@DevDacian

Head of Security Research @Cyfrin Protected $100,000,000,000+ on-chain TVL!

 🇰🇷
dacian.me
Joined April 2021
  • Tweets3.7K
  • Following314
  • Followers6.8K
486Media
1 Hour with @PatrickAlphaC where I cover: 1⃣ how I break down stateful fuzz testing by invariant types and contract lifecycle 2⃣ my favorite general heuristics which I use to find all sorts of bugs in many different codebases 3⃣ mindset and ultimate recipe for success Link👇
9
21
3
228
60,695
Dacian retweeted
Armada
@ship_armada7h
Our crowdfund has reached $417k from 69 participants! We’re well on our way to hitting our $1M target before it closes on 29th October. If we don't hit it, every commitment is returned in full. Need an invite? DM us. Have one? Commit USDC at fund.armada.blue
4
9
3
30
2,434
This week @cyfrin running 8 private audits in parallel engaging 20 top auditors! 5 returning & 3 new clients, great mix of protocols each with hand-picked specialist audit team plus me driving our proprietary AI. Pumping out valuable bugs every day at scale, truly blessed 🙏
2
59
1,306
Every problem I have now is the result of being too successful. Literally winning so hard consistently has created an entirely new set of problems to solve. Good problems to have, challenging us to solve them & reach even higher levels of success 🚀
5
1
66
1,666
Our frontend audit with @cyfrin is complete. No critical or high findings, and all 7 medium findings resolved. Report: gitlab.com/notesystems/note-… Our backend audit is in progress. Across 75 smart contracts, no high or critical issues found. Mainnet is getting closer.
35
46
13
183
22,597
Did aave & uniswap achieve long-lasting success by needing to launch in 8 days so get 1 rushed budget audit then yolo deploy? No lol, so why do you think your protocol will be different? Blockchains are the most hostile place on earth to deploy code, prepare accordingly 🫡
4
5
49
1,775
All our clients are using AI & various scanning services before coming to us for private audit yet @cyfrin is finding more valuable bugs than ever using our proprietary AI Solace & human auditors. Our capacity for vuln discovery has massively expanded this year 🚀
4
62
2,159
Running 7 private audits in parallel (8 total) this week, engaging 16 top auditors 🚀 6/8 of the private audits are for returning clients who have done previous @cyfrin audits, 2/8 are for new clients. Working hard every day helping keep our clients safe, what a blessing 🙏
4
1
56
1,577
Great feedback from recent private audit client, love to hear it @cyfrin always doing our best to maximize value every way possible while having a great time since this work is so much fun!
1
44
1,635
3yr speedrun auditor -> executive, ask me anything
Dacian
@DevDacian9 Oct 2023
October 2022 - started learning solidity as a hobby March 2023 - focusing on security & began writing my "Deep Dive" series October 2023 - blessed to join @cyfrin as a full-time smart contract security researcher! 🚀A lot can change in a year if you put your mind to it🚀
16
2
69
3,957
Dacian retweeted
Will Nundy
@willnundyOct 9
Your audit report covers the code you gave us. Here's the list of things that can still drain you.
1
2
2
273
iykyk @cyfrin
3
30
1,323
My X feed has recently degenerated into: 🥇 thirst traps (especially from token2049) 🥈 plague scenarios/theories/doom 🥉 various war/conflict stuff I don't like any of these posts but X keeps showing them, is there really nothing else more interesting ?
4
28
1,566
One thing we are seeing in project repos is docs bloat, tons of outdated markdown giving conflicting & stale info to auditors. Do occasional docs cleanup especially before audit, archive the old stuff make it really easy for auditors to find relevant updated docs 🙏
7
2
45
1,537
Starting first full week of Q4 running 7 private audits in parallel, engaging 17 top auditors! Great mix of audits across EVM, Tempo, Substrate, Solana & Off-Chain! @cyfrin working harder than ever to help keep our clients safe 🫡
5
60
1,691
Who is the next Blast according to @grok ? Last few years saw huge VC alt-chain "gold-rush" but how many alt-chains are generating decent revenue relative to their total raised capital? xitter.cf/i/grok/share/44b4537c6…
6
2
1
20
2,456
I've pushed significant updates to coldclone, a very useful tool for sanitizing foreign repos before engaging with them. If you're an auditor doing a lot of quoting or a dev downloading new repos to use, running this first is a no-brainer github.com/devdacian/coldclo…

GitHub - devdacian/coldclone: Host-side gauntlet for untrusted code

Host-side gauntlet for untrusted code. Contribute to devdacian/coldclone development by creating an account on GitHub.

github.com
6
6
1
66
3,704
Got first Opus-5.5 safety filter rejections; had 15 PoCs to create but it refused to create 5 sensitive ones. Opus-5.5 happily wrote up the bugs without PoC so I gave its write-ups to glm-5.3-flash which created the PoCs. @claudeai cyber safety filters effectively useless 😅
10
1
74
5,609
Dacian retweeted
Cyfrin Audits
@cyfrinOct 1
Cyfrin is officially part of the AvengerDAO Security Marketplace🛡️ BNB Chain is home to millions of users, and every protocol launching there deserves a security review that matches the stakes. We're here to help @BNBCHAIN teams ship with confidence through private audits from our best-in-class security researchers. Find us on the marketplace: avengerdao.org/marketplace
BNB Chain
@BNBCHAINOct 1
More security support, less friction for builders. 6 new security firms just joined the AvengerDAO Security Marketplace, bringing the total to 17: → @QuillAudits_AI → @cyfrin → @asymmetric_re → @MixBytes → @ConsensysAudits → @PashovAuditGrp From development to launch and beyond, builders can compare services, contact firms directly, or ask the AvengerDAO admin team where to start. Explore the marketplace 👇 avengerdao.org/marketplace
3
2
20
1,583
Happy to announce I've accepted an executive position @cyfrin, formally joining the leadership team as Head of Security Research. We're working harder than ever to keep our clients safe while scaling our private audit business to handle epic demand. 🙏 Blessed 🙏
79
9
2
352
7,221
Crazy how fast AI moves. 2 weeks ago I was driving with Sol-5.6 High (20x) only using Opus-5 (5x) for review. Now I'm driving with Opus-5.5 High (20x) only using Astra-6 / Sol-6 (5x) for review & just cancelled my personal gpt 20x sub to only use the @cyfrin team sub.
6
45
3,048
Load more