Public Profile https://xitter.cf/t.co/kKjzIqiwsq https://xitter.cf/t.co/WQv3F6IRli

Joined September 2025
I just published The Eight domains of the CISSP and its AI equivalent igbinosuneric.medium.com/the…
31
PrimarchProtocol retweeted
🚨 New blog! 🚨 Are bug bounties cooked? Is cybersecurity cooked? I'm worried about backlash from releasing my opinions on this, but here it is anyway. hakluke.com/are-bug-bounties…
30
46
5
308
22,652
PrimarchProtocol retweeted
This Immunefi All-Star just made a Google Staff Software Engineer’s salary from one report. Congrats @riproprip.
37
23
17
458
49,997
PrimarchProtocol retweeted
We've created an obsidian brain for smart contract audits and the results are shocking 🫣🫣 No AI fluff - only all the crits from @SoloditOfficial and @RektHQ scraped to markdown files, and extrapolated to: - protocols from bounty platforms, rekt, selected public audit portfolio reports - complex ai-based tagging system dividing bugs into sectors - methodologies and checks that would've prevented each bug - language specifics, protocol specifics, l2 specifics and more - who reported the bug - who missed the bug AND MUCH MORE! A common use case: > We start an audit on a zk-heavy protocol > Load the obsidian vault locally > tag:#sector/zk AND path:classifications/bug/check this extracts all zk-tagged CHECKS, meaning all the checks corresponding to critical issues in the vault, that are to be checked against zk sector auditing staking pools? prediction markets? multisig? gaming protocols? etc. same for auditing rust? anchor? stylus? cairo? yul?! Best part - it lets your AI agent save enormous amount of tokens by using obsidian's wikilinks feature to simply get highly relevant data. I personally use this at the start of every new audit and improve it gradually. Would you use something like this? should I make it open source? Retweet this post and spread the word to let me know‼️
18
20
2
160
24,640
Just finished diving into the @NIST Artificial Intelligence Risk Management Framework (AI RMF 1.0)! 🚀 It’s a vital blueprint for building trustworthy AI through four key functions: GOVERN, MAP, MEASURE, and MANAGE,,. 🤖🛡️ #AIRMF #TrustworthyAI #ResponsibleAI #AIGovernance #NIST
10
from experience which is better foundry fuzz or certora
5
PrimarchProtocol retweeted
🚨~$130k exploited today from SubQuery Network. Vulnerable code was written >2yrs ago. Access control missing. Basically, anyone can call the method below and set their own contract as the withdraw target for Staking rewards. Would your auditors catch this one?
21
19
8
296
33,085
Auditing a purpose-built blockchain 🔍 Starting by deploying a local node and understanding every core functionality before touching security. No shortcuts. Understand first, secure after. #Blockchain #Web3 #Security #Audit #Crypto #Infosec #Web3Security
1
16
AI skills have been become so good that it is now a race to report before someone else does it a good thing in the long run for protocols its a bad in the long run for AI dependent SR
6
PrimarchProtocol retweeted
🚨Ethereum Developers: you can now install your first AI Auditor in 1 minute - fully autonomous, available 24/7, with multiple sub-agent helpers. Open Source. FREE to use (with your AI model) and already finding vulnerabilities in smart contracts. Link below🫡
178
259
53
1,524
227,838
PrimarchProtocol retweeted
AI toolset for security auditors 👇 DeepWiki — deepwiki.com/ Index any public GitHub repo and ask questions about the codebase with source references. Onboard to a new protocol in minutes instead of hours. Cursor / Claude Code - Use as a co-auditor — discuss suspicious patterns, validate logic, and craft quick PoCs to confirm exploitability. Ask "can this reentrancy path be triggered?" and iterate fast. NotebookLM - notebooklm.google.com/ Upload whitepapers, docs, and specs. Ask questions across all of them at once. Great for spotting mismatches between spec and implementation.
1
3
25
1,709
Fellow SR what is your favourite note taking app for auditing, i just apples notes but i am thinking i want to change, do you guys use notion or some other application or do you write it down with a pen and paper
1
36
PrimarchProtocol retweeted
A bounty payment to a whitehat can take 30 days because of invoices, while a blackhat can get paid in under a minute. This space has their security priorities weirdly inverted 🤣
20
15
1
158
7,528