Glad to be a approved vendor and deal contributor on @ycombinator.
For crypto teams applying for this batch (+ future batches), you can use @procur3 to source specialists to secure your stack.
We now support team's that enrol in @alliance @ycombinator @hub71ad and more soon.
For crypto teams applying for this batch (+ future batches), you can use @procur3 to source specialists to secure your stack.
We now support team's that enrol in @alliance @ycombinator @hub71ad and more soon.
Proud to share that Procur3 is now on @ycombinator's YC Deals.
If you've recently been accepted to the winter 2027 batch (or you're alumni), you now have access to Procur3 for your security sourcing needs.
Check out our deal in your dashboard today.
0
0
5
141
Binance hit in the largest exploit to date.
Binance hot wallets lost ~$6.28B across 8 chains today. $6.07B went in the first 55 minutes, and the attacker kept re-sweeping one Ethereum wallet for two more hours.
Since then Tether, Circle, Ripple, Paxos, World Liberty and Binance have frozen ~$2.80B. About $3.27B can still H.
I traced it all on-chain, including how the attacker raced the freezes 🧵
1
1
3
145
Don’t interact with the frontend.
Online gambling platforms have been getting hacked, drained and having user data compromised all month (Gamdom and co).
The attack surface isn’t just your smart contracts anymore.
A16z wrote a report on cybersecurity spend increasing next year (interview of 100 CISOs). Insane arms race happening
Online gambling platforms have been getting hacked, drained and having user data compromised all month (Gamdom and co).
The attack surface isn’t just your smart contracts anymore.
A16z wrote a report on cybersecurity spend increasing next year (interview of 100 CISOs). Insane arms race happening
BREAKING: @Polymarket may have been hacked
> their status page confirms an incident: trading is in
> cancel-only mode and relayer actions are paused while they investigate
> users report wallets drained, top trader @CarOnPolymarket says he lost $800k
> cause not confirmed yet, possibly a cf you use it: don't open the site and don't sign anything until they post an update
stay stafe
0
0
0
32
When I open X, the algorithm floods me with exploits of bridges, exchanges and protocols that never reach mainstream feeds.
Four from the last 48 hours:
Four from the last 48 hours:
1
1
10
276
The stack has grown since then.
Upgrade authority and multisig config
Frontends and API infrastructure
Cloud config
Vendors holding keys on your behalf
Internal IT
All real, buyable security services.
Most teams have never been walked through any of them.
Upgrade authority and multisig config
Frontends and API infrastructure
Cloud config
Vendors holding keys on your behalf
Internal IT
All real, buyable security services.
Most teams have never been walked through any of them.
1
0
0
16
If you head to @procur3 you can see 65+ firms that do smart contract audits, 30+ firms that do pentesting, 40+ that do web2 code audits and more.
A lot of these firms can do it all, you just have to know where to look.
Free to try:
procur3.io
A lot of these firms can do it all, you just have to know where to look.
Free to try:
procur3.io
0
0
5
21
Eamonn | Procur3 retweeted
Apply for your Base Builder Grants then head over to @procur3 to book in your security audit.
75 vetted security firms + $$$ in credits on offer for teams on @base
Secure code is more accessible with Procur3.
75 vetted security firms + $$$ in credits on offer for teams on @base
Secure code is more accessible with Procur3.
Season 2 of the Builder Grant Program is live
Get a $5,000 grant for building on Base ↓
1
1
5
284
Payments, escrow, full-stack marketplace.
The roadmap is a long one but we're excited to be building it
The roadmap is a long one but we're excited to be building it
Glad to be partnering with @Multihopper
Payments has been the next milestone for our marketplace for a while now.
It was only right for us to partner with a team delivering private and compliant routing infrastructure.
Procure -> Spend privately -> Ship safely 🤝
1
0
5
62
Eamonn | Procur3 retweeted
India's largest exchange just confirmed a $16M loss from wallets it had already retired.
CoinDCX: 15.99M USDT drained from deposit addresses compromised in a July 2025 breach.
It stopped using them. It never stopped funds arriving at them.
Week of Oct 19-26
CoinDCX: 15.99M USDT drained from deposit addresses compromised in a July 2025 breach.
It stopped using them. It never stopped funds arriving at them.
Week of Oct 19-26
1
2
5
307
Just seen this today.
A lot of hacks go unreported from the main channels.
Bridge related and previously audited
A lot of hacks go unreported from the main channels.
Bridge related and previously audited
A message from Cysic to the party responsible for the exploit:
In the interest of reaching an amicable resolution, we are offering a recovery bounty of approximately 10% for your cooperation in returning approximately 90% of the identified ETH proceeds from the unauthorized minting of 10,000,000 CYS.
Specifically, return 275.872 ETH in native ETH on Ethereum mainnet to the following address controlled by the Cysic Foundation:
0xe3e8E1147a47dCf42fa73892D74928544fe5a6A9
The return window is 72 hours from the on-chain publication of this message on Ethereum mainnet.
Upon verification that 275.872 ETH was received at the designated address by the deadline, you may retain the remaining identified ETH proceeds, approximately 30.652 ETH, as the recovery bounty. This bounty is excluded from the 275.872 ETH repayment amount and does not need to be returned. We will publicly acknowledge your cooperation and consider Cysic’s ETH recovery claim under this offer resolved.
We have reconstructed the key stages of the attack and preserved the supporting technical and on-chain evidence. If the funds have not been returned by the deadline, the matter will be escalated with law enforcement to pursue a full criminal investigation.
BSC on-chain message: bscscan.com/tx/0x2d737d1ef…
ETH on-chain message: etherscan.io/tx/0x2e238635c…
0
0
0
28
Everything you need to have ready when posting your security audit RFP and how this drastically changes the quality of the quotes you get back.
Share if useful
Share if useful
The Pre-audit checklist every team should refer to when planning their external security reviews (smart contract audits & pentesting).
Link in comments.
0
1
5
172
Eamonn | Procur3 retweeted
2 security RFPs listed yesterday.
- A token audit for a team on @CantonNetwork
- A smart contract audit for a protocol on @base
Planning your smart contract audits? Use Procur3.
- A token audit for a team on @CantonNetwork
- A smart contract audit for a protocol on @base
Planning your smart contract audits? Use Procur3.
1
4
9
176
2 new security audit RFPs went live on @procur3 today
1 x token audit on @CantonNetwork
1 x protocol on @base
Both looking for smart contract auditors that are vetted and experience.
1 x token audit on @CantonNetwork
1 x protocol on @base
Both looking for smart contract auditors that are vetted and experience.
4
1
20
682
Agreed - AI loves blogs
Get your blog game up. I am religious with it.
0 marketing background but we're doing well.
Still a way to go
Get your blog game up. I am religious with it.
0 marketing background but we're doing well.
Still a way to go
traffic from ChatGPT is skyrocketing on my apps
and Ilias shares a gem here
this is such a good framework
side note: i looked into it and blog posts are 73% of what AI looks at when replying
blogging is faaarr from being dead
0
0
0
40
Another security RFP closed on @procur3
This time for a pentest of a wallet.
Congrats @ShieldifySec team on winning the engagement.
Our comparison tooling allows you to shortlist auditors based on relevant experience, merit, timelines and so much more.
Decision making becomes easier and protocol teams have confidence in the selection they make.
gProcur3
This time for a pentest of a wallet.
Congrats @ShieldifySec team on winning the engagement.
Our comparison tooling allows you to shortlist auditors based on relevant experience, merit, timelines and so much more.
Decision making becomes easier and protocol teams have confidence in the selection they make.
gProcur3
A wallet provider put one scope to the market and let specialist firms compete for it.
The wallet team compared coverage, timeline and named reviewers before making the award.
Congratulations to @ShieldifySec on winning the engagement following a competitive RFP process
1
1
9
325