⚔️ web3 auditor - @0xPaladinSec | completed 70+ private audits (110+ overall) | developed 5+ defi projects | prev @Bonsai_DAO @rezolv_sol
Joined February 2022
- Tweets579
- Following828
- Followers1.7K
- Likes3.2K
Radoslav Radev retweeted
🚨 Attention all Solidity dev teams - The ultimate Audit Preparation AI tool is here!
Fixing your entire audit preparation process in minutes instead of days for FREE.
Use it before your audit engagement and arrive fully prepared.
Fully open-source. Link in the comments👇
Radoslav Radev retweeted
v1 of the @uniswap CCA audit agent is live on GitHub.
It catches the Critical integration bug we found in our recent audit of an auction built on CCA and a lot more. Tested it against a few scanners currently getting buzz on X, which currently miss the critical.
CCA configs are deceptively dangerous. Tick spacing, decimal accounting, a bunch of nuanced gotchas that are easy to miss if you haven't gone deep on the spec. This agent catches most of these CCA-specific bugs so you can fix them before your code ever hits an auditor's IDE.
Btw, I don't think any of these scanners should be a replacement for your auditor; a better framing is to think of them as dev tools. Run it early, catch the low-hanging fruit, and let your auditor focus on the stuff that actually requires a human.
Personally, I'm way more bullish on domain-specific scanners than generalized ones. Less context upfront leads to better results. That said, you can absolutely pull from this and add it to your current workflow to train your favorite agent.
github.com/33Audits/cca-audi…
Radoslav Radev retweeted
Had a great time auditing with fellow auditors @ret2basic and @radev_eth. We uncovered some cool bugs. Thank you @Slavcheww!
My thoughts on Move codebases after auditing a few last month with my team at @SBSecurity_.
- It’s surprisingly hard to find truly professional Move auditors who understand the language and the specifics of each Move chain, along with the main integrated protocols/libraries.
- The ecosystem is still young, but many products aren’t copy-paste from other chains. A lot of genuinely new ideas (at least from what I’ve seen).
- Documentation, APIs, and reference material around MoveVM are often incomplete. You end up relying on threads and discussions across different communities to validate behavior and assumptions.
- The language itself is relatively easy to learn.
Really grateful to have found one of the best auditors in this space - someone with deep experience across multiple topics who can cover everything end to end. Huge thanks to @ret2basic @p4y4b13 @radev_eth 🙏
Radoslav Radev retweeted
My thoughts on Move codebases after auditing a few last month with my team at @SBSecurity_.
- It’s surprisingly hard to find truly professional Move auditors who understand the language and the specifics of each Move chain, along with the main integrated protocols/libraries.
- The ecosystem is still young, but many products aren’t copy-paste from other chains. A lot of genuinely new ideas (at least from what I’ve seen).
- Documentation, APIs, and reference material around MoveVM are often incomplete. You end up relying on threads and discussions across different communities to validate behavior and assumptions.
- The language itself is relatively easy to learn.
Really grateful to have found one of the best auditors in this space - someone with deep experience across multiple topics who can cover everything end to end. Huge thanks to @ret2basic @p4y4b13 @radev_eth 🙏
Radoslav Radev retweeted
a while back i wrote an article on some security-related nuances when building Uniswap v4 hooks. never shared it publicly but this ended up leading to me finding two high vulnerabilities in various private audits i did
33audits.hashnode.dev/uniswa…
Radoslav Radev retweeted
We ran a blind, empirical test on most AI audit agents in the web3 space, using real contests.
The results?
Most tools missed critical flaws, drowned users in false positives or fail to run at all.
Thread 👇
Radoslav Radev retweeted
A security researcher we recently worked with was amazed by our work ethic 👀
He said:
“You grasp the code extremely fast. I like how you discuss every question in detail in your internal chat & everyone’s involved. And how smoothly everything else is divided among the team.🤝”
Radoslav Radev retweeted
How can you be sure a product is going to be successful?
In web3 this is mainly proven by investing in security.
Our friends at @max_apy refactored their code after their first audit with @rezolv_sol and requested another one after that, just to be sure their users are safe.
Turned out they were right to do so.
Here is the report 👇
github.com/RezolvSolutions/A…
Radoslav Radev retweeted
What our clients say about us ✅
We at @rezolv_sol believe that satisfied clients are what makes one company great, so we strive to provide as much value as possible and walk the extra mile for each one of them! 🫡
But let's see what they actually say about us in the testimonials below 👇
Radoslav Radev retweeted
Actually the more I spend time with successful people the more I realise that the "FUNDAMENTALS" are the important ones.
- consistency
- discipline
- self control
- organisation
- proactivity
If you want to succeed at anything, just improve these "FUNDAMENTALS".
In web3 security, these aren’t just buzzwords - they’re what actually catch vulnerabilities.
🚨 DON'T SKIP THIS POST 🚨
🤔 Ever wondered how to search for bugs effectively?
Here are two Proven Strategies you DON'T know:
$Strategy 1: Start looking where user input processed (try to trigger unexpected behavior)
$Strategy 2: Start looking where bad things can happen (and craft your input such that you trigger the bad behavior)
What are your strategies during an audit?
Radoslav Radev retweeted
At @rezolv_sol, these aren’t goals during auditing - they’re habits!
Actually the more I spend time with successful people the more I realise that the "FUNDAMENTALS" are the important ones.
- consistency
- discipline
- self control
- organisation
- proactivity
If you want to succeed at anything, just improve these "FUNDAMENTALS".
In web3 security, these aren’t just buzzwords - they’re what actually catch vulnerabilities.
Actually the more I spend time with successful people the more I realise that the "FUNDAMENTALS" are the important ones.
- consistency
- discipline
- self control
- organisation
- proactivity
If you want to succeed at anything, just improve these "FUNDAMENTALS".
In web3 security, these aren’t just buzzwords - they’re what actually catch vulnerabilities.
Radoslav Radev retweeted
Since Q1 is over, here’s what went down at @rezolv_sol 🔥
– 5 audits completed (incl. a 4-week deep dive on a complex codebase)
– 3 new clients landed
– Solid partnerships formed
– Gained a ton of knowledge
– Mentored 3 future beasts 🧪
Truth is, we gotta bump those rookie numbers up — Q2 is about going loud.😤
Radoslav Radev retweeted
Yesterday, our friends at @max_apy reached out with a new audit request, and we’re excited to share that today it has begun.
This is our second audit for them, and we couldn’t be happier to be part of their journey. 🫡
Radoslav Radev retweeted
All of @rezolv_sol's latest audits are either happy clients coming back to us or referrals from happy clients.
We never aim to just do the audit, take the money and be done. Our main goal is to build a long-lasting partnerships and see all of our clients succeed.
That's why we are always ready to do a discount or even a payment scheme if the times are tough for them.
This may sound a little risky for us, but we believe that loyalty is a two way street and if we want it from you, you can expect it from us. 🤝
Radoslav Radev retweeted
Fully booked in March and April spots are filling fast.
If you need an audit, now’s the time to lock it in -> t.me/radev_eth ✅
March is fully booked for @rezolv_sol, two new audit requests came yesterday too. Definitely the best month for us so far, we might have to scale soon.