I just published The Eight domains of the CISSP and its AI equivalent igbinosuneric.medium.com/the…
I just created a obsidian vault for AI security i call it the AI security second brain. I pulled from several sources like AI security free books and articles and frameworks to create this brain. I have opened sourced it. #AISecurity #CyberSecurity #Infosec #ObsidianMD #AI
I just joined the waitlist for @immunefi Studio Review. Get feedback on your reports before you submit. immunefi.com/studio
PrimarchProtocol retweeted
🚨 New blog! 🚨
Are bug bounties cooked? Is cybersecurity cooked? I'm worried about backlash from releasing my opinions on this, but here it is anyway.
hakluke.com/are-bug-bounties…
Yeay, I have received reputation points and increased my rating on the leaderboard on @HackenProof hackenproof.com/ #hackenproofed #bugbounty
We've created an obsidian brain for smart contract audits and the results are shocking 🫣🫣
No AI fluff - only all the crits from @SoloditOfficial and @RektHQ scraped to markdown files, and extrapolated to:
- protocols from bounty platforms, rekt, selected public audit portfolio reports
- complex ai-based tagging system dividing bugs into sectors
- methodologies and checks that would've prevented each bug
- language specifics, protocol specifics, l2 specifics and more
- who reported the bug
- who missed the bug
AND MUCH MORE!
A common use case:
> We start an audit on a zk-heavy protocol
> Load the obsidian vault locally
> tag:#sector/zk AND path:classifications/bug/check
this extracts all zk-tagged CHECKS, meaning all the checks corresponding to critical issues in the vault, that are to be checked against zk sector
auditing staking pools? prediction markets? multisig? gaming protocols? etc.
same for auditing rust? anchor? stylus? cairo? yul?!
Best part - it lets your AI agent save enormous amount of tokens by using obsidian's wikilinks feature to simply get highly relevant data.
I personally use this at the start of every new audit and improve it gradually.
Would you use something like this? should I make it open source?
Retweet this post and spread the word to let me know‼️
SUI Mainnet Halt (May) due to gas underflow by @exvulsec :
exvul.com/blog/sui-mainnet-h…
Just finished diving into the @NIST Artificial Intelligence Risk Management Framework (AI RMF 1.0)! 🚀 It’s a vital blueprint for building trustworthy AI through four key functions: GOVERN, MAP, MEASURE, and MANAGE,,. 🤖🛡️
#AIRMF #TrustworthyAI #ResponsibleAI #AIGovernance #NIST
Yeay, I have received reputation points and increased my rating on the leaderboard on @HackenProof hackenproof.com/ #hackenproofed #bugbounty
🚨~$130k exploited today from SubQuery Network. Vulnerable code was written >2yrs ago. Access control missing.
Basically, anyone can call the method below and set their own contract as the withdraw target for Staking rewards. Would your auditors catch this one?
Auditing a purpose-built blockchain 🔍
Starting by deploying a local node and understanding every core functionality before touching security.
No shortcuts. Understand first, secure after.
#Blockchain #Web3 #Security #Audit #Crypto #Infosec #Web3Security
Yeay, I have received reputation points and increased my rating on the leaderboard on @HackenProof hackenproof.com/ #hackenproofed #bugbounty
AI skills have been become so good that it is now a race to report before someone else does
it a good thing in the long run for protocols its a bad in the long run for AI dependent SR
🚨Ethereum Developers: you can now install your first AI Auditor in 1 minute - fully autonomous, available 24/7, with multiple sub-agent helpers. Open Source.
FREE to use (with your AI model) and already finding vulnerabilities in smart contracts. Link below🫡
PrimarchProtocol retweeted
AI toolset for security auditors 👇
DeepWiki — deepwiki.com/ Index any public GitHub repo and ask questions about the codebase with source references. Onboard to a new protocol in minutes instead of hours.
Cursor / Claude Code - Use as a co-auditor — discuss suspicious patterns, validate logic, and craft quick PoCs to confirm exploitability. Ask "can this reentrancy path be triggered?" and iterate fast.
NotebookLM - notebooklm.google.com/ Upload whitepapers, docs, and specs. Ask questions across all of them at once. Great for spotting mismatches between spec and implementation.
Fellow SR what is your favourite note taking app for auditing, i just apples notes but i am thinking i want to change, do you guys use notion or some other application or do you write it down with a pen and paper











