Valves Calibration-expert/maths scientist/Bug-Hunter/blockchain security researcher.
Port Harcourt, Nigeria
Joined December 2017
- Tweets4K
- Following5.1K
- Followers403
- Likes5.8K
SMarT retweeted
That gap is where exploits live.
we match protocols with security researchers, who specialize in that exact architecture,
If you’re building and haven’t been reviewed yet, write me up, let me known your budget
SMarT retweeted
Norway doesn’t have anyone in the top 100 but ranks 3rd globally in HDI. Nigeria is 161 globally.
I could give zero fucks about Dangote’s wealth.
SMarT retweeted
Today we are announcing that S&P Global has entered an agreement to acquire OpenZeppelin.
Onchain finance is growing from an emerging market into core financial infrastructure, and the standards and rails our team and community built are becoming the rails of global finance. OpenZeppelin smart contracts facilitated over $37 trillion in value transferred, with the vast majority of the largest DeFi protocols, blockchain networks, stablecoins and tokenized funds relying on them.
With S&P Global, we expect to accelerate the impact of onchain finance, backed by more than a century of trust in global markets, benchmarks, and risk frameworks.
To our clients and to all the users of OpenZeppelin open source tools:
• OpenZeppelin Contracts and all our open source applications and tools remain open source, free, and publicly maintained on GitHub. Building open source standards stays a core priority.
• Audits, engineering work, and ecosystem programs continue with the same team, brand, quality, and customer experience, with what will be the added benefit of S&P Global's research capacity, market data, and institutional reach.
For the last decade, OpenZeppelin has set the security standard for onchain finance. Today begins a new chapter for that mission, together with one of the most trusted names in global markets.
Read the full announcement: openzeppelin.com/news/spglob…
SMarT retweeted
Debunking the Phantom Debts and Ecological Loan Fallacy
My attention has been drawn to trending claims by the Anambra State Government that my administration left behind inherited debts, including a ₦2 billion ecological loan, contractor liabilities, and unpaid salaries, gratuities, and pensions. This is completely false.
We systematically liquidated historical gratuities and arrears dating back several years, amounting to over ₦35 billion. At the point of handover, the state owed nothing in salaries, gratuities, or pensions, nor did we owe anything to any contractor for projects duly executed and certified.
The ₦2 billion ecological fund in question was released barely three months before the end of my tenure for the Oko/Umuchiana erosion crisis. Despite pressure to spend the money, I refused, insisting that it should be left for my successor because government is a continuum and the funds were tied to a specific project.
The money was therefore left 100 per cent intact in First Bank, in Account No. 2018779464, with a balance of over ₦2.13 billion.
It is important to stress that funds tied to specific projects or set aside for particular purposes were not even included in the over ₦75 billion in savings we left behind.
If anybody can establish anything to the contrary, I will stop campaigning. -PO
SMarT retweeted
The perfect slaves in the entire milky way galaxy. They can adapt to every form of hardship thrown at them and the Nigerian politicians know this.
SMarT retweeted
I compiled over 11k bug bounty reports into one library
a little bit ago, I wanted to run some analysis on bounty reports, but had a hard time finding and compiling everything especially across platforms
so I decided to just make a library + api for anyone who wants to run any sort of tests/analysis etc
lemme know what yall think + anything to add to make it as useful as possible :)
link in replies
SMarT retweeted
Good news from around the world that nobody is talking about.
1. A Polish steamer set a world record by raising more than $58 million to help children with cancer.
2. In Germany, prisoners learn new skills like cooking and carpentry to prepare for reintegration into society.
3. A surgeon saved a teenager now they operate together for charity in Ethiopia.
4. Spain became the first country to approve paid menstrual leave for workers suffering from severe pain.
5. Mexico copies Brazil's SUS and announces a free and accessible health care system for everyone.
Thanks for reading, so you on our next post bye 👋
SMarT retweeted
I’m in love with this sentence:
“Every pattern in your life repeats until you learn the lesson. The moment you choose differently, the loop ends and growth begins.”
SMarT retweeted
You will find a Critical vulnerability.
You will find a Critical vulnerability.
You will find a Critical vulnerability.
You will find a Critical vulnerability.
You will find a Critical vulnerability.
You will find a Critical vulnerability.
You will find a Critical vulnerability.
SMarT retweeted
Nothing against you or the estate, but this is something that genuinely bothers me about Nigeria. We have normalized marketing basic human necessities as luxury.
A concrete road shouldn’t be a luxury. Electricity shouldn’t be a luxury. Clean water shouldn’t be a luxury. Proper drainage and access to healthcare shouldn’t be luxury.
These should be the bare minimum standard of a decent community, not the reason someone has to convince you to buy a house there.
SMarT retweeted
Today, we’re releasing rCTF v2, an open-source platform for hosting cybersecurity capture-the-flag competitions.
ALT The signature rCTF wordmark, white on black with red accenting. A red stylized “v2” sits slanted on the bottom-right side.
ALT A screenshot of rCTF's matrix-style leaderboard displays teams as rows, challenges as columns, and their intersection as the team's solve status on that challenge. Each team has a custom avatars, country flag, and tagline. A sparkline shows the team's scoring activity. The top-left corner of the leaderboard displays a line chart, plotting the visible teams against each other.
ALT A screenshot of the rCTF's challenge listing. It is panel-style; the left side displays all challenges within the event, while the right side displays the details of a particular selected challenge (the challenge's description, attachments, and any custom instancing).
ALT The platform's admin view allows for viewing and auditing of the submission logs from all teams. A complex filtering system allows filtering against (non-exhaustively) challenge names, submission results, and time intervals.
SMarT retweeted
one of fountain of auditing is to throw all of it around the protocol asset coverage and flows
Who: Assets should be withdrawn/deposited only by authorised/specified addresses as per application logic
When: Assets should be withdrawn/deposited only in authorised/ time windows
SMarT retweeted
🚨 BREAKING 🚨
Infamous Russian hacker and beatboxer exposes exactly how hackers got access to private GitHub repositories
SMarT retweeted
I always tell my clients, that, An external auditor doesn’t have your mental model.They don’t know what you meant to build.
They bring three things you can’t into your codebase.
Methodology : A repeatable process to stress systems, with your assumptions.
SMarT retweeted
This math teacher, Anthony Iwegbu, walked up to me today to tell me that he is the first in his lineage to have gone abroad. He said that bringing him to Rome, all expenses paid, will change his life forever as a teacher.
At first I didn’t believe it, but I’m happy that his effort as a teacher has made that possible for him.
I really love to see our teachers excel. They have been neglected for so long.
SMarT retweeted
👇👇👇
rektoff.xyz/bootcamp
If you've already applied or have questions about the program, let us know in the comments.
SMarT retweeted
My take on the Zcash bug.
I never worked on Zcash as a target because I didn’t didn’t even know they had a BBP.
It it were a 2M bounty on Immunefi I think I would have been very likely to find it back in 2023.
I found three similar ZK bugs that year, plus 3 others in verifiers. All loss of TVL.
I read every single line of circuit code (multiple times) that had a an Immunefi BBP with max bounty >= 1M between 2023 and early 2024 and earned more than 1M from that effort, in just one year. Made even more later.
During all that time I didn’t even know there was a Zcash bug bounty. (Or Solana for the matter!)
Im sure there were other people doing this that found ZK bugs too.
I dont think anyone ever spent that kind of effort on their code base.
Most of those code bases I found bugs in had been heavily audited (that’s true in general for most findings).
“AI found this bug humans missed for 4 years” is a catchy headline
The reality is for 4 years they really didn’t incentivize humans properly.
And there are likely many other ZK bugs out there not found yet by humans, AI-assisted or not.
I wonder if any LLM could have found it without training of my own disclosures from 2023, ToB’s articles, RareSkills content etc
You can hope you will find all the bugs with an AI trained on data from 6 months ago at best — and hope your code only has bugs similar to publicly disclosed ones.
Or you can “risk” having to pay something like 1M instead of insta-crashing down 50% of market cap — or worse.
If exploited those are protocol-ending bugs.