Smart Contract Eng @aave, prev @reya_xyz @cambridge_cl @google project zero
Romania
Joined December 2016
- Tweets102
- Following1.2K
- Followers1K
- Likes6K
Alexandru Niculae retweeted
We are hiring a Senior Cyber Security Engineer at @aave
The role focuses on security operations and architecture, including SIEM, identity management, and related infrastructure
Details: aave.com/careers/senior-cybe…
Alexandru Niculae retweeted
Keep an eye out for the full videos of the panels on YouTube.
youtube.com/@AaveLabs
Alexandru Niculae retweeted
Proud of the Aave Labs team for their work on Aave V4, our most ambitious release yet. After 18 months of design and development, a full architecture overhaul, and powerful new features, we’re now getting stellar feedback from leading security researchers.
Nothing less than excellence from the leadership of @The3D_ and the outstanding team @miguelmtzinf @imderl @CheyenneAtapour Yan @_aniculae @CanonicalJP.
Can't wait to publish the Aave V4 code.
The award for cleanest pre-audit codebase I've ever seen (so far) goes to: Aave v4.
Despite high complexity, there are almost no "simple" issues that one expects a few of in any codebase of this size.
I suspect this is a combination of careful design, consistent application of best practices (e.g. explicit rounding, checked casts), and a detailed test suite that leverages fuzzing and invariants.
Alexandru Niculae retweeted
I tweeted before about the Apple CoreAudio issues found by Google TAG. Well, the fuzz harness used to find these issues is now included in Jackalope examples, see github.com/googleprojectzero… . Happy fuzzing! :)
Alexandru Niculae retweeted
Thank you. I used Jackalope by Ivan Fratric.
github.com/googleprojectzero…
Alexandru Niculae retweeted
It’s official! 🇷🇴 ETH is coming to Romania! 🇷🇴
🗓️Clear your calendars for March, 27 - 30th, 2024.
‼️ We will have 2 days of Hackathon and 2 days of Conference
Stay tuned as more announcements are coming out this week.
And, let's spread the word y'all! LFG! 🔥
Alexandru Niculae retweeted
With Echidna 2.1.0 and later, you can retrieve on-chain data to fuzz deployed contracts and test how new code integrates with existing contracts. You can also use it to recreate real-world hacks! blog.trailofbits.com/2023/07…
Alexandru Niculae retweeted
The app also replaces the official Safe web app and includes a lightweight back-end that can be self-hosted in place of Safe's centralized API.
The UI leverages data from Cannon packages to make it as easy as possible to verify staged transactions.
Alexandru Niculae retweeted
Mind the Gap googleprojectzero.blogspot.c…
Alexandru Niculae retweeted
Great dashboard on @voltz_xyz, an AMM for interest rate swaps
Already with $60.32m in notional value traded, and $189.64 notional liquidity provided - the protocol is growing nicely.....
dune.com/voltzdev/voltz-prot…
Alexandru Niculae retweeted
*whispers* It's only the Internet Explorer desktop application that's going out of support. The browser engine, MSHTML, will be supported on Windows machines until 2029...
Alexandru Niculae retweeted
Spectre-v2 is back! Disclosing Branch History Injection (#BHI/#Spectre-BHB), bypassing Spectre-v2 hw defenses to leak arbitrary kernel/host memory (e.g., root password hash below). Joint work by @enrico_barberis @pit_frg @nSinusR @herbertbos @c_giuffrida: vusec.net/projects/bhi-spect…
Alexandru Niculae retweeted
arxiv.org/abs/2203.00671
"Maximum Flow and Minimum-Cost Flow in Almost-Linear Time"
A very big congratulations to the authors!
Alexandru Niculae retweeted
Introducing #AlphaCode: a system that can compete at average human level in competitive coding competitions like @codeforces. An exciting leap in AI problem-solving capabilities, combining many advances in machine learning!
Read more: dpmd.ai/Alpha-Code 1/
Alexandru Niculae retweeted
I crafted a PNG image that says something different on Apple vs non-Apple devices: da.vidbuchanan.co.uk/widgets…
(unfortunately it won't work directly on twitter...)
Alexandru Niculae retweeted
Recently I encountered a fuzzing target that takes pretty large files as input, but only a part of each file is actually read by the target. The bad news was that this "interesting part" was sample-dependent and difficult to determine without replicating the target behavior.(1/?)
Alexandru Niculae retweeted
-generate_unwind on macOS should be even faster now (no context switch even when a c++ exception does occur) as well as possibly more reliable in some cases. If you tried it, I'd appreciate if you could send me a DM to let me know if it worked well for you or not.
Alexandru Niculae retweeted
Stop and UPDATE your iPhones to iOS 14.8 NOW!!! We @citizenlab recovered NSO Group's FORCEDENTRY zero-click exploit (CVE-2021-30860) from the phone of a Saudi activist, and shared w/ Apple, who released iOS 14.8 today with a fix. citizenlab.ca/2021/09/forced…
