Tests that cover entry but not exit, creation but not closure, or queueing but not execution have the same blind spot.
In its first six months, our Test Terminator skill contributed to 84 verified findings: 10 Critical, 36 High, 38 Medium.
x.com/ZeroCool_AI/st…
In its first six months, our Test Terminator skill contributed to 84 verified findings: 10 Critical, 36 High, 38 Medium.
x.com/ZeroCool_AI/st…
1
0
0
74
If you're interested in using Zero Cool to secure your protocol, reach out now to request a demo (DM is open!) or visit us at zerocool.ai
0
0
2
43
Congratulations to @Enter_Elysium and the @Kinetiq_xyz team on the mainnet launch. We're proud to work together to help secure the ecosystem.
0
0
3
241
Zero Cool retweeted
Teams building on Elysium may apply for @ZeroCool_AI AI audit credits, provided by @KinetiqFND
Each audit includes a fix review.
Security above all.
e/acc
Each audit includes a fix review.
Security above all.
e/acc
48
26
210
33,124
Many AI false positives are the same weak conclusion, repeated.
So once we understand one, we store it as additional information for the next review. We keep that context in four layers. 🧵
So once we understand one, we store it as additional information for the next review. We keep that context in four layers. 🧵
1
0
9
786
But it's easy to over compensate. When our filter rejects a real bug, we find out why, fix the rule and recheck every finding the same mistake could have touched.
Read the full article, How we reduce false positives in AI security reviews:
x.com/ZeroCool_AI/st…
Read the full article, How we reduce false positives in AI security reviews:
x.com/ZeroCool_AI/st…
1
0
1
51
If you're interested in using Zero Cool to secure your protocol, reach out now to request a demo (DM is open!) or visit us at zerocool.ai
0
0
0
38
Every Zero Cool scan includes a fix review.
Patch a finding, then submit the fix in the web portal, or have your agent send it through the API and pull the result. Zero Cool checks that the fix closes the issue and doesn't introduce any new issues.
zerocool.ai
Patch a finding, then submit the fix in the web portal, or have your agent send it through the API and pull the result. Zero Cool checks that the fix closes the issue and doesn't introduce any new issues.
zerocool.ai
0
0
4
393
Zero Cool found a bug in a pre-launch Tangent oracle: it hard-coded 1e18 as the share unit.
With a non-18-decimal vault, $100 of collateral could pass LTV checks as if it were worth trillions and mint unbacked USG.
We sent a PoC, and Tangent fixed it before launch.
With a non-18-decimal vault, $100 of collateral could pass LTV checks as if it were worth trillions and mint unbacked USG.
We sent a PoC, and Tangent fixed it before launch.
2
0
18
929
Symmetry Sniper was one of the skills that caught it: the share-to-asset conversion used a different decimal scaling than a round trip needs.
The fix scales the oracle math to the real share and asset decimals.
Read the case study:
x.com/ZeroCool_AI/st…
The fix scales the oracle math to the real share and asset decimals.
Read the case study:
x.com/ZeroCool_AI/st…
0
0
3
204
