Pinned Tweet
Hattrick has been achieved! 3 Cosmos SDK contest wins in a row 🥇
Years of grinding Cosmos audits paid off. Success does not (always) come overnight, guys.
Shoutout to @code4rena, the amazing contest sponsors, and everyone involved!
Especially the amazingly skilled @3DOCsec, ner up with me. Thanks!
Years of grinding Cosmos audits paid off. Success does not (always) come overnight, guys.
Shoutout to @code4rena, the amazing contest sponsors, and everyone involved!
Especially the amazingly skilled @3DOCsec, ner up with me. Thanks!
The results of the $80,000 Initia Cosmos competitive audit are in!
Congratulations to everyone who submitted valid findings, especially to @bernd_eth for securing over half of the total prize pool along with 7 solo high-risk findings submitted!
Much respect to @initia for their o the highest security outcomes.
Full list of winners in thread 👇
32
4
176
12,702
This shit is happening over and over. KYC in its current form is a liability and a huge risk. This is just not acceptable
We had a data breach affecting the system powering Gnosis Pay-branded cards (our B2C business line) that resulted in the exposure of certain customer information.
Everyone affected was sent an email today with full information.
We deeply regret that this happened. While funds were not affected, the security of personal information is just as important and we take full responsibility.
Additional measures are in place until the B2C platform involved is fully retired as planned on 20 December 2026. In the meantime we encourage everyone to be even more vigilant. We will never ask for your PIN or seed phrase, or ask you to move funds.
Further Details: gnosispay.com/blog/data-brea…
We encourage security researchers to communicate security vulnerabilities directly with us via bounty@gnosis.io. The same rewards apply as to Gnosis Chain: immunefi.com/bug-bounty/gno…
0
1
16
591
BΞrnd retweeted
Heads up for anyone writing Rust today.
The Rust Security Response Team just disclosed a supply chain attack. The popular arrayref crate was republished to pull in a malicious dependency that downloaded a payload through its build script.
arrayref isn't obscure. If you or your dependencies pulled it recently, you'll want to check now.
The malicious versions to look for:
> arrayref 0.3.10
> internment 0.8.7
> append-only-vec 0.1.9
> proc-macro1, plus typosquats: proc-macro-en, aovine, arone, aronenao, tinymember
All deleted from crates.io, and the maintainer's account is locked. The team believes the author's credentials were compromised rather than the author acting maliciously.
Full advisory, including the one-line command to scan your local cargo cache:
blog.rust-lang.org/2026/08/20/sup…
The Rust Security Response Team just disclosed a supply chain attack. The popular arrayref crate was republished to pull in a malicious dependency that downloaded a payload through its build script.
arrayref isn't obscure. If you or your dependencies pulled it recently, you'll want to check now.
The malicious versions to look for:
> arrayref 0.3.10
> internment 0.8.7
> append-only-vec 0.1.9
> proc-macro1, plus typosquats: proc-macro-en, aovine, arone, aronenao, tinymember
All deleted from crates.io, and the maintainer's account is locked. The team believes the author's credentials were compromised rather than the author acting maliciously.
Full advisory, including the one-line command to scan your local cargo cache:
blog.rust-lang.org/2026/08/20/sup…
6
50
155
14,403
200 🐐s securing this space! I'm proud to be selected as one of them.
Let's get to work - duty calls.
Let's get to work - duty calls.
The final 100 ETHSecurity Badge holders are in!
That brings us to 200 security experts, guiding how TheDAO allocates its funds and also coordinating behind the scenes to make Ethereum safer.
Big thanks to everyone who engaged with the process and helped shape it, and to g the tooling that made it possible.
5
0
41
1,595
Happy to end 2025 in 3rd place on the @code4rena leaderboard!
1,206.
That’s how many awards were distributed to C4 Wardens in 2025.
Thank you to all of the Wardens who committed their time each day to making C4 the place where the best researchers compete.
And a special shoutout to the Wardens who finished in the top 10 on the C4 st 365 days!
1
0
50
2,742
It is @SecurityOak who brought me into this industry, gave me a chance to prove myself, and trusted my abilities from the very first audit. Thank you!
It's great to see how things have grown and matured, and I'm proud to work alongside 50+ chad auditors.
Cheers to the future!
It's great to see how things have grown and matured, and I'm proud to work alongside 50+ chad auditors.
Cheers to the future!
We’ve had a glowup!
Since 2017, we have conducted over 600 audits.
Today, we offer everything from protocol design to operational security, training, economic advisory, and pentesting.
New look, new services.
The same uncompromising quality!
Book. Secure. Relax.
2
1
28
3,303
Don't trust your validators, always verify!
One of my 17 HMs in the recent @zetachain contest on @sherlockdefi made it into the spotlight 🎉
One of my 17 HMs in the recent @zetachain contest on @sherlockdefi made it into the spotlight 🎉
Welcome back to Sherlock's Vulnerability Spotlight, where we highlight an impactful vulnerability uncovered during a Sherlock audit.
This week, we have Deposit Spoofing.
It was uncovered by @0xalpharush & @bernd_eth on the @zetachain Cross-Chain Contest. 🧵
2
2
57
2,931
BΞrnd retweeted
Let's go!
Happy to have placed 2nd 🥈 in the recent @zetachain contest, hosted by @sherlockdefi
Although my streak of 4 consecutive Cosmos SDK audit contest wins has ended, I'm still proud to help improve the security of this ecosystem.
On to the next challenge!
17
12
96
8,391
Let's go!
Happy to have placed 2nd 🥈 in the recent @zetachain contest, hosted by @sherlockdefi
Although my streak of 4 consecutive Cosmos SDK audit contest wins has ended, I'm still proud to help improve the security of this ecosystem.
On to the next challenge!
Happy to have placed 2nd 🥈 in the recent @zetachain contest, hosted by @sherlockdefi
Although my streak of 4 consecutive Cosmos SDK audit contest wins has ended, I'm still proud to help improve the security of this ecosystem.
On to the next challenge!
🏆 @zetachain Audit Contest Results 🏆
Congrats to:
1. @gjaldon - $93,612 + 35,000 ZETA 🥇
2. @bernd_eth - $41,431 +20,000 ZETA 🥈
3. @0xSimao - $9,440 + 10,000 ZETA 🥉
$200,000 rewards ➡️ $15.8M+ paid out in rewards.
25
1
147
13,701
IQ arithmetic overflow!
It was awesome to hang out with all those chads! Until next time!
It was awesome to hang out with all those chads! Until next time!
SR-Boat Cannes edition
A full day of touching water and finally getting some sun with @amyyy_g_ @heavyw8t_ @MartinMarchev @mattaereal @n4nika_ @bitbugshar @MarioPoneder @eugenioclrc @bernd_eth @p_misirov @BazziBazzani @HickupH @kamensec @rotcivegaf @gorgut_ @0xWeisss
0
0
30
1,758
BΞrnd retweeted
It was fun to see 2 of the best Cosmos-SDK auditors in the industry battling it out in the @zetachain competition.
Congrats to @gjaldon and @bernd_eth for the results.
With this 🥈medal @bernd_eth has finally joined the elite LSW club; it was a long time coming.
Congrats to @gjaldon and @bernd_eth for the results.
With this 🥈medal @bernd_eth has finally joined the elite LSW club; it was a long time coming.
🏆 @zetachain Audit Contest Results 🏆
Congrats to:
1. @gjaldon - $93,612 + 35,000 ZETA 🥇
2. @bernd_eth - $41,431 +20,000 ZETA 🥈
3. @0xSimao - $9,440 + 10,000 ZETA 🥉
$200,000 rewards ➡️ $15.8M+ paid out in rewards.
2
1
21
1,610
BΞrnd retweeted
0/ the biggest ethereum upgrade since the merge is coming.
and this time, you’ll feel it.
it’s called pectra and here’s why it matters
a guest thread by @binji_x ↓
and this time, you’ll feel it.
it’s called pectra and here’s why it matters
a guest thread by @binji_x ↓
670
2,330
10,877
1,322,579