Wishing the best to everyone affected - both those departing @Certora and those carrying on with the excellent work there. It has been a pleasure working with you all!
Next steps for me are TBD. Reach out if you have thoughts.
Shane retweeted
Over 7 years auditing and formally verifying complex DeFi code, now we've built AutoProver, which leverage LLMs to automate security processes and produce mathematical proofs.
Devs will use it to secure code against LLM attacks. Premium audits continue full force🧵
Shane retweeted
Rounding errors have drained millions from DeFi protocols.
Certora is building an open source static analysis tool for Solidity to prevent them, and we're participating in the @ethereum Security QF Round from @thedaofund.
Your donation helps us go further ↓
Shane retweeted
This week the @arbitrumdao_gov Security Council froze 30,766 ETH (~$71M) connected to the @KelpDAO exploit, taking it out of reach of the Lazarus Group (a hacking collective with ties to the DPRK).
Certora's VP of Security Labs Elad Erdheim was one of the signers protecting the funds.
Before it all happened, our team flagged two critical edge cases that hadn't been identified yet:
1. If the recovery process wasn't atomic, it would open a window for anyone to drain @arbitrum user funds. Billions of dollars would have been exposed.
2. If the exploiter reduced their balance by even a small amount, the proposed tx would fail, giving them time to move funds before the council could regroup and sign a new one.
Both issues were mitigated before the transaction was finalized: the sequencer could be paused in either scenario, giving the council a 24-hour window to respond.
The tx went through. $71M was protected thanks to smart, thoughtful, and security-first responders.
Certora supports decentralization. And we support the failsafes, circuit breakers, and redundancies that will help the industry mature.
The Arbitrum Security Council has taken emergency action to freeze the 30,766 ETH being held in the address on Arbitrum One that is connected to the KelpDAO exploit. The Security Council acted with input from law enforcement as to the exploiter’s identity, and, at all times, weighed its commitment to the security and integrity of the Arbitrum community without impacting any Arbitrum users or applications.
After significant technical diligence and deliberation, the Security Council identified and executed a technical approach to move funds to safety without affecting any other chain state or Arbitrum users.
As of April 20 11:26pm ET the funds have been successfully transferred to an intermediary frozen wallet. They are no longer accessible to the address that originally held the funds, and can only be moved by further action by Arbitrum governance, which will be coordinated with relevant parties.
Shane retweeted
Your AI agent now has access to 20k+ smart contract audit findings.
claudit - one-line install, works with Claude Code & Codex CLI, searches across all @SoloditOfficial findings, open source.
Huge shoutout to @Cyfrin for opening the Solodit API 🫡
Link below 🔗👇
Shane retweeted
Safe Smart Contract Vibe Coding by @SagivMooly Chief Scientist of @Certora
“Vibe coding” in web3 often fails due to missing guardrails.
Full video below 👇🧵
Shane retweeted
Today @SagivMooly is taking the stage at @EthereumDenver to present:
“Safe Smart Contract Vibe Coding”
If you vibe code, this one’s for you 👀
📅 12:40 PM
📌 Futurllama Stage
We’re thrilled to announce @SagivMooly, Chief Scientist at @Certora, as a speaker for ETHDenver 2026!
Mooly Sagiv is a leading researcher in formal verification, applying mathematical rigor to smart contract security.
In New BUIDL City, leaders like Mooly help show there’s somETHing for everyone to build and explore.
