới: - Cetus Spoof Token + Liquidity Overflow ($223M drain 2025) - Typus Oracle Authority Bypass ($3.44M arbitrary price manip) - Nemo Economic Logic Exploit ($2.4M

🚨 SCAM ALERT: Received DM from @louislau_fund (Louis Bush) claiming affiliation with Signum Capital, praising our Sui/Move security work & proposing a "Sui Security Pack" sponsorship + paid reviews/office hours. Signum Capital has NO team member named Louis Bush/Lau (verified:

AI agents on Sui đang hot Nhưng security thì sao? Vừa add 7 vulns agent-specific vào dxd-audit-kit: unauthorized tool calls rogue spends intent spoofing permission leaks... Với PoC + tests Sui-native! Từ static analysis → prover invariants cho guardrails.

Founder log: sent a offer for Phase 2 (Cursic Exchange). Today’s build focus: tightening dverse auth/onboarding UX (error states + polish). Keeping the cadence while prepping for next week’s law exams. #FounderLog #BuildInPublic #Consulting #Shipping #ProductEngineering

Founder log: today is about tightening scope and de-risking execution. I’m finalizing Cursic Phase 2 scope v1 (deliverables + timeline + payment trigger), setting up minimal infra (repo/CI/env) and starting the UI skeleton. In parallel: building my Audit skillset and running

Fundamentals of Software Architecture: An Engineering Approach — Day 1 The moment an engineer stops asking “does it run?” and starts asking “what’s the trade-off?” — that’s when they become an architect. Security vs UX. Monolith vs microservices. Cost vs scale. You don’t

Here’s a clean X version in English (under 280 chars): You don’t become an architect when you learn a new diagramming tool. You level up when you think in 4 planes: – Structure (body) – Characteristics (soul) – Decisions (guardrails) – Principles (lighthouse)Slides don’t save

Core principle in system design: Never chase the "best architecture". Aim for the "least worst architecture" instead. Every strength you add creates a weakness somewhere else. Trade-offs are inevitable. #SoftwareArchitecture #SystemDesign #Tradeoff