Securing DeFi @chain_security | CTF Player for @0rganizers and @polygl0ts 🚩
Zurich
Joined October 2021
- Tweets91
- Following434
- Followers239
- Likes747
Marc retweeted
How likely is an address collision attack at 2⁸¹ hashes?
- Some audit competition reports said 86%.
- In fact it is 63%.
Why? They apply the classic birthday-paradox formula, counting collisions that aren't useful to the attacker. We break down the correct model in this blog: chainsecurity.com/blog/addre…
Marc retweeted
1/8
We're hiring for technical and sales roles!
1. Blockchain Security Engineers (multiple)
2. Business Development Engineer
Here’s a bit about what working at ChainSecurity looks like.👇🧵
Looking forward to give this workshop. Also no prior experience in smart contracts is needed !
🛡️ What really happens when a smart contract protocol gets exploited?
Learn to identify and resolve vulnerabilities in a hands-on workshop with @chain_security.
🗓️ Monday, April 27th
⏰ 18:00 – 19:00
📍 CAB G59
🍕 Free pizza & drinks
Register here: luma.com/pqs79xdb
Marc retweeted
1/9
Ever wondered how leveraged positions work with real-world assets (RWAs) on-chain? It's trickier than you'd think, and @3f_xyz has a clever solution, called Grunt. 🧵
Marc retweeted
It's official.
Audits for Aero are underway.
Starting with a technical design audit by @chain_security.
Code audits and pre-launch bug bounty contest to follow.
See you in July ✈️
Marc retweeted
@Circle Nanopayments is live on testnet! Agents can now send $USDC payments as small as $0.000001 with zero gas fees. ⚡️
We’ve been working closely with the team and audited the underlying Circle Gateway to help secure the rails for new agentic economy! 🛡️
circle.com/blog/circle-nanop…
Marc retweeted
Inaccurate gas estimates on @ton_blockchain can lead to critical security issues. 🛡️
Today, our TON specialists share the knowledge gained from vulnerabilities uncovered during recent DeFi audits.
Dive into the technical details: chainsecurity.com/blog/ton-g…
Marc retweeted
Proud to help secure @Circle, supporting compliance w/ MiCA & GENIUS
Since ’22, we audited USDC & EURC on EVM @solana @SuiNetwork @Aptos @Starknet @ton_blockchain + crosschain protocols eg. CCTP V1/V2 & Circle Gateway
More on @Circle compliance & audits: circle.com/genius-act
Marc retweeted
⚡ @Spittfires_ from @chain_security explained why L2 sequencer downtime is a real risk for stablecoins.
Frozen prices, sudden oracle updates, and rushed liquidations can all lead to bad debt.
See the risk in action:
youtube.com/watch?v=13puVHmz…
Marc retweeted
🧵Hola Buenos Aires! ChainSecurity is in town for @EFDevcon & @partyactionppl 🇦🇷
From talks, panels, MC duties, and community events,
here’s your full chronological guide to where you can catch our team 👇
Looking forward to my first presentation at DSS !
Many Solidity developers misunderstand how try/catch really works.
At DSS, @Spittfires_ from @chain_security explains how Solidity handles errors, panics, and raw reverts, as well as key edge cases and safe patterns for handling failed external calls.
Marc retweeted
1/6 We recently audited @etherealdex, a USDe native perp DEX built as an appchain on @arbitrum Orbit. Summary below 🧵
chainsecurity.com/security-a…
Looking forward to talk about Stablecoin Safety on L2s after Sequencer Downtime !
🎙️ @Spittfires_, Security Engineer, @Chain_Security
Marc is speaking at Stable Summit!
Join him at Ciudad Cultural Konex in Buenos Aires during DeFiConnect on 18–19 November.
🎟️ tickets.deficonnect.co
Marc retweeted
1/8 🧵 We recently audited @makinafi, a cross-chain asset management protocol focused on operational security by design.
Makina’s core principle: even if an operator is compromised, user funds should remain safe. More info in this thread 👇
chainsecurity.com/security-a…
Honored to be speaking! I’ll be talking about Stablecoin Safety on L2s after Sequencer Downtime. Excited and looking forward to it!
🎙️ @Spittfires_, Security Engineer, @chain_security
Marc audits smart contracts at ChainSecurity, helping secure core DeFi and stablecoin infrastructure.
Join him at Stablecoin Summit to talk security at the protocol layer.
📌 Andaz Singapore
🗓️ 2 Oct
Marc retweeted
1/7 🧵
We recently conducted a security review of @pendle_fi @boros_fi. Here’s more info about it👇
chainsecurity.com/security-a…
Marc retweeted
🚨 The $10M smart contract backdoor flagged by @VennBuild? It could’ve been caught right after deployment with DV.
DV (Deployment Validation) lets teams verify that smart contracts are deployed with the correct bytecode and configuration — preventing issues from misconfigurations to malicious code.
See our demo attached 📷
--> Github link: github.com/ChainSecurity/dep…
Marc retweeted
Incorrect state proofs could have rekt a few large protocols - we teamed up with @CurveFinance to fix this before any harm could be done.
Technical details: chainsecurity.com/blog/when-…
Credits for uncovering the bug goes out to @agureevroman !