So proud of this team 🔥
We spent years finding vulnerabilities before attackers did. That was the easy part.

Teams already know what's broken. Nobody has the bandwidth to close it.

Today we raised $16.5M to make Cantina the security workforce for your security workforce. cantina.review/next-chapter-2…
1
1
12
974
Always a pleasure working with the @arkisxyz team. Excited to see where this goes.
Arkis has partnered with @spearbit, the security research firm behind reviews for @Morpho, @coinbase and @liquid_col to create the first fully verifiable, tamper-proof digital provenance for institutional smart contracts.
@spearbit's sign-off is required before any release reaches production, and anyone can verify it independently. arkis.xyz/blog/arkis-x-s…
0
1
5
977
We're hiring for Lead web3 security researchers at Cantina, if you've done audits before send us your application and let's chat! 🙂
pod5.app.loxo.co/job/NDQ1MDIta2…
7
11
121
7,821
We’re putting real engineering time into getting this right. If you want to follow progress or get early access, the waitlist is in the original post.
The AI security tool we’re building surfaced a high-severity vulnerability in Cosmos’ bug bounty, confirmed on HackerOne. We’re designing it for signal > noise so organizations can prioritize real risk.

The waitlist is now open.
2
0
4
1,029
Alireza Arjmand retweeted
Ultimate Security Games - Season 1 gallery is out!

Congrats again to team Europe @Zigtur @Montyly @GalloDaSballo and @AliceAndB0b!

Shoutout to the legends who brought the heat:
Team Americas — @0xleastwood @_Allarious @0xriptide @jonataspvt

Team Asia — @HickupH @banditx0x g thanks to the sponsors who made it possible:
@monad
@coinbase
@immunefi
@sigp_io
@PashovAuditGrp
6
11
59
11,990
Had an amazing chat with @lista_dao and @HashDit 🚀
Building Securely on BNB: Practical Lessons from Hashdit, Lista and Cantina x.com/i/broadcasts/1…
0
1
7
836
Very well deserved! Congrats to team Europe!! 😁 I love this community 😂
EUROPE CHAMPION 🏆
1
0
18
1,787
I'll be competing in this 👀🔥 live from Argentina 🇦🇷
Mark your calendars, November 20th is Season 1 of Ultimate Security Games, live in Argentina.

Watch smart contracts get hacked in real time as three teams race to be first to steal the funds.

We're grateful to the sponsors who made this happen:
@monad
@coinbase
@immunefi
rp

Get your tickets for the in-person event -- link in the reply.
1
0
15
2,112
Down for the challenge? Let's work together, anon 😎👀
We’re hiring 🪐

Cantina is looking for Security Researchers to join our network and work on deeply technical smart contract and protocol audits.

The ideal candidate is:
•Experienced in Solidity and EVM vulnerabilities
•Curious, rigorous, and collaborative

Link below:
2
0
29
3,357
Looks like one of the npm package maintainers got compromised, check your projects and stay safe out there!
Npm package maintainer got pwned and now a bunch of packages he maintains (including debug-js) have malware in them. Check your deps immediately:

github.com/debug-js/debug…
1
1
7
1,828
Replying to @_Allarious
Full report isn't out yet, but it seems like the attacker can replace target address with its own. So check that your computer isn't affected. jdstaerk.substack.com/p/we-just-foun…
0
0
3
833
After 2.5 years of auditing at @OpenZeppelin I'll be joining @spearbit starting next week! Really appreciate all the opportunities I got at OZ and looking forward to the future 👀
13
1
151
7,753
Check this one out!! Alex drops amazing content again!
Recording of the Workshop on Security Research Tools

- Check the chain
- Decompile Contracts
- Build a Critical POC (Live)

Video:
youtube.com/live/tDFA8cnHo…

Slides:
docs.google.com/presentation/d…
1
1
6
1,810
Great write-ups by @patrickd_de! Highly recommended for anyone looking to enhance their knowledge in the field!
I normally find retweeting my own stuff pretty cringe, but it seems like lot's of you haven't seen these yet and I honestly think they're severely underrated :P

ventral.digital/posts/2023/3/2…
0
0
4
1,331
Going to EthCC this year!
Any suggestions on what to check out?
5
0
9
1,792
There are many tutorials on how to become an auditor, but not as many about auditor's mindset. I personally believe a common mistake many new auditors make is 'Starting Small'. 🧵👇
6
8
49
8,418
Replying to @_Allarious
While some people might want to rush into audits, and win small prizes by finding minor bugs, focusing on learning and growing as an auditor has much more return on time investment in the long run.
1
0
7
957
Replying to @_Allarious
As an auditor, trust yourself and use your unique perspective and find those bugs that only you can find. There is a big bug waiting for you to be found Mr. White Hat. What are you waiting for? 👀
0
0
10
865