Security Researcher @quillaudits_ai I Smart Contract Audit | @chainlink DevExpert Learning & acquiring knowledge consistently
Joined May 2022
- Tweets343
- Following641
- Followers728
- Likes1.4K
Pinned Tweet
🥇 secured 1st place in the MorpheusAI contest! 🥇congrats to all and let's keep improving 💪 with the aim of making the web3 ecosystem safer.
Awards have been announced for the MorpheusAI contest🤝
Top 5:
🥇 @turvec_dev - $2664.89
🥈 SovaSlava - $2530.1582328058903
🥉 @0xhals - $2068.79
🏅 @mrpotatomagic - $1952.28
🏅 @iamandreiski - $1908.08
(1/2)
Victor Okafor retweeted
🔐 QuillAudits at DeFi Security Summit!
We’re excited to have @kalp_eth, @cryptanu and @turvec_dev representing QuillAudits at @summit_defi.
From invisible circuit exploits and quantum-safe blockchain security to Damn Vulnerable Daml, our auditors are bringing real-world security insights to the stage.
See you at DSS, Nov 1–2. 🛡️
#DSS #DeFiSecurity #QuillAudits
As an auditor, I know a small code change can affect assumptions across an entire protocol.
That’s what excites me about QuillShield: reviewing each PR with the protocol’s full context, bringing security feedback into development while there’s still time to act on it.
8 years of auditing smart contracts. Thousands of findings.
And the same pattern every time: the code was done, the audit was next, the launch was waiting.
We built something that reviews the code while it's still being written.
First look at QuillShield.
The most powerful AI security reviewer for onchain code we've ever built. It reviews every pull request with the full context of your protocol, starting from a complete audit of it.
Opening a small beta. DM for access.
Excited to announce that I will speak at DSS this year in Mumbai on 1–2 November.
In my session, I will explore five layers of blockchain security exposed to quantum threats and why post-quantum signatures alone won’t make a blockchain quantum-safe.
Closing the October 3 DSS speaker slate: @turvec_dev
“Quantum-Safe Is Not Just Post-Quantum Signatures: The Five Other Layers Quantum Actually Breaks in Blockchains”
Explore the talk and add it to My agenda:
defisecuritysummit.org/2026/…
Tickets: luma.com/9qtxqqxx
ALT DSS 2026 speaker announcement card for Victor Okafor: Quantum-Safe Is Not Just Post-Quantum Signatures: The Five Other Layers Quantum Actually Breaks in Blockchains.
Victor Okafor retweeted
Closing the October 3 DSS speaker slate: @turvec_dev
“Quantum-Safe Is Not Just Post-Quantum Signatures: The Five Other Layers Quantum Actually Breaks in Blockchains”
Explore the talk and add it to My agenda:
defisecuritysummit.org/2026/…
Tickets: luma.com/9qtxqqxx
ALT DSS 2026 speaker announcement card for Victor Okafor: Quantum-Safe Is Not Just Post-Quantum Signatures: The Five Other Layers Quantum Actually Breaks in Blockchains.
One thing that still surprises me in Web3 is how much effort we put into securing smart contracts
while some of the most sensitive credentials in a project are still passed around in .env files.
API keys, RPC credentials, deployment secrets…
And once multiple devs are working on the same project, you eventually hit the question:
How do you actually share .env variables securely without exposing the secrets themselves?
I've seen devs ask this more than once.
For something this common, there really should be a better default than Slack/Telegram, shared files, or whatever workaround the team comes up with.
Turns out @urbandev__ has been building exactly that with Enver.
→ .env encrypted locally before leaving your machine
→ Shamir's Secret Sharing for key recovery/access
→ Backend only sees encrypted data, never plaintext secrets
→ Open source + CLI
Really glad to see someone tackling this problem properly.
docs.enver-os.xyz/introducti…
Victor Okafor retweeted
12 projects. 155 findings. 0 missed deadlines.
That was August at QuillAudits 🚀
5 critical
24 high
42 medium
50 low
34 informational
All 155 reported to the team, all 155 resolved before sign-off.
Shipping in Q4? No audit booked yet.
Talk to us soon . September is already filling up 👇
calendly.com/akshadh-a-quill…
Victor Okafor retweeted
August was one of those months where you just sit back and feel genuinely proud of the team.
Our audit team @QuillAudits_AI absolutely crushed it: ✅ 12 projects audited - all delivered on time
🔍 155 findings identified
Huge kudos to @kalp_eth, @Pro___King1,@phoenix244001, @cryptanu, and @turvec_dev for the exceptional work and relentless commitment to securing Web3.
Hats off to you all. On to the next one....
Victor Okafor retweeted
Glad to complete my first move audit engagement.
I only had 2 weeks to learn it from scratch and implement the skills.
More refines to go. More tech stacks to go !
Huge shoutout to @AkshayBabhulkar and @turvec_dev !
Join us for Tokenized Finance: Rules & Risks
@QuillAudits_AI
- a working forum in Dubai on September 10🚀
📍 Dubai
🗓️ Thursday, September 10, 2026
⏰ 10 AM–1 PM GST
Tokenized Finance. Real talk. Big ideas🥷
🔗 Register: luma.com/49x1vept
Victor Okafor retweeted
At @QuillAudits_AI this week, We Just finished auditing Move vaults Contracts which is getting deployed on @movement_xyz .
Movement chain is a bit different, it needs attention. Kudos to @phoenix244001 and @turvec_dev for going deep into the Move language and Movement chain architecture.
We found 16 issues. Here’s what we checked 🧵
Still can't get over how great this database is. Thank you, @0xSimao 🙌
0xsimao.com/findings
Victor Okafor retweeted
Completed the security audit for @MSTBlockchain
MST Chain is an EVM-compatible Layer 1 blockchain designed for high-speed (4,000+ TPS), low-cost transactions using a Proof of Stake Authority (PoSA) consensus. Built for enterprise-grade applications, it powers use cases across fintech, supply chains, digital identity, and beyond.
The audit is now complete, helping strengthen the network ahead of continued ecosystem growth.
Read the full audit report 👇
quillaudits.com/leaderboard/…
Been thinking about this a lot after the recent wave of hacks. Almost every one traces back to key compromises or off-chain access, not code bugs. Maybe this was the missing piece all along; no admins means the only attack surface left is the code itself. Back to "code is law."
Victor Okafor retweeted
We've started our security review for @MSTBlockchain .
We're diving into the protocol and infrastructure layer to assess security, reliability, and network behavior across the updated implementation.
Excited to work alongside the team as they continue building.
Looking forward to digging in and sharing our findings when the review wraps up
We hosted "Unlocking Web3 in Nairobi" last month — and it was everything 🔥
Devs, students, and builders packed the Blockchain Centre NBO to learn about how blockchain's core fundamentals work, the career opportunities in Web3, and what it actually means to build on-chain.
Huge thanks to everyone who showed up and @Chainlink for making it happen.
The energy in Nairobi's Web3 scene is REAL. This is just the beginning 🇰🇪
Victor Okafor retweeted
Audited once. Scanned by a leading AI tool.
Still had 15 bugs hiding inside.
@QuillAudits_AI found them. High severity. Medium severity. Manually and with QuillShield.
The bar just moved. @turvec_dev @phoenix244001
Spent the morning reading StarkWare's Quantum Secure Bitcoin (QSB) proposal. Wild concept.
It protects BTC from quantum attacks without a soft fork by replacing ECDSA with hash-based puzzles. Cost? $75–$200 per transaction and hours of GPU compute.
Not a daily-use fix. More like cold storage for the post-quantum era. The attack surface around signature schemes is about to get very interesting. 👀
Victor Okafor retweeted
North Korea didn’t hack crypto.
They hacked people, hiring funnels, signing flows, and trust.
Security in 2026 = wallets, UI, RPC, ops, and human training.
Everyone should study THIS playbook.
S/O to @QuillAudits_AI for the visual
